1.INFORMATION WE COLLECT
We may collect personal and non-personal information in the followingways:

Information You Provide Voluntarily:
• When you fill out contact forms,request information, subscribe to updates, or engage with our services.
• This may include your name, emailaddress, phone number, and other relevant business or personal details.

Information Collected Automatically:
• When you visit our website, we maycollect data such as your IP address, browser type, pages visited, and timespent on our site.
• This helps us understand how visitorsuse our site and improve the user experience.

Cookies & Tracking Technologies:
• We may use cookies and similar technologies to enhance functionality and measure website performance.
• You can adjust your browser settings to refuse cookies or alert you when they are being used.
‍

2. LEGAL BASIS FOR PROCESSING (GDPR)
Under the General Data Protection Regulation (GDPR), we process your personal data only where we have a legal basis to do so.
This includes:
• Your consent
• Fulfillment of a contract
• Compliance with legal obligations
• Our legitimate business interests (unless overridden by your data protection interests or fundamental rights and freedoms)
‍

3. HOW WE USE YOUR INFORMATION
We use the information collected to:
• Respond to enquiries and provide services.
• Send updates or marketing communications (only if you’ve opted in).
• Improve our website, offerings, and user experience.
• Meet legal, regulatory, or compliance obligations.


4. SHARING YOUR INFORMATION
We do not sell your personal information.

We may share your information with trusted third parties who help us operate our website or services (e.g., hosting providers, analytics platforms, email marketing tools), provided they comply with privacy obligations.

We may disclose your information if required by law or to protect our legalrights.


5. YOUR RIGHTS
Depending on your location, you may have the following rights:
• Access your personal information
• Correct or update your data
• Request deletion of your data
• Object to or restrict how we process your information
• Data portability (applicable under GDPR)
• Opt out of the sale of your personal data (as per CCPA)
• Lodge a complaint with a supervisory authority (e.g., OAIC in Australia, or your national data protection regulator)


6. INTERNATIONAL DATA TRANSFERS
If you are located outside of Australia, your information may be transferred to and processed in Australia or other countries. We ensure that such transfers comply with applicable privacy laws and include appropriate safeguards to protect your information.


7. DATA SECURITY
We implement reasonable administrative, technical, and physical safeguards to protect your personal data from loss, misuse, or unauthorised access. However, no method of transmission over the internet is completely secure.


8. RETENTION OF DATA
We retain your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.


9. CHILDREN’S PRIVACY
Our website is not intended for children under the age of 13. We do not knowingly collect or solicit personal data from children.


10. THIRD-PARTY LINKS
Our website may contain links to other websites. We are not responsible for their content or privacy practices. Please review their privacy policies.


11. UPDATES TO THIS POLICY
We may revise this Privacy Policy periodically. We will notify you of any changes by updating the effective date and, where appropriate, providing direct notice.
‍

12. CONTACT US
If you have any questions or requests related to this Privacy Policy or your personal information, please contact:
NORTH AND NORTH PTY LTD
79 Chapel St, Marrickville NSW 2204, Australia
Email: design@northandnorth.com
Phone: +61 2 9557 1111