Privacy Policy

01Who We Are

North Averstone is a remote-first advisory practice founded in 2026. We provide strategic guidance on operations, positioning, financial planning support, growth strategy, and general small-business management. This policy applies to visitors of our website, prospective clients who contact us, and active clients engaged in a consulting relationship. Throughout this document, "we," "us," and "our" refer to North Averstone, and "you" refers to any individual whose personal information we process.

We act as a data controller for the information we collect about you directly, and as a data processor when we handle information about your own customers, staff, or contacts that you share with us during an engagement.

02Information We Collect

We collect only what we need to communicate with you, deliver our services, and run our business responsibly. The categories below describe the types of information we may process.

Contact and identity details

When you complete a form on our website, request a consultation, or email us, we collect information such as your name, business name, email address, telephone number, role, and the message you send. This information allows us to respond and to determine whether we are a good fit for your needs.

Business and engagement information

During a consulting engagement, clients routinely share operational and commercial information so that our advice is grounded in reality. This can include financial summaries, sales figures, marketing performance, organizational charts, vendor lists, product roadmaps, pricing models, and strategic goals. We only ask for what is relevant to the work you have retained us to perform.

Meeting recordings and notes

With your knowledge, we may record video or audio of consulting sessions, or take written notes, so that deliverables accurately reflect our discussions. Recordings are made only when the client is informed at the start of the session. If you prefer that a session not be recorded, you may tell us and we will rely on written notes instead.

Payment information

When you pay for services, our payment processors collect the details necessary to complete the transaction. We do not store full card numbers on our own systems; we retain invoices, payment confirmations, and the billing contact associated with your account.

Website and analytics data

When you visit our website, we automatically collect limited technical information such as your IP address, browser type, device characteristics, referring pages, and the pages you view. This helps us understand how visitors use the site and keep it secure. See the Cookies section below for more detail.

03How We Use Your Information

We use the information described above for the following purposes:

• To respond to inquiries and provide quotes, proposals, and scheduling for prospective engagements.
• To deliver our consulting services, including preparing analyses, recommendations, deliverables, and follow-up guidance.
• To manage the client relationship, including issuing invoices, processing payments, and keeping accurate engagement records.
• To improve our services by understanding which offerings are useful and how our website performs.
• To communicate with you about your engagement, changes to our terms, or updates you have asked to receive.
• To comply with legal, tax, and accounting obligations and to protect our legitimate business interests.

We do not sell your personal information, and we do not use the confidential business information you share with us for any purpose other than serving your engagement.

04Legal Bases for Processing

Where data protection law requires a legal basis, we rely on the following: performance of a contract when we process information to deliver services you have engaged us for; legitimate interests when we operate, secure, and improve our business in ways that do not override your rights; consent when you opt in to marketing communications or agree to a session recording; and legal obligation when we must retain records for tax or regulatory reasons. Where we rely on consent, you may withdraw it at any time.

05Subprocessors and Sharing

As a remote firm, we rely on trusted third-party tools to operate. We share the minimum information necessary with these subprocessors, each of which is bound by contractual confidentiality and security obligations. Categories of subprocessors include:

• Communication and video conferencing platforms used to hold consulting sessions and exchange messages.
• Cloud storage and document collaboration providers where deliverables and shared files are kept.
• Payment processors and accounting software used to invoice and record transactions.
• Email and scheduling services used to correspond with you and arrange meetings.
• Website hosting and analytics providers that keep our site running and measure its performance.

We may also disclose information when required by law, in response to a valid legal request, to enforce our agreements, or to protect the rights, safety, and property of our clients, our firm, or others. If North Averstone is ever involved in a merger, acquisition, or sale of assets, client information may be transferred as part of that transaction, and we will notify affected clients.

06Data Retention

We keep personal and business information only for as long as it is needed for the purposes described in this policy, or as required by law. In practice, engagement records, deliverables, and correspondence are retained for the duration of the client relationship and for a reasonable period afterward so that we can address follow-up questions, honor warranty-style commitments, and meet tax and accounting requirements. Meeting recordings are retained only as long as they are useful to the engagement and are deleted or archived according to the client's preference. When information is no longer needed, we delete it or anonymize it using reasonable measures.

07Data Security

We take practical, layered steps to protect information. These include access controls that limit engagement data to the people working on your matter, encryption in transit for communications and file transfers where our tools support it, strong authentication on the accounts we use, and periodic review of the subprocessors we rely on. Because we work remotely, we also maintain internal practices around device security and secure handling of client files. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we work to protect your information consistent with industry expectations for a firm of our size.

08Cookies and Analytics

Our website uses cookies and similar technologies to function correctly and to help us understand usage. Essential cookies keep the site secure and remember basic preferences. Analytics cookies help us see which pages are visited and how the site performs so we can improve it. You can control cookies through your browser settings, including blocking or deleting them, though some features of the site may not work as intended if you do. We do not use cookies to build advertising profiles about you.

09Your Rights and Choices

Depending on where you live, you may have rights over your personal information, including the right to:

• Access the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Delete personal information, subject to our legal and contractual retention needs.
• Object to or restrict certain processing based on our legitimate interests.
• Withdraw consent where processing is based on consent, such as marketing or recordings.
• Request portability of information you have provided to us in a usable format.

To exercise any of these rights, contact us using the details at the end of this page. We will respond within the timeframe required by applicable law and may ask you to verify your identity before acting on a request. If you believe we have not handled your information properly, you may also contact your local data protection authority.

10Information You Share About Others

During an engagement, you may share information about your employees, customers, or contacts. You are responsible for ensuring you have the right to share that information with us. We process it solely to perform the services you have requested, and we handle it under the confidentiality terms of your engagement. If you ask us to return or delete such information at the end of the engagement, we will do so subject to our legal retention obligations.

11International Data Transfers

Because we and our subprocessors operate online, your information may be processed in countries other than the one in which you live. Where information is transferred across borders, we take reasonable steps to ensure it remains protected consistent with this policy and applicable law, including relying on providers that offer appropriate safeguards.

12Children's Privacy

Our services are intended for businesses and the adults who run them. We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us and we will delete it.

13Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our tools, or the law. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify active clients directly. We encourage you to review this page periodically. Related policies are available at /pages/terms-of-service and /pages/payment-billing-policy.