Privacy Policy
We, Thirty Two North ("32°N", "We", "Company") are the owners of the website https://thirtytwonorth.com/ referred as "Website". This Website showcases our UX design and digital product consulting services ("Services").
We respect data privacy rights and are committed to protecting the personal information collected on this Website. This privacy policy ("Privacy Policy") sets forth how we collect, use and protect the personal information collected on this Website.
PLEASE READ THIS PRIVACY POLICY CAREFULLY. BY CONTINUING TO USE THIS WEBSITE, PROVIDING US PERSONAL INFORMATION, YOU CONSENT TO OUR USE OF YOUR PERSONAL INFORMATION IN ACCORDANCE WITH THE TERMS OF THIS PRIVACY POLICY. IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, YOU MAY WITHDRAW YOUR CONSENT OR ALTERNATIVELY CHOOSE NOT TO PROVIDE YOUR PERSONAL INFORMATION ON THE WEBSITE. SUCH AN INTIMATION TO WITHDRAW YOUR CONSENT CAN BE PROVIDED BY EMAIL TO skipthesmalltalk@thirtytwonorth.com.
IF YOU ARE ACCESSING THE WEBSITE ON BEHALF OF A THIRD PARTY, YOU REPRESENT THAT YOU HAVE THE AUTHORITY TO BIND SUCH THIRD-PARTY TO THE TERMS AND CONDITIONS OF THIS PRIVACY POLICY AND, IN SUCH AN EVENT YOUR USE OF THE WEBSITE SHALL REFER TO USE BY SUCH THIRD PARTY. IF YOU DO NOT HAVE SUCH AN AUTHORITY (TO PROVIDE ANY PERSONAL INFORMATION OF A THIRD PARTY) OR DO NOT AGREE TO THE TERMS OF THIS PRIVACY POLICY, THEN YOU SHOULD REFRAIN FROM USING THE WEBSITE.
This Privacy Policy is an electronic record compliant and construed in accordance with the Indian Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 under The Information Technology Act 2000, along with applicable international data protection laws including GDPR and CCPA for respective jurisdictional users, that require publishing of privacy policy for the collection, use, storage and transfer of personal data.
1. What Data Do We Collect?
If you wish to get in touch with us through our 'contact us' page, submit a project inquiry, subscribe to our newsletters, or submit your details through the 'careers' page on our Website; you are required to provide us with information including but not limited to the first name, last name, phone numbers, e-mail address, company name, job title, project details, timeline preferences, budget information, and business challenges. For the sake of brevity, the aforementioned information shall be referred to as "Personal Information".
Project-Related Information: When you engage our services, we may collect additional information including project requirements, user research data, design preferences, technical specifications, and business objectives necessary to deliver our UX design and consulting services.
We may also automatically collect certain information through cookies to improve our Website and Services, such as the pattern of your use of the Website, our Services, visits, material that you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information, IP address and date and time when you access or use the Website. Cookies are small, encrypted files, that the Website transfers to the device through which you access our Website.
Website and Social Media Accounts: We may also collect, store and use your Personal Information when you (1) access our social networking handles operated by us on LinkedIn, Twitter, Instagram, and/or other platforms (2) share our content through social media platforms and (3) comment/provide feedback/testimonials on such social networking handles.
AI Tools and Processing: In delivering our services, we may use AI tools including Claude and other platforms to enhance our design process. Any data processed through these tools is handled with strict confidentiality and in accordance with this Privacy Policy.
Accuracy of Information: Please make sure that any Personal Information you share with us is accurate and up-to-date information. If you are sharing any Personal Information on behalf of a third party, you should ensure that you are authorized to do so.
2. What Do We Do With Your Data?
We use the Personal Information for the following purposes:
- to inform you about our Services and to respond to your requests;
- to deliver UX design and consulting services including user research, design development, and project management;
- for creation or development of business intelligence or data analytics in relation to the Services provided by us (for this purpose we may share the Personal Information with certain software or tools available online);
- to improve the Services and develop new offerings;
- to process job applications (if you apply for a position with our organization);
- to maintain and manage our Website;
- to manage our relationship with you;
- for internal record keeping;
- to showcase our work in portfolios and case studies (with appropriate anonymization when required);
- and to comply with our legal or statutory obligations.
3. Disclosures
We do not sell, rent, share, distribute, lease or otherwise provide your Personal Information to third parties, without your prior consent. Keeping this in mind, we may disclose your Personal Information in the following cases:
(i) Service Providers: We may share your Personal Information with service providers who work with us in connection with operating the Website and/or providing the Services, including AI platforms, design tools, project management software, and communication platforms. All such service providers are subject to stringent confidentiality restrictions consistent with this Privacy Policy.
(ii) Project Collaborators: With your consent, we may share relevant project information with developers, technical partners, or other specialists working on your project under our supervision.
(iii) Portfolio and Marketing: We may use project work for portfolio showcases, case studies, and marketing materials, with appropriate anonymization or client consent as specified in our service agreements.
(iv) Merger or Acquisition: We may transfer your Personal Information if we are acquired by another entity, or if we merge with another company or transfer a part of our business, including the Website, to a third party. Any such third party or resultant entity that receives your Personal Information shall have the right to continue to use your Personal Information in line with the purposes set out herein. In the event of such a sale or transfer, we may notify you.
(v) Legal and Regulatory Authorities: We may disclose your Personal Information in order to comply with our legal obligations/court orders/requests by government authorities.
4. How Long Do We Retain Your Data?
We endeavor to only collect such Personal Information that is necessary for the purposes indicated here, and to retain such data for no longer than is necessary for such purposes. The length of time Personal Information is retained, and criteria for determining that time, are dependent on the nature of the Personal Information and the purpose for which it was provided/collected.
Retention Periods:
- Active client data: For the duration of our relationship plus 7 years
- Project files and deliverables: 7 years for business and legal purposes
- Website analytics: Up to 26 months
- Marketing communications: Until you unsubscribe or opt out
- Legal and compliance records: As required by applicable law
5. Your Rights
You have the right to access your Personal Information in our possession, right to have us rectify or modify any such Personal Information, right to have us erase/delete your Personal Information, right to restrict us from processing such Personal Information, right to object to our use of your Personal Information, withdraw consent at any time where we are relying on consent to process your Personal Information. If you would like to exercise ANY of these rights, please contact skipthesmalltalk@thirtytwonorth.com.
Additional Rights for EU Residents: Under GDPR, you also have the right to data portability and the right to lodge a complaint with your local supervisory authority.
Additional Rights for California Residents: Under CCPA, you have the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of the sale of personal information (note: we do not sell personal information).
6. Our Security Measures
Our Website employs a number of current technology security measures to protect the security of Personal Information. We have put in place appropriate physical, electronic, and managerial procedures to safeguard and help prevent unauthorized access, maintain data security, and correctly use the information we collect online.
AI Tools Security: When using AI tools for our services, we ensure appropriate data handling protocols, anonymization when possible, and compliance with security standards of AI service providers.
7. Contact Us
If you have any questions or concerns regarding processing of your personal information or this privacy policy do reach out to us through email skipthesmalltalk@thirtytwonorth.com.
This Privacy Policy was last modified on January 1, 2025.
How the AI-led intake handles your information
When you talk to the AI agent (voice or text) on our AI FOR YOU page, you share information about your role, your company, your tools, and your operational situation. This section explains what happens to that information.
What we collect
The audio of your voice conversation (if applicable), the transcript of what you said, any text you submitted through the text-based intake flow, and the email address you shared for plan delivery. We do not collect any information you did not volunteer.
How we use it
The intake content is processed once to generate a plan and quote for you. Nothing else. We do not use it for training AI models, marketing lists, or any purpose beyond delivering your plan.
How long we keep it
The raw voice audio and full transcript are retained for up to 48 hours after your conversation ends, only to allow us to generate your plan. After 48 hours, both are destroyed.
The structured summary our system generates from the transcript is retained for up to 90 days so we can reference it if you return with questions or decide to engage. After 90 days, it is destroyed unless you have signed an engagement contract with us.
If you engage us, the summary becomes part of the engagement file and is retained for the life of the engagement plus seven years for contractual and accounting compliance.
Who can access it
Only Kshitij Kaushik and Thirty Two North team members directly involved in producing your plan. Our third-party processors access the data only as needed to perform their service function.
Third-party processors we use
- ElevenLabs (voice agent hosting and post-call analysis, United States).
- Anthropic or OpenAI (for generating the plan from your brief, United States).
- Resend (for delivering emails, United States).
- Supabase (for storing briefs and plans during active engagement lifecycles, United States).
Each of these processors is bound by their own published data-handling commitments, and we have selected them specifically because those commitments match or exceed what we promise you here.
Your rights
You can request deletion of your data at any time by emailing skipthesmalltalk@thirtytwonorth.com. We respond within seven days with confirmation of what has been deleted.
If you are in a jurisdiction with additional rights under applicable privacy law (GDPR in the European Union, CCPA in California, the Digital Personal Data Protection Act in India, or other applicable law), those rights apply and we will honor them according to the law of your jurisdiction.
What we do not do
We do not sell your information. We do not share it with marketing platforms. We do not use it to train AI models. We do not share the content of your conversation with other clients or prospects.