Privacy notice
Last updated 27 September 2026. Applies to northwebservices.com and the client area.
Who we are
Elarion Global Group LLC
A limited liability company organized under the laws of Wyoming, USA.
Mailing address:
30 N Gould St, Ste R
Sheridan, WY 82801
United States
Wyoming Secretary of State filing number: 2026-002074576
We have not yet appointed a representative in the European Union or the United Kingdom under Article 27 GDPR / UK GDPR Article 27, nor a representative under the EU Digital Services Act. Whether and to what extent those regimes apply to this offer is under active review with our advisers; the review does not reduce your rights. Until it concludes, EU and UK consumers keep every mandatory protection of their habitual residence, and all requests, complaints and regulator correspondence are handled at [email protected] and [email protected] without delay.
UK VAT at 20% is charged at checkout for billing addresses in the United Kingdom and shown on every invoice before payment. We are not currently VAT-registered in the UK and do not display a VAT registration number on invoices. If our registration status changes, or tax rules for your billing address change, we will update this page and your invoices accordingly and correct or refund any tax charged in error.
Contact: [email protected] · Abuse & security reports: [email protected] · Data protection: [email protected].
What we process and why
We act as controller for the personal data you give us when you browse, register, order or contact us, and as processor for content you host on our services.
- Account & billing data (name, email, address, order and invoice history) — to perform our contract with you and meet tax law (UK GDPR Art 6(1)(b), (c)).
- Service data (files, databases, mail you host) — processed only on your instructions as your processor (UK GDPR Art 28; see the data processing addendum).
- Technical logs (IP address, timestamps, error traces) — for security, abuse handling and debugging (Art 6(1)(f), legitimate interests).
- Support correspondence (tickets, emails) — to answer you and keep a record (Art 6(1)(b), (f)).
- Payment data — card details are entered on our payment provider's hosted checkout (SpicePay); we never see or store card numbers, only payment references and statuses.
Who we share it with
Only with processors who need it to run the service: our payment provider (hosted checkout), data-centre and network providers, backup storage in the UK/EU, and email delivery. No sale of personal data, no advertising trackers.
International transfers
Hosting regions are in the UK, Germany, the Netherlands and the United States. Where data leaves the UK/EEA we rely on adequacy regulations or the UK International Data Transfer Addendum / EU Standard Contractual Clauses.
How long we keep it
- Account and billing records: for the life of the account plus 6 years (limitation and tax law).
- Invoices: 6 years from issue (UK VAT/tax rules where applicable).
- Support tickets: 24 months after closure.
- Security logs: 90 days.
- Hosted content: until you delete it or 30 days after service termination, whichever is earlier.
Your rights
Under the UK GDPR and, for EU residents, the EU GDPR: access, rectification, erasure, restriction, portability, objection, and not to be subject to solely automated decisions. Email [email protected] or use the client-area ticket system. You may complain to the Information Commissioner's Office (ico.org.uk) or, in the EU, your national supervisory authority.
US privacy rights (CCPA/CPRA and state laws)
If you are a California resident (and, under equivalent state laws, residents of other US states with comprehensive privacy statutes), you have the right to: know what personal information we collect and why; delete it; correct it; and opt out of any "sale" or "sharing" of it. We do not sell or share personal information as those terms are defined in the CCPA/CPRA - there is nothing to opt out of, and we honour Global Privacy Control signals as an opt-out anyway. We collect only the categories listed above, for the business purposes listed above, and we do not keep them longer than stated. To exercise any right, email [email protected] or use the client-area ticket system; we verify requests by matching account details and respond within 45 days. No discrimination or service degradation for exercising these rights. See also Your US privacy choices.
Children
Services are for businesses and adults; we do not knowingly process children's data.
Security
Encryption in transit (TLS), encrypted secrets at rest, rate-limited authentication, loopback-only internal services and least-privilege access. Report vulnerabilities to [email protected].