Privacy Policy

Last updated: 11 December 2025

This Privacy Policy explains how Northa LTD (“Northa”, “we”, “us”, or “our”) collects, uses, shares, and protects your personal data when you visit our website www.northa.ltd or use our services, including purchasing and accessing our online programs and AI‑related courses (the “Services”).

By using our website or Services, you agree to the terms of this Privacy Policy.

1. Who we are

Northa LTD is an online learning provider offering AI‑focused courses and programs. We are established in the United Kingdom and operate the website **www.northa.ltd**.[1]
If you have any questions about this Privacy Policy, you can contact us at: support@northa.ltd.

2. Data we collect

We may collect and process the following categories of personal data:

Identification and contact data: name, email address, account login details, billing address, and any other contact information you provide when creating an account, enrolling in a program, or contacting us.
Course and usage data: information about the programs you enroll in, your progress, completion status, quiz results, assignments, and any content you submit or upload while using the learning platform.
Payment and transaction data: payment method, amounts paid, currency (including GBP), invoices, and transaction identifiers (card details are typically handled by our payment processor and not stored in full by us).
Marketing and communication data: your preferences for receiving marketing emails (for example, if you tick the newsletter subscription box) and records of communications with us.
Technical and usage data: IP address, browser type, device identifiers, time zone, pages visited, referring URLs, and interaction data collected through cookies or similar technologies.

3. How we use your data

We use your personal data for the following purposes:

To create and manage your account, authenticate your login, and provide access to your purchased programs and content.
To process payments, manage orders, issue receipts or invoices, and handle refunds or chargebacks.
To deliver, personalize, and improve our learning content and Services, including tracking progress and performance.
To provide customer support and respond to your questions or requests (for example via support@northa.ltd).
To send administrative messages (for example about changes to our terms, service notifications, or security alerts).
To send marketing communications, newsletters, or promotional offers where you have consented or where permitted by law, and to enable you to opt out at any time.
To maintain the security of our website, prevent fraud, and comply with legal or regulatory obligations.

4. Legal bases for processing (UK GDPR / GDPR)

When applicable data protection law (such as the UK GDPR or EU GDPR) applies, we rely on one or more of the following legal bases:

Performance of a contract: to provide you with the Services you have requested, for example when you purchase and access a course or bundle.
Consent: for example, when you subscribe to our newsletter or agree to certain cookies.
Legitimate interests: such as improving our Services, maintaining security, and preventing fraud, provided that these interests are not overridden by your rights.
Legal obligations: where we need to keep certain records for tax, accounting, or regulatory reasons.

5. Cookies and similar technologies

We may use cookies and similar technologies to:

Operate and secure the website and learning platform.
Remember your preferences and improve the user experience.
Analyze traffic and usage patterns to understand how visitors interact with our website.

You can manage cookie preferences through your browser settings and, where available, through our on‑site cookie banner or settings tool. Disabling certain cookies may affect the functionality of the website or Services.

6. How we share your data

We do not sell your personal data. We may share your data with:

Service providers: third‑party vendors who help us operate our website and Services, such as hosting providers, learning management platform providers, analytics tools, email service providers, and payment processors.
Professional advisors: such as lawyers, accountants, or auditors, where reasonably necessary for our business and legal compliance.
Authorities: where required to comply with legal obligations, court orders, or lawful requests from public authorities.
Business transfers: in connection with any merger, acquisition, reorganization, or sale of assets, your data may be transferred as part of that transaction, subject to appropriate safeguards.

When we use third‑party service providers, we require them to process personal data only according to our instructions and to apply appropriate security measures.

7. International transfers

Because we use third‑party service providers and cloud infrastructure, your personal data may be transferred to and processed in countries outside the UK or European Economic Area, including countries that may not provide the same level of data protection.
Where required by law, we implement appropriate safeguards (such as standard contractual clauses or equivalent mechanisms) to protect your personal data in the course of such transfers.

8. Data retention

We retain personal data only for as long as necessary:

To provide the Services and maintain your account.
To fulfill the purposes described in this Privacy Policy.
To comply with legal, tax, and accounting requirements, or to resolve disputes and enforce our agreements.

When data is no longer needed, we will delete or anonymize it in accordance with our data retention policies.

9. Your rights

Depending on your location and applicable law (for example under the UK GDPR or EU GDPR), you may have rights in relation to your personal data, including:

Right of access: to obtain confirmation and a copy of the personal data we hold about you.
Right to rectification: to correct inaccurate or incomplete data.
Right to erasure: to request deletion of your personal data in certain circumstances.
Right to restriction: to ask us to limit the processing of your data in specific cases.
Right to data portability: to receive certain data in a structured, commonly used, and machine‑readable format and to transmit it to another controller.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at support@northa.ltd and provide enough information to verify your identity and understand your request. You also have the right to lodge a complaint with a data protection authority, such as the UK Information Commissioner’s Office (ICO), if you believe your rights have been violated.

10. Marketing communications

If you subscribe to our newsletter or otherwise opt in to marketing communications (for example by ticking the “Yes, subscribe me to your newsletter” box), we may send you emails about new courses, bundles, promotions, or updates.
You can opt out of marketing emails at any time by clicking the unsubscribe link in our emails or contacting us at support@northa.ltd. Even if you opt out of marketing, we may still send you non‑marketing communications related to your account or transactions.

11. Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or alteration. These measures may include encryption, access controls, and regular monitoring of our systems.
However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Third‑party links

Our website may contain links to third‑party websites or services that are not controlled by Northa. This Privacy Policy does not apply to those third‑party sites, and we are not responsible for their content or privacy practices. You should review the privacy policies of any third‑party sites you visit.

13. Children’s privacy

Our Services are not directed to children under the age of 16, and we do not knowingly collect personal data from children under that age. If you believe that a child has provided us with personal data, please contact us at support@northa.ltd so that we can take appropriate action.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make material changes, we will update the “Last updated” date and may provide additional notice as required by law.
Your continued use of the website and Services after any changes become effective constitutes your acceptance of the updated Privacy Policy.