Privacy Policy

Information we may receive

If you contact Northstone by email, we may receive your name, contact details, organisation, role, message and any information you choose to provide.

How information may be used

We may use this information to respond to your enquiry; evaluate and discuss a potential professional engagement; communicate with you in relation to an existing business relationship; maintain appropriate business and compliance records; and protect our legal rights and the security of our communications.

The relevant legal basis may include taking steps at your request before entering into a contract, performing a contract, complying with legal obligations and pursuing legitimate business interests, as applicable.

Sharing and transfers

We do not sell personal information. Information may be shared with service providers supporting email, hosting, security, professional administration or legal compliance where reasonably necessary and subject to appropriate safeguards.

If information is transferred outside the European Economic Area, Northstone will use an applicable transfer mechanism where required.

Retention

Information is retained only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, accounting or record-keeping requirements.

Your rights

Subject to applicable law, you may have rights to access, correct or erase your personal information, restrict or object to certain processing, or request data portability. You may also lodge a complaint with the Estonian Data Protection Inspectorate or another competent supervisory authority.

To make a privacy request, contact info@northstone.ee.

Website data and cookies

The first release of this website is intended to operate without non-essential cookies or behavioural advertising. If analytics or other non-essential tools are introduced, this policy and the website’s consent mechanism must be updated before those tools are activated.

Updates

This policy may be updated to reflect changes in the website, our operations or applicable requirements. The effective date should be displayed when the policy is published.