Privacy policy
Short version: we collect as little as we can. If you give us your email, we use it to send what you asked for and occasional emails from our characters, until you unsubscribe. We don’t sell data and we don’t use advertising trackers on this site.
1. Who is responsible (controller)
NRH Consulting AB, Swedish org. nr 559371-8876, Ruggebergsvägen 9, Sweden (“North Porch Media”, “we”) is the controller for personal data processed through northporchmedia.com and through our characters’ social media accounts (for example Hal Whitaker / “Hal Keeps Moving”).
Contact for all privacy matters: [email protected]. We are not required to appoint a data protection officer.
2. What we collect and why
| Data | Purpose | Legal basis (GDPR) | Kept for |
|---|---|---|---|
| Email address, which character’s page you signed up on, time of sign-up, the consent wording you agreed to, confirmation status and a random confirmation/unsubscribe token | Send the free download and occasional emails you asked for; prove consent; handle unsubscribes | Consent, Art. 6(1)(a) | Until you unsubscribe or ask for erasure. After unsubscribing we keep only a suppression record (email + date) so we don’t email you again, unless you ask us to erase that too. If we ask you to confirm your address and you don’t, the sign-up is deleted after 90 days. |
| Emails you send us (address, content) | Reply to you, customer support | Legitimate interest in answering you, Art. 6(1)(f) | Up to 24 months, then deleted |
| Purchase information (name, email, order) — received from Payhip | Deliver the product, support, bookkeeping | Contract, Art. 6(1)(b); legal obligation, Art. 6(1)(c) | 7 years (Swedish Bookkeeping Act) |
| Public comments, mentions and direct messages sent to our characters’ social accounts, with your public username | Moderate our channels, reply, understand which content is useful | Legitimate interest, Art. 6(1)(f) | As long as they remain on the platform; any copies we export are deleted within 24 months |
| Technical request data (IP address, browser, time) processed by our host | Deliver the site, security, abuse prevention | Legitimate interest, Art. 6(1)(f) | Short-term logs held by Cloudflare per its policies |
We do not use your data for automated decision-making or profiling with legal or similarly significant effects. We never sell or rent personal data.
3. Email sign-ups
When you enter your email on a character page and tick the consent box, we store the data listed above. We may send a confirmation email with a link you must click (double opt-in) before we send any newsletters. Every email has an unsubscribe link. Emails are about the character’s content, tips and our own products; affiliate links in emails are labelled.
4. Who processes data for us
- Cloudflare, Inc. (USA / global): website hosting, form handling, database (Cloudflare D1), email routing and security. Cloudflare privacy policy.
- Payhip (UK): sells and delivers our digital products as merchant of record. Payhip is an independent controller for payment data. Payhip privacy policy.
- Email delivery provider: when we start sending newsletters, we will name the provider here before any email is sent through it.
- AI tool providers used to create character content. We do not send subscriber data to them.
Processors act only on our instructions under data processing agreements.
5. Social media platforms and APIs
Our characters publish on YouTube, TikTok, Instagram, Facebook and Pinterest. We use these platforms’ official APIs only to manage our own accounts: uploading and scheduling our posts, reading analytics for our own content, and reading and replying to comments and messages on our own posts. We do not ask you to log in with these platforms on our site, and we do not use their APIs to collect data about you beyond comments and messages you send to our accounts.
When you interact with us on a platform, that platform is also a controller of your data under its own policy.
YouTube API Services
Our apps use YouTube API Services. By interacting with our YouTube channel you are also subject to the YouTube Terms of Service and the Google Privacy Policy. Data obtained through YouTube API Services is processed only for the purposes above. If you have granted any application access to your Google account, you can revoke it at Google security settings.
Meta (Facebook, Instagram), Pinterest and TikTok
We process data received via the Meta, Pinterest and TikTok APIs in line with their platform terms and developer policies, only for the purposes above, and never sell it or use it to build profiles for advertising. See also our data deletion instructions.
6. Cookies and tracking
This site sets no advertising or analytics cookies and loads no third-party fonts, pixels or trackers. Our host Cloudflare may set strictly necessary security cookies (for example to block bots). If we add privacy-friendly analytics later we will update this section. When you click an affiliate link (for example to Amazon), the retailer may set its own cookies to attribute the purchase; that is covered by the retailer’s privacy policy.
7. International transfers
Some processors (such as Cloudflare) process data outside the EU/EEA, including in the USA. Such transfers rely on the EU–US Data Privacy Framework where the recipient is certified, and otherwise on the European Commission’s Standard Contractual Clauses with supplementary measures.
8. Your rights
Under the GDPR you have the right to access your data, have it corrected, erased or restricted, to object to processing based on legitimate interest, to data portability, and to withdraw consent at any time (without affecting processing before withdrawal). Email [email protected]; we reply within one month. See also our data deletion instructions.
You can complain to the Swedish supervisory authority, Integritetsskyddsmyndigheten (IMY), or to the authority in your own country. UK residents can contact the ICO.
9. US residents
We do not sell or share personal information for cross-context behavioural advertising. You can request access to or deletion of your data at [email protected] regardless of where you live.
10. Children
This site and our email list are not directed at children under 16, and we do not knowingly collect their data. If you believe a child has signed up, contact us and we will delete it.
11. Security
Data is stored with Cloudflare, transmitted over HTTPS and accessible only to authorised staff of North Porch Media using strong, individual credentials.
12. Changes
We will post updates here and change the date at the top. If a change materially affects how we use your email address, we will tell subscribers by email.