Privacy Policy

Working draft, not legal advice. The data-flow sections below describe what the site actually does. The controller's identity is a placeholder, same reasoning as imprint.astro; the whole policy needs legal review before launch.

Controller

[Name, address and contact of the data controller, matching the imprint]

The NORTHSTAR Assessment

When you complete the assessment, we process your first name, email address and result. This data is sent to Kit (ConvertKit), our email marketing provider, on the basis of your consent (Art. 6(1)(a) GDPR), to deliver your results and further information. A hidden form field (a honeypot) exists only to detect spam and is never filled in or read during normal use.

Booking a call

Booking a strategy call runs through Calendly. When you book a slot, Calendly processes your details under its own privacy policy.

Hosting

This site is served by Cloudflare Pages. Cloudflare processes technical access data (e.g. IP address, timestamp) to deliver and protect the site.

Cookies and tracking

[To be completed once an analytics tool is chosen, see PLAN.md phase 8]

Your rights

You have the right to access, rectify, erase, restrict processing, port your data and object, under Art. 15 to 21 GDPR. Use the contact address above. You also have the right to lodge a complaint with a data protection authority.