Privacy Policy

This Privacy Policy explains how NorthStar, the web design studio of Eminere Ventures ("we", "us", "our"), collects, uses and protects your personal information when you visit northstarsample.com (the "Site") or contact us about our services.

We are based in India and work with clients around the world. Because we serve individuals and businesses in the European Union / EEA (including Ireland), the United Kingdom and the United States, this policy is designed to meet the requirements of the EU/UK General Data Protection Regulation (GDPR), the Irish Data Protection Acts, and applicable US state privacy laws such as the California Consumer Privacy Act (CCPA/CPRA).

1. Who we are

The data controller responsible for your personal information is:

2. Information we collect

We only collect what we need to respond to you and deliver our services:

• Information you give us — such as your name, email address, and any details you include when you complete our contact form or message us on WhatsApp or by email.
• Project information — details you share about your business, website or project so we can quote and work together.
• Technical information — when you visit the Site, our hosting provider may automatically log limited technical data such as your IP address, browser type and pages viewed, for security and to keep the Site running.

We do not ask for sensitive personal data, and we ask that you do not send it to us.

3. How we use your information

• To respond to your enquiries and provide quotes.
• To deliver, manage and support the services you engage us for.
• To send you information about your project and, where relevant, our services.
• To keep the Site secure, maintained and working correctly.
• To meet our legal, tax and accounting obligations.

4. Legal bases for processing (GDPR)

Where the GDPR applies, we rely on the following legal bases:

• Consent — when you contact us or submit the form, you consent to us using your details to reply. You can withdraw consent at any time.
• Contract — to take steps at your request before entering a contract, and to perform a contract with you.
• Legitimate interests — to run and secure our business and Site, provided your rights do not override those interests.
• Legal obligation — where we must keep records to comply with the law.

5. Cookies & tracking

This Site is intentionally tracker-free. We do not use advertising cookies, third-party analytics or cross-site tracking. Your browser may store a small local preference (for example, to remember that you dismissed our privacy notice), which stays on your device and is not sent to us.

If we add analytics or other cookies in future, we will update this policy and request your consent where required.

6. Sharing & service providers

We never sell your personal information. We share it only with trusted providers who help us operate, and only as needed:

• WhatsApp / Meta Platforms — our contact form opens WhatsApp so your message reaches us. Messages you send are processed by WhatsApp under its own privacy terms.
• Email & hosting providers — who transmit our email and host the Site.
• Professional advisers & authorities — where required by law, or to establish, exercise or defend legal claims.

7. International data transfers

We operate from India, and our providers may process data in various countries. This means your information may be transferred to, and processed in, countries outside your own — including outside the EEA, the UK or the US.

Where we transfer personal data out of the EEA or the UK, we take steps to ensure an appropriate level of protection, such as relying on Standard Contractual Clauses or equivalent safeguards, and only working with providers that offer suitable protections. You can ask us for more information using the contact details below.

8. Data retention

We keep enquiry details only as long as needed to respond and, if we work together, for as long as our relationship lasts plus any period required for legal, tax and accounting purposes. When information is no longer needed, we delete or anonymise it.

9. Your rights — EU & Ireland

If you are in the EU/EEA (including Ireland), you have the right to: access your data; correct it; erase it; restrict or object to processing; data portability; and to withdraw consent at any time. To exercise any right, contact us below — we respond within one month.

You also have the right to lodge a complaint with a supervisory authority. In Ireland, this is the Data Protection Commission (DPC) — www.dataprotection.ie. In other EU/EEA countries, you may contact your local data protection authority.

10. Your rights — United Kingdom

If you are in the UK, you have equivalent rights under the UK GDPR and Data Protection Act 2018, and you may complain to the Information Commissioner's Office (ICO) — ico.org.uk.

11. Your rights — United States

Depending on your state (for example California under the CCPA/CPRA, and similar laws in states such as Virginia, Colorado, Connecticut and Utah), you may have the right to:

• Know what personal information we collect and how we use it.
• Request access to, or deletion of, your personal information.
• Correct inaccurate personal information.
• Opt out of the "sale" or "sharing" of personal information.
• Not be discriminated against for exercising your rights.

We do not sell or share your personal information as those terms are defined under US privacy laws. To make a request, contact us using the details below.

12. Security

We use reasonable technical and organisational measures to protect your information, including a secure (HTTPS) connection on this Site. No method of transmission over the internet is completely secure, but we work to protect your data and keep our practices up to date.

13. Children's privacy

Our Site and services are intended for businesses and adults. We do not knowingly collect personal information from children. If you believe a child has provided us data, please contact us and we will delete it.

14. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top shows the latest version. Significant changes will be highlighted on this page.

15. Contact & complaints

For any privacy question or to exercise your rights, contact us:

If you are in the EU/EEA, the UK or a US state with privacy legislation and are unhappy with our response, you may also contact your relevant supervisory authority as set out above.