1. Who controls your data
Northsheep B.V., Radmakerstraat 6, 5375 CC Reek, The Netherlands. Director: L.L.P.M. Megens. Email: paula@northsheep.com
2. What we collect
When you order, create an account, sign up to our newsletter or contact us: name, delivery and billing address, email address, telephone number and order history.
When you visit the site: IP address, date and time, browser type, operating system and pages viewed.
3. Why we are allowed to
To perform our contract with you; with your consent, for the newsletter and for analytics and marketing cookies; to meet legal obligations such as tax record-keeping; and for our legitimate interests, such as preventing fraud.
4. Shop platform and payments
Shopify International Ltd., Victoria Buildings, 1–2 Haddington Road, Dublin 4, Ireland, hosts the shop and processes payments through Shopify Payments. We do not store full card details.
Apple Pay (Apple Inc.) and Google Pay (Google Ireland Ltd.) are available through Shopify Payments.
5. Delivery
We share your name, delivery address and, where given, email address and telephone number with our parcel carrier, so it can deliver your order and let you know when it is on its way.
6. Reviews
Trustpilot. After your order has been delivered, Trustpilot may email you an invitation to review your purchase; for this we share your name, email address and order number with Trustpilot. We do this on the basis of our legitimate interest in customer feedback (Article 6(1)(f) UK GDPR). You can object at any time via the unsubscribe link in the invitation or by emailing paula@northsheep.com.
7. Analytics and advertising
These load only after you consent, and you can change that at any time through the cookie settings.
- Google Ads (Google Ireland Ltd.): conversion tracking and remarketing, setting cookies on doubleclick.net.
- Google Ads Customer Match: if you have accepted personalised ads in our cookie settings or agreed to receive marketing emails from us, we share your email address and, where available, your phone number with Google Ireland Ltd. in encrypted (hashed) form. Google uses it only to recognise you as our customer, so we can show you relevant ads or leave you out of ads you don't need, and does not keep the data after matching. You can withdraw at any time in the cookie settings (link at the bottom of every page), by unsubscribing from our emails or by writing to info@northsheep.com; you can also manage personalised ads in your Google account (adssettings.google.com).
8. Cookie consent
Your cookie choice is collected by Shopify’s own cookie banner and passed on to the services above, so analytics and marketing cookies are only set after you agree. You can change or withdraw your choice at any time through “Cookie settings” at the bottom of every page.
So that we can show that consent was given, we keep a record of each choice: a random ID stored in your browser, the date and time, the choices you made, the store and the country. The record contains no name, email address or IP address. Legal basis: Article 6(1)(c) together with Article 7(1) UK GDPR. We keep these records for two years. The record is stored in Google Workspace (Google Ireland Ltd.).
9. Email and accounting
Google Workspace (Gmail), Google Ireland Ltd., for our business correspondence. We do not use a separate email marketing platform.
We use the software Claude by Anthropic (USA) to help us answer emails and process invoices; our staff check every reply before it is sent. Legal basis: our legitimate interest in efficient customer service (Article 6(1)(f) UK GDPR) and our tax obligations (Article 6(1)(c) UK GDPR).
Returns and withdrawals you send through the form on our returns page are processed by our own service at Cloudflare (Cloudflare, Inc., USA; certified under the EU-US Data Privacy Framework and its UK Extension) and reach us by email (Google Workspace).
SnelStart (SnelStart Software B.V., Alkmaar, the Netherlands) for our bookkeeping, and Combidesk (Enschede, the Netherlands), which passes order and invoice details from Shopify to SnelStart. We keep these records because tax law requires it (Article 6(1)(c) UK GDPR).
10. International transfers
Where data is transferred to Google LLC, Apple Inc. or Anthropic PBC in the United States, this is done under the UK International Data Transfer Addendum or an equivalent safeguard.
11. How long we keep it
Only as long as needed for the purposes above, subject to statutory record-keeping periods.
12. Your rights
You have the right to access, correct, erase, restrict or object to the processing of your data, and to data portability. You can withdraw consent at any time. You may also complain to the Information Commissioner's Office (ICO).
13. Cookies
Necessary cookies keep the shop working and need no consent. Analytics and marketing cookies are only set once you agree.