Privacy Policy | Northern Built Systems - How We Protect Your Data
Last Updated: February 7, 2026
Northern Built Systems ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
By using our website or services, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
Information You Provide to Us
We collect information that you voluntarily provide when you:
- Fill out contact forms: Name, email address, phone number, business name, and any other information you choose to provide
- Request our services: Details about your business, website requirements, and project specifications
- Communicate with us: Email correspondence, phone conversations, and other communications
- Make payments: Payment information is processed directly by Stripe, a third-party payment processor. We do not store or have access to your full credit card details.
Information Collected Automatically
When you visit our website, we automatically collect certain information, including:
- Analytics data: Through Umami Analytics, we collect privacy-friendly website usage data such as page views, referral sources, device types, and general geographic location (country/region level only). Umami does not use cookies and does not collect personally identifiable information.
- Technical information: IP address (anonymized), browser type, operating system, and device information
- Usage data: Pages visited, time spent on pages, and navigation patterns
2. How We Use Your Information
We process personal information based on one or more of the following legal grounds: your consent, the performance of a contract, compliance with legal obligations, and our legitimate business interests.
We use the information we collect for the following purposes:
- Service delivery: To provide website design services, respond to inquiries, and fulfill contractual obligations
- Communication: To contact you regarding your project, send service updates, and respond to your questions
- Payment processing: To process transactions through our payment processor, Stripe
- Marketing automation: To manage client relationships and automate follow-ups through GoHighLevel (GHL)
- Website improvement: To analyze website performance and user experience through Umami Analytics
- Legal compliance: To comply with applicable laws and regulations
- Business operations: To maintain records, prevent fraud, and protect our legal rights
3. How We Share Your Information
We do not sell, trade, or rent your personal information to third parties. We may share your information with:
Service Providers
- Stripe: Payment processing services
- GoHighLevel (GHL): Customer relationship management and marketing automation
- Webflow: Website hosting and development platform for client websites
- Umami Analytics: Privacy-focused website analytics (anonymized data only)
These third-party service providers have access to your information only to perform specific tasks on our behalf and are obligated to protect your information and use it only for the purposes we specify.
Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, or government regulations).
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
4. Data Retention
We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. Specifically:
- We keep contact information and project-related data until you request deletion
- Financial records are retained for 7 years to comply with tax and accounting regulations
- Website analytics data is retained in anonymized form indefinitely for business analysis
5. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information (subject to legal obligations)
- Opt-out: Unsubscribe from marketing communications at any time
- Data portability: Request your data in a structured, machine-readable format
- Restriction: Request limitation on how we process your information
To exercise any of these rights, please contact us using the information provided at the end of this policy.
6. Cookies and Tracking Technologies
Our website uses minimal tracking technologies:
- Umami Analytics: We use Umami, a privacy-friendly analytics platform that does not use cookies and does not track personal information. Umami collects anonymous aggregate data about website usage.
- Essential cookies: We may use strictly necessary cookies to enable core website functionality.
We do not use third-party advertising cookies or tracking pixels on our website.
Do Not Track and Global Privacy Control: We currently do not respond to browser "Do Not Track" or Global Privacy Control (GPC) signals. However, because we do not sell personal data or use advertising trackers, such signals do not materially affect our data practices.
7. Data Security
We implement appropriate technical and organizational security measures to protect your personal information, including:
- Encryption of data in transit using SSL/TLS protocols
- Secure storage of sensitive information
- Regular security assessments and updates
- Limited access to personal information on a need-to-know basis
- Use of reputable third-party service providers with strong security practices
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
8. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.
9. California Privacy Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information we collect, use, and disclose
- Right to request deletion of your personal information
- Right to opt-out of the sale of personal information (note: we do not sell personal information)
- Right to non-discrimination for exercising your privacy rights
10. International Data Transfers
Northern Built Systems operates from Minnesota and provides services to clients throughout the United States. Your information may be transferred to and processed in locations outside your state or country of residence. By using our services, you consent to such transfers.
11. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:
- Posting the updated policy on this page with a new "Last Updated" date
- Sending an email notification to registered clients (for significant changes)
Your continued use of our services after any changes constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:
Northern Built Systems
Minnesota, United States
Phone: (612) 505-9183
Email: contact@northernbuiltsystems.com
We will respond to your request within 30 days of receipt.
