Privacy Policy

    Plain English, because that is how everything else here is written. Last updated: 11 August 2026.

    Who we are

    NorthStar Analytics Ltd (company number 12392254) is the data controller for this website. The company is run by one person, Zekeriya Mulbay, and your data is handled by that person, not passed around.

    Contact for anything in this policy: zekeriya@northstaranalytics.co.uk

    What we collect

    • Enquiries. When you use the contact form we collect your name, work email, company, role and the challenge you describe. That is all the form asks for.
    • Accounts. If you create an account (for example to save results from the free tools), we store your email address and an encrypted password.
    • Saved tool results. When you are signed in, the inputs and outputs of the free tools you run can be saved to your account so you can return to them. This only happens while signed in.
    • Technical basics. Our hosting provider keeps standard server logs (IP address, browser type, pages requested) as part of running the site securely.

    We do not collect special category data, and we do not run advertising or third-party tracking cookies. The only cookies in use are the ones that keep you signed in.

    Why we use it

    • To reply to your enquiry and discuss whether we can help (legitimate interest, and to take steps at your request before any contract).
    • To deliver and administer an engagement if we work together (contract).
    • To let you save and revisit tool results when signed in (your account, your choice).
    • To keep the site secure and working properly (legitimate interest).

    We do not sell personal data, and we do not use your enquiry to add you to a marketing list without asking you first.

    Where it is stored

    Data is processed by a small set of providers, each under contract:

    • Supabase — stores the website database (enquiries, accounts, saved tool results).
    • Cloudflare — hosts the website and its logs.
    • Make.com — receives enquiry form submissions to trigger a reply workflow.

    Where a transfer outside the UK happens, it relies on an adequacy decision or standard contractual safeguards. We do not use your data to train AI models.

    How long we keep it

    Enquiries are kept while there is a genuine business conversation or engagement, then deleted on request. Saved tool results are deleted when you delete them or close your account. Server logs rotate on the provider's standard schedule.

    Your rights

    Under UK GDPR you can ask us to:

    • show you what we hold about you,
    • correct it,
    • delete it,
    • restrict or object to how it is used,
    • hand it over in a portable format.

    Email zekeriya@northstaranalytics.co.uk and it will be handled, normally within a month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk), though we would rather fix it directly first.

    Changes

    If this policy changes in a material way, the update will be noted on this page with a new date.