Privacy policy

Who we are

Njord Star Ltd ("we", "us", "our") runs this website and is the controller of the personal data described here. We are a company registered in England and Wales (company number 15382442), with our registered office at 71-75 Shelton Street, London WC2H 9JQ, United Kingdom.

For anything to do with your data or this policy, email us at hey@njordstar.co.

This policy covers the personal data we collect through this website. If you become a client, a separate signed agreement covers the data involved in that work.

What we collect and why

We only collect what we need. Here is the full picture.

When you fill in the apply or contact form

You give us your name, email, your business or website, the services you are interested in, and anything you write in the message or notes. We use this to respond to you and to take the first steps towards possibly working together.

When you use the Paid Search Validation tool

You enter some figures about your business and your email address. We use these to generate your result and to email you a link to it. The figures you enter sit in our system as part of your contact record.

When you subscribe to our marketing emails

If you tick the marketing opt-in, we add you to our email list and send you occasional emails about what we do. This is entirely optional. You can unsubscribe at any time using the link in any email.

When you browse the site

We use analytics to understand how the site is used, and advertising tools to measure our ads. These only run once you accept them through our cookie banner. Before you choose, we run a privacy-friendly, anonymous version that does not use cookies or store anything on your device. See our Cookie Policy for the detail.

Our lawful bases

Under UK data protection law we need a lawful basis for each use of your data. Ours are:

• Responding to your enquiry or application: taking steps to enter into a contract, and our legitimate interest in answering people who get in touch.
• Sending you marketing emails: your consent. You can withdraw it at any time.
• Analytics and advertising cookies: your consent, given through the cookie banner.
• Keeping our site secure and preventing fraud or misuse: our legitimate interest.
• Keeping accounting and tax records: our legal obligations.

Who we share it with

We do not sell your data. We share it only with the service providers that help us run the website and our business. Each one acts on our instructions under a contract. They are:

• GoHighLevel, our CRM, which handles our forms, contacts, and email sending.
• Google (Google Analytics and Google Ads), for analytics and advertising.
• PostHog, for product analytics.
• Vercel, which hosts the website.
• CookieYes, which manages your cookie consent.
• Google Workspace (Gmail), our business email.

We may also share data where the law requires it, for example with HMRC or in response to a lawful request.

Sending data outside the UK

Some of our providers are based in the United States (GoHighLevel, Google, Vercel, and Google Workspace), so your data may be transferred there. When that happens, we make sure the transfer is protected by a mechanism approved under UK data protection law. That means either the provider is covered by UK "adequacy" rules (such as the UK extension to the EU-US Data Privacy Framework), or we rely on the ICO's International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses. PostHog stores our data in the EU, so no such transfer applies there.

How long we keep it

We keep your data only as long as we need it.

• If you enquire or apply but do not become a client, we keep your contact record for up to 12 months, then delete it, unless you ask us to remove it sooner.
• If you become a client, your data is kept for as long as we work together and then in line with the agreement we sign with you.
• Marketing subscribers stay on the list until they unsubscribe.
• Records we must keep for tax and accounting are held for six years, as the law requires.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the data we hold about you
• ask us to correct anything that is wrong
• ask us to delete your data
• ask us to limit or stop using it
• object to us using it, including for marketing
• ask us to transfer it to another provider
• withdraw any consent you have given, at any time

To use any of these, email hey@njordstar.co. We will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the ICO at ico.org.uk, or by calling their helpline. We would appreciate the chance to put things right first, so please consider contacting us before you do.

Changes to this policy

If we change this policy we will update the date below. Please check back from time to time.

Last updated: 12 June 2026