Privacy Policy
Last updated: October 2026
This policy explains what personal data we process when you visit or buy from Northfold, why we process it, and what rights you have under the General Data Protection Regulation (GDPR).
1. Controller
[FULL LEGAL NAME OF THE OWNER], trading as Northfold
Grabenstraße 8, 31084 Freden (Leine), Germany
Email: paterson.amanda67@atomicmail.io
Phone: +49 1590 5606786
2. Visiting the website
This website is hosted by an external hosting provider that processes data on our behalf under a data processing agreement (Art. 28 GDPR). The server automatically records technical data such as your IP address, browser type and version, operating system, referring page, pages visited and the time of access, in order to deliver the site and keep it secure. Log files are deleted after a short period, usually within 30 days.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, working website).
3. Basket
Planners you add to your basket are stored only in your own browser (local storage), so your basket is still there when you come back. This data is not sent to us and you can delete it by emptying the basket or clearing your browser data.
Legal basis: § 25(2) TDDDG (strictly necessary for a function you requested).
4. Ordering and payment
At checkout you are taken to our payment provider (for example Stripe, PayPal, Lemon Squeezy or Payhip), which processes your name, email address, billing address, payment details and the products ordered in order to take the payment and deliver your download. The provider acts under its own privacy policy. If you send an order request by email instead, we process the details in your message to prepare your order and send a payment link.
Legal basis: Art. 6(1)(b) GDPR. Invoices and order records are kept for the statutory retention periods of up to 10 years (§ 147 AO, § 257 HGB), legal basis Art. 6(1)(c) GDPR.
5. Digital delivery
Your download link is sent to the email address you give at checkout, either by the payment provider or by us.
Legal basis: Art. 6(1)(b) GDPR.
6. Contact
If you write to us by email or through the contact form, we process your name, email address, order number (if given) and your message in order to answer you. We delete this data once your request is resolved, unless we must keep it by law.
Legal basis: Art. 6(1)(b) GDPR for questions about an order, otherwise Art. 6(1)(f) GDPR.
7. Newsletter
If you subscribe, we use your email address to send news about new planners. You can unsubscribe at any time and we then delete your address.
Legal basis: your consent, Art. 6(1)(a) GDPR.
8. Cookies and tracking
This website uses no tracking, analytics or advertising cookies. The only data stored on your device is your basket, as described in section 3.
9. Fonts and icons
Our pages load fonts from Google Fonts (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and icons from cdnjs (Cloudflare, Inc., USA). Your browser connects to those servers, which transmits your IP address. Transfers to the USA are based on the EU-U.S. Data Privacy Framework and/or EU standard contractual clauses.
Legal basis: Art. 6(1)(f) GDPR.
10. Storage periods
We keep personal data only as long as necessary for the purposes above. Order and invoice data is kept for the statutory periods, newsletter data until you unsubscribe, and contact requests until they are resolved.
11. Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR), and you may withdraw consent at any time with effect for the future (Art. 7(3) GDPR). To exercise your rights, email paterson.amanda67@atomicmail.io.
You can also complain to a supervisory authority. For our location this is: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany.