Privacy Policy

NorthDott ("NorthDott", "we", "us") is a business consultancy operating in the United States and Brazil. This Privacy Policy explains how we handle personal information collected through northdott.com and in the course of responding to inquiries made through this site.

We collect only what you choose to give us:

• Contact form submissions — your name, work email, company, industry, company size, the challenge and outcome you describe, any additional notes, how you heard about us, and your consent to this policy.
• Campaign context — if you arrive from a link containing campaign parameters (UTM tags), we record those parameters and the page you submitted from, so we understand where inquiries come from.
• Limited technical data — a one-way hashed value derived from your network address, used solely to limit automated or repeated form submissions. It is not used to identify you.

We do not ask for and do not want sensitive personal information such as government identifiers, financial account details or health information. Please do not include it in your message.

We use the information you provide to:

• respond to your inquiry and schedule a conversation;
• prepare for and follow up on that conversation;
• evaluate whether an engagement is a good fit and, if so, discuss scope; and
• protect the website against spam and abuse.

We do not use your information for automated decision-making or profiling, and we do not add you to a marketing list without asking you first.

Where applicable law requires a legal basis, we rely on your consent (given when you submit the contact form), our legitimate interest in responding to business inquiries and keeping our site secure, and the steps necessary to enter into a potential engagement with you.

This website does not use advertising cookies or third-party tracking pixels. Any cookies present are strictly necessary for the site to function. If we introduce analytics in the future, we will update this policy and, where required, request your consent beforehand.

We do not sell, rent or trade your personal information. We share it only with:

• Technology providers that host this website, store form submissions and deliver our email notifications on our behalf;
• The founding partners of NorthDott, who read and respond to inquiries; and
• Authorities, where disclosure is required by law or necessary to establish or defend legal claims.

Because NorthDott operates across the United States and Brazil and uses technology providers that may process information in different countries, information may be transferred and processed outside the country where it was submitted. We take reasonable steps to work with providers that maintain appropriate data protection and security practices.

We retain contact submissions for as long as needed to respond and, where a relationship develops, for the duration of that relationship plus a reasonable period for legal and record-keeping purposes — normally no more than 24 months for inquiries that do not lead to an engagement. You may ask us to delete your information sooner.

Submissions are sent over encrypted connections (HTTPS) and stored in a database that is not open to public reading. We use reasonable technical and organizational measures appropriate to the nature of the information and the services involved. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

Depending on where you live — including under the GDPR, the LGPD and applicable U.S. state privacy laws — you may have the right to:

• access the personal information we hold about you;
• correct information that is inaccurate or incomplete;
• request deletion of your information;
• withdraw consent you previously gave;
• object to or restrict certain processing; and
• request a copy of your information in a portable format.

To exercise any of these rights, use the contact form and select "Privacy request" as the subject. We respond within the period required by applicable law, and in any event without undue delay.

This website is intended for business audiences. We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us and we will delete it.

Our site may link to third-party sites, such as LinkedIn profiles. We are not responsible for the privacy practices of those sites, and we encourage you to read their policies.

We may update this policy as our practices or the law change. The date at the top of this page reflects the most recent revision, and material changes will be highlighted here. For any question about this policy or about how your information is handled, reach us through the contact form on this site.