01 / Who we are
NEURANORTH LTD, trading as Neura North (“we”, “us”, “Neura North”), is a company registered in England and Wales under company number 16548294, with its registered office in Leeds, West Yorkshire. We are the data controller for personal data collected via this website and through our services.
Our designated contact for data protection matters is Daniel Doherty: danny@neuranorth.co.uk.
02 / What data we collect
We collect personal data when you interact with us in the following ways:
- Enquiry forms and email: name, organisation, role, email address, phone number (if provided), and the contents of your message.
- Audit and booking calls: the information you supply when booking, including business context, current AI and software usage, and any preferences or accessibility needs.
- Business prospects (B2B marketing): publicly available business contact information — business name, business contact’s name and role, business email address, business phone number, website, and publicly listed details about the business. We obtain this from public sources only: search and business listings, the Companies House public register, and prospects’ own public business websites and company pages. We do not buy or rent marketing lists.
- Website analytics & advertising: with your consent, Google Analytics 4 (pages visited, device type, approximate location) and, for visitors from our Google or Meta ads, the Google Ads tag and Meta Pixel, used to measure ad performance. Governed by Google Consent Mode v2 and our cookie policy.
- Cookies: strictly necessary cookies for site function. See our cookie policy.
03 / Lawful basis for processing
We process personal data on the following lawful bases under UK GDPR Article 6:
- Contract performance — when delivering services you have engaged us to provide.
- Legitimate interests — responding to enquiries, managing the client relationship, and improving our services. We have balanced these interests against your rights and freedoms.
- Legal obligation — complying with tax, accounting, and other statutory record-keeping requirements.
- Consent — for any optional marketing communications, given separately and withdrawable at any time.
04 / Business-to-business marketing
Where we contact businesses we have not worked with before, we do so under legitimate interests (UK GDPR Article 6(1)(f)) and in line with the Privacy and Electronic Communications Regulations (PECR). In practice that means:
- We only send unsolicited marketing email to corporate subscribers — limited companies, limited liability partnerships and public limited companies — each verified against the Companies House public register before first contact. We do not send unsolicited marketing email to sole traders or unincorporated partnerships without their consent.
- Every marketing email identifies NEURANORTH LTD (trading as Neura North), explains how we found your business, and offers a one-step opt-out: reply “no thanks” and we will not email you again.
- We do not use open-tracking pixels or read receipts in this outreach.
- We keep a permanent suppression list so that once you opt out, you stay opted out.
- We have carried out a Legitimate Interests Assessment for this processing; a copy is available on request from danny@neuranorth.co.uk.
05 / How long we keep it
Enquiry-only data is retained for 12 months from last contact, then deleted. Client engagement data is retained for the duration of the engagement and for 7 years afterwards in line with statutory record-keeping requirements. Financial records are retained for 7 years.
Business prospect data we have collected but had no engagement with is retained for up to 12 months from collection, then deleted or anonymised. Our suppression list (opt-outs, bounces, complaints) is retained indefinitely — the minimum needed to make sure we never contact you again after you have asked us not to.
06 / Who we share it with
We do not sell personal data. We share data only with the following categories of processor, each under a data processing agreement:
- IT and hosting providers (UK or EEA based)
- Email and calendar providers (Microsoft 365 / Google Workspace where used)
- Accounting and bookkeeping providers
- Analytics and advertising providers, with your consent: Google (Analytics & Ads) and Meta Platforms (Pixel & Conversions API), to measure website and ad performance.
- Where strictly necessary, professional advisers (legal, insurance) under their own duties of confidentiality.
We do not transfer personal data outside the UK or EEA except where necessary and supported by an adequacy decision or appropriate safeguards under UK GDPR.
07 / Your rights
You have the following rights under UK GDPR:
- Access — request a copy of the personal data we hold about you.
- Rectification — request correction of inaccurate or incomplete data.
- Erasure — request deletion of your data where there is no continuing lawful basis to hold it.
- Restriction — request that we limit processing.
- Portability — request a structured, machine-readable copy of data you have provided.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — at any time, for any processing based on consent.
- Complain — to the Information Commissioner’s Office (ico.org.uk) if you believe we have mishandled your data.
To exercise any of these rights, email danny@neuranorth.co.uk. We will respond within one calendar month.
To opt out of our B2B marketing specifically, reply “no thanks” to any of our emails, or email danny@neuranorth.co.uk, and we will stop and add you to our permanent suppression list immediately.
08 / Security
We apply technical and organisational measures appropriate to the sensitivity of the data we handle, including encrypted communications, access controls, and regular review of our supplier security posture.
09 / Changes to this policy
We will update this policy as our practices change or as required by law. The “last updated” date at the top of this page indicates the version. Material changes will be flagged in our outgoing communications.