← Back to North & Within

Privacy Policy

Last updated: September 2026

Who We Are

This website is operated by North & Within AB, Furulundsgatan 69, 621 54 Visby, Sweden (organisationsnummer 559561-9338). North & Within AB is the data controller for the personal data described in this policy.

Questions about this policy or your data can be sent to hello@northandwithin.se.

What Data We Collect

This website does not use cookies, analytics, or advertising tracking of any kind. We only collect personal data that you choose to give us directly, or that your browser sends automatically when loading the page:

  • Contact details you provide ~ if you email or call us, we receive whatever you share, such as your name, email address, phone number, and the content of your message.
  • Technical data ~ when this page loads, your browser requests fonts directly from Google (Google Fonts), which involves your IP address being sent to Google's servers. We do not receive or store this data ourselves; see "Google Fonts" below.

How We Use Your Data

We use the contact details you send us to respond to your enquiry and, where relevant, to deliver the services you've asked for. If we go on to work together, we store your contact and project-related information in ActiveCampaign, the platform we use to manage client communication and, where you've agreed to it, to send occasional email updates.

The legal basis for this processing is our legitimate interest in responding to enquiries and running our business, the steps necessary to enter into or perform a contract with you, and, for marketing emails, your consent, which you can withdraw at any time via the unsubscribe link in any email or by contacting us directly.

Third-Party Services

Google Fonts ~ this site loads typefaces from Google Fonts (fonts.googleapis.com / fonts.gstatic.com). Loading these fonts causes your browser to connect directly to Google's servers, which may process your IP address. Google acts as an independent controller for this data; see Google's own privacy policy for details.

ActiveCampaign ~ we use ActiveCampaign, Inc. (based in the United States) as our email marketing and client communication platform. Where your data is stored or processed by ActiveCampaign, this may involve a transfer of data outside the EU/EEA, which ActiveCampaign safeguards through Standard Contractual Clauses and its own data processing agreement.

How Long We Keep Your Data

We keep enquiry and client data for as long as it's needed to respond to you, deliver our services, and meet our legal and accounting obligations, after which it is deleted or anonymised. You can ask us to delete your data sooner at any time, as described below.

Your Rights

Under the GDPR, you have the right to access the personal data we hold about you, request its correction or deletion, restrict or object to certain processing, and request that your data be transferred to you or another provider. To exercise any of these rights, contact us at hello@northandwithin.se.

If you believe your data has been mishandled, you also have the right to lodge a complaint with Sweden's data protection authority, Integritetsskyddsmyndigheten (IMY), at imy.se.

Changes To This Policy

We may update this policy from time to time as our website or services change. The date at the top of this page shows when it was last revised.