Privacy Policy

At Northern Leaks, a trading name of Stand Out Marketing Studio Limited (Company number 11745724), we are committed to protecting your personal data and ensuring transparency in how we collect, use, and share it. This policy outlines our practices for the Northern Leaks website (northernleaks.co.uk) and our customer relationship management (CRM) system, which facilitate connections to trusted leak detection specialists. Please read this policy carefully. For questions or to exercise your data rights, contact us via the form on our website.

Who We Are

Northern Leaks, operated by Stand Out Marketing Studio Limited, a company registered in England and Wales (Companies House number: 11745724), connects customers seeking leak detection services with independent, UK-based specialists. We do not provide leak detection services directly but act as a facilitator, passing your enquiry to a trusted partner who will deliver the service under their own company name and terms. Stand Out Marketing Studio Limited is not liable for services provided by these partners.

What Personal Data We Collect

We collect only the data necessary to connect you with leak detection specialists, including:

• Full name
• Email address
• Telephone number
• Business name and address (if applicable)
• Website address (if applicable)
• Enquiry details (e.g., description of leak issue)
• Call recordings (see “Call Recording” section below)

Data is collected when you submit a contact form, call our dedicated numbers, or interact with our website.

How We Use Your Data

We process your data under the lawful basis of legitimate interests to facilitate leak detection services and connect you with specialists. Our legitimate interests assessment ensures your rights are balanced with our business needs. We use your data to:

• Store and manage enquiries in our secure CRM system
• Share your data with a selected leak detection specialist to fulfil your request
• Provide estimates or updates related to your enquiry
• Send service-related communications (e.g., confirmation of specialist assignment)
• Record calls for quality assurance and dispute resolution

With your explicit consent, we may send occasional updates about Northern Leaks services. You can withdraw consent at any time via our website form.

Call Recording

Calls made or received via our dedicated numbers (powered by Twilio) are recorded for quality assurance, training, and dispute resolution. Recordings are:

• Stored securely for 30-120 days, then deleted unless required for legal or regulatory purposes
• Accessible only to authorised Northern Leaks staff
• Processed under the lawful basis of legitimate interests

We inform callers of recording at the start of calls where possible. By using our services, you acknowledge calls may be recorded. Request details of recordings via our website form.

How We Protect Your Data

We take robust measures to safeguard your data, including:

• Using encrypted systems (AES-256 for data at rest, TLS 1.2+ for data in transit)
• Regularly reviewing data accuracy
• Limiting access to authorised Northern Leaks staff and relevant specialists
• Deleting unnecessary data promptly, unless required by law

Data Retention

We retain your data only as long as necessary for:

• Facilitating your enquiry (typically until job completion)
• Legal obligations (e.g., financial records for 6 years per HMRC rules)
• Call recordings (30-120 days, unless needed for disputes)

Upon dissolution of Stand Out Marketing Studio Limited, data may be transferred to a successor entity or securely deleted, in line with UK GDPR.

Who We Share Your Data With

To deliver our service, we share your data with:

• Leak Detection Specialists: Independent UK-based companies who receive your data to provide services. Once shared, they become data controllers and must comply with UK GDPR.
• Third-Party Processors:
  • GoHighLevel (USA, Data Privacy Framework-certified, DPA in place) for CRM and lead management
  • Twilio (USA, DPA in place) for call and SMS services
  • Make.com (EU, DPA in place) for form webhooks
  • Google (USA, DPA in place) for Analytics and Ads (see Google’s Privacy Policy)

Data shared outside the UK is protected by equivalent standards (e.g., Data Privacy Framework for US-based processors). If you contract directly with a specialist, they become the data controller for any further data you provide them, and Northern Leaks is not responsible for their actions.

Your Data Protection Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request erasure (subject to legal obligations)
• Object to or restrict processing
• Withdraw consent for non-essential processing (e.g., marketing)
• Request data portability

We do not use automated decision-making. Contact us via our website form to exercise these rights. We’ll respond within one month, detailing any limitations.

Cookies and Tracking

We use cookies to enhance website functionality, including:

• Necessary Cookies:
  • PHPSESSID: Temporary session cookie, deleted when you close your browser
  • DYNSRV: Load balancer cookie for performance
  • cookie_notice_accepted: Records cookie notice closure
• Analytics Cookies:
  • Google Analytics (_gat, _ga, _gid): Anonymous usage data

Manage cookies via your browser settings. IP addresses and server logs are recorded for security and traffic monitoring, not to track individuals.

Data Ownership and Business Transitions

Northern Leaks (northernleaks.co.uk) and its CRM system are owned by Stand Out Marketing Studio Limited. We reserve the right to retain, use, or transfer data to a successor entity during business changes (e.g., sale or dissolution), subject to UK GDPR compliance. Leak detection specialists have no ownership over our website, CRM, or data unless agreed in writing.

Liability

Northern Leaks connects you to independent specialists who are solely responsible for the services they provide. Stand Out Marketing Studio Limited is not liable for their actions, omissions, or service outcomes. By using our services, you agree your contract is with the specialist, not Northern Leaks.

Applicable Law

This website and its use are governed by English law, with exclusive jurisdiction in English courts.

Queries or Complaints

Contact us via our website form for data concerns. You may also contact the Information Commissioner’s Office: ico.org.uk.

Policy Updates

We may update this policy as needed. Significant changes will be communicated via email or website notice. Continued use of our services constitutes acceptance.