Privacy policy
Last updated: 22 October 2026
This policy explains what personal data Northark Studio Ltd (the “Publisher”) processes to provide Sweeplead, why, for how long, and what your rights are. Capitalised words are defined in the terms of sale and use.
At a glance
- The Listings you collect with the Extension stay in your browser. They are never sent to the Publisher.
- The Publisher keeps only what it needs to manage your licence: your key, your plan, the email address used for your purchase and the random identifier of your Seats.
- The website and the Extension show no advertising and use no advertising cookies or audience measurement tools.
- Payment is processed by Link, a Stripe group company, under its own privacy policy.
1. Controller
Northark Studio Ltd, a private limited company registered in England and Wales under number 17440757, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. Contact: [TO COMPLETE: support email address].
Registration number with the Information Commissioner’s Office (ICO): [TO COMPLETE: ICO registration number].
Representative in the European Union: [TO COMPLETE: name and address of the EU representative, if required].
2. What the Extension does on your computer
- Data kept in your browser. The Extension stores in Chrome’s local storage: the Listings, your projects and collections, your settings, your exclusion list, your Licence Key, the month’s Listing counter and a randomly generated device identifier. This data stays on your computer: the Publisher has no access to it. It is deleted if you uninstall the Extension, or from its “Data” tab.
- Direct exchanges between your browser and third-party services. During a collection, your browser contacts directly, without going through the Publisher:
- Google Maps (www.google.com), for the searches you run, just as when you use Google Maps yourself; Google’s privacy policy applies;
- Google’s public DNS service (dns.google), to check that an email’s domain receives mail: the Extension sends only the domain name (for example example.com), never the full address;
- the businesses’ websites, if you enable website analysis and grant the permission Chrome asks for;
- the businesses’ Facebook pages, only if you enable this option, which is off by default.
- The data you collect. For the information collected about businesses and their contacts, you are the controller (see article 11 of the terms). The Publisher never receives that data, so it is not your processor.
3. Data processed by the Publisher
| Data | Why | Legal basis | Retention |
|---|---|---|---|
| Licence: Licence Key, plan, billing period (month or year), status, end of period, purchased countries, Stripe customer and subscription identifiers, purchase email, creation and update dates | Activate your plan and countries, retrieve a lost key, answer support requests | Performance of the contract | For the life of the licence, then 6 years after the last subscription ends |
| Seats: device identifier randomly generated by the Extension, date of last contact | Limit the number of Seats of the plan | Performance of the contract | Deleted once the Seat has not contacted the Licence Service for 14 days |
| Payment in progress: Stripe payment session identifier, linked to the Licence Key | Show the key on the thank-you page | Performance of the contract | 30 days |
| Support: your email address and the content of your messages | Answer your requests | Performance of the contract or legitimate interest | 3 years after the last exchange |
| Technical data: IP address, date and address of the request, browser | Route requests and protect the website and the Licence Service against abuse | Legitimate interest (security) | Not kept by the Publisher; processed by Cloudflare under its own policy |
The Publisher does not sell or rent your data. It makes no automated decision producing legal effects concerning you, other than applying the limits of your plan.
4. Payment
- Payment is processed by Link (Sold through Link, LLC) and by Stripe, which act as merchant of record and process your payment data (card, name, billing address…) under their own policies: https://link.com/privacy and https://stripe.com/privacy.
- The Publisher never receives your card number. Stripe passes on the order data (email, name, billing country and address, plan purchased). The Licence Service keeps only the email address and the Stripe identifiers; the rest stays in the Publisher’s Stripe account.
5. The website
- The website sets no cookies and uses no audience measurement tool, third-party script or advertising.
- It is hosted by Cloudflare, which processes IP addresses to deliver the pages and protect the website.
- When you click a purchase button on the website, your browser sends the Licence Service the plan you chose and your language (and, for a Country Plan, your Licence Key), in order to get the address of the payment page.
6. Recipients and processors
| Recipient | Role | Data | Location |
|---|---|---|---|
| Cloudflare, Inc. | Processor: hosting of the website and the Licence Service | Licence, Seat and technical data | Database stored in the European Union; global network for routing requests |
| Stripe and Link | Controllers of their own processing: payment | Payment and order data | United States, European Union and other countries of the Stripe group |
| Support email | Emails exchanged with support | United States and other countries |
Your data may also be disclosed to authorities where the law requires.
7. Transfers outside the United Kingdom and the European Union
- The Publisher is established in the United Kingdom. Data of customers in the European Union is transferred there on the basis of the European Commission’s adequacy decision for the United Kingdom.
- Cloudflare and Stripe are US companies. Transfers to the United States rely on the EU-US Data Privacy Framework and its UK extension, or on standard contractual clauses.
8. Your rights
- You may ask for access to your data, its rectification, erasure, restriction of processing or portability, and you may object to processing based on legitimate interest.
- Write to [TO COMPLETE: support email address], preferably from the email address used for your purchase. The Publisher replies within one month; it may ask you to prove your identity, for example by giving your Licence Key.
- Erasing your licence data makes your Licence Key unusable. If you have an ongoing subscription, cancel it first.
- Complaints. If you are unhappy with how your data is handled, you can first complain to us at [TO COMPLETE: support email address]. We acknowledge your complaint within 30 days, look into it without undue delay and tell you the outcome.
- You may also, at any time, lodge a complaint with the ICO (https://ico.org.uk/make-a-complaint/) or, if you live in the European Union, with the data protection authority of your country (in France, the CNIL: https://www.cnil.fr/fr/plaintes).
9. Security
Exchanges with the website and the Licence Service are encrypted (HTTPS). Licence Keys are randomly generated (80 bits). Access to the database and to the Stripe and Cloudflare accounts is restricted to the Publisher. The Publisher processes no card data.
10. Minors
Sweeplead is for adults only. The Publisher does not knowingly collect data about minors.
11. Changes
This policy may change. The date of the last update is shown at the top of the page. Subscribers are informed of any significant change.