Last updated 22 September 2026. Northstar Works (“we”, “us”) sells heritage expedition goods direct to customers from northstarworks.store. This policy explains what we collect, why, and what you can ask us to do about it.
What we collect
When you place an order: your name, shipping and billing address, email address, telephone number if you give one, and the contents and value of your order. We need these to take payment, pack the right goods and get the parcel to the right door.
When you pay: your card details are entered into our payment processor’s own hosted fields and are sent directly to them. We never see, handle or store your full card number, expiry or security code. We receive only a confirmation, the last four digits and the card brand.
When you browse: your IP address, browser and device type, the pages you open and the site that referred you. This is ordinary web-server and cart-session data.
When you contact us: whatever you choose to put in your message.
Why we are allowed to hold it
Order, address and payment-confirmation data is processed to perform the contract you entered when you bought something. Tax and accounting records are kept to meet legal obligations. Site-security and fraud-prevention data is processed on the basis of our legitimate interest in not being defrauded. Marketing email is sent only with your consent, and every message carries an unsubscribe link.
Who else sees it
Only the companies that make the order happen, and only the part each one needs: our payment processor, our shipping carriers, our hosting provider, and our email delivery provider. None of them are permitted to use your data for their own marketing. We do not sell your personal information, and we do not share it with data brokers or advertising networks.
Cookies
We set a session cookie so your cart survives between pages, and a small number of functional cookies for logged-in accounts. Blocking cookies in your browser will stop the cart working. We do not run cross-site advertising trackers.
How long we keep it
Order and transaction records are kept for seven years, because tax law requires it. Account details are kept until you ask us to close the account. Contact-form messages are kept for two years. Server logs are kept for ninety days.
What you can ask us to do
You can ask for a copy of what we hold on you, ask us to correct it, ask us to delete it where no legal obligation requires us to keep it, ask us to stop sending marketing, or object to a particular use. Email us and we will answer within thirty days. If you are unhappy with our answer, you may complain to your local data-protection authority.
Children
This store is not intended for anyone under 16 and we do not knowingly collect their data. If you believe a child has given us information, tell us and we will remove it.
Security
The site runs over TLS, administrative access requires individual accounts, and payment data never touches our servers. No system is perfect; if a breach ever affects your data we will tell you and the relevant authority as the law requires.
Changes
If we change this policy we will update the date at the top of this page.
Contact
Questions about this policy or about your data: orders@northstarworks.store.