Draft for review

Privacy Policy

NorthMetric Finance & Analysis LLC

Draft for review — last updated October 3, 2026

1. About this notice

NorthMetric Finance & Analysis LLC (“NorthMetric,” “we,” “us”) provides financial data cleanup, Excel workbook review, reporting, and business analysis services. This notice explains how we handle personal information received through our website, inquiries, and business communications. Client engagements may also be governed by a service agreement and, where appropriate, separate data-processing terms. Contact us at contact@northmetricfinance.com with privacy questions.

2. Information we receive

When you contact us, we receive information you provide, such as your name, email address, company name, service interests, and message. We also maintain correspondence and relevant project or relationship records. Please do not send passwords, payment-card details, government identification numbers, bank account numbers, or confidential financial files through the website inquiry form.

For an agreed engagement, clients may provide spreadsheets, accounting exports, and related business information through Dropbox or another agreed transfer method. These files may contain personal information about clients’ customers, employees, or vendors. Clients should provide only information needed for the agreed work and that they are authorized to share.

Website hosting, embedded forms, and anti-spam services may process technical information such as IP addresses, browser or device details, timestamps, and interactions needed to deliver and protect their services.

3. How information is used

We use information to respond to inquiries; discuss and scope projects; deliver agreed services; communicate about projects and payments; maintain necessary business records; and protect our services against misuse. Where we handle personal information on a client’s behalf, the engagement terms and the client’s lawful instructions also govern that processing.

If we introduce marketing emails, we will provide a separate, optional signup. Submitting a project inquiry does not by itself subscribe you to marketing. You may unsubscribe through a marketing email’s unsubscribe link or by contacting us. Opting out of marketing does not stop communications necessary for an active project.

4. Service providers and disclosures

We use service providers to operate the business, including HubSpot for website forms and contact management, Google Workspace for business email and communications, Dropbox for client file sharing and storage, and Lovable and its hosting infrastructure for the website. The embedded inquiry form also uses Google reCAPTCHA to help prevent spam and abuse.

Depending on the agreed engagement, analytical and AI-assisted tools, including ChatGPT Business, may support data review and report preparation. The handling of client information in these tools should be addressed in the engagement’s data-handling arrangements before files are provided.

Information may also be disclosed when required by applicable law or when reasonably necessary to address fraud, security incidents, or legal claims. Providers may process information in the United States and other countries where they operate; protections and legal requirements can differ by location.

5. Cookies and embedded services

The inquiry form and anti-spam features are supplied by third parties and may use cookies, local storage, or similar technologies to operate and protect the form. Browser settings may let you restrict these technologies, but doing so can affect form functionality. You may contact us by email if the form does not work. Any additional analytics, advertising, or marketing tracking introduced later will need to be reflected in this notice and the relevant choices before use.

6. How long information is retained

For inquiries that do not become client engagements, our retention schedule is 12 months after the last meaningful interaction with the person, unless an ongoing request, dispute, or legal obligation justifies keeping relevant information longer. Sending an unanswered marketing email does not restart that period.

For people who separately subscribe to marketing, we retain the information needed to manage the subscription and review inactive subscriptions after 12 months. After an unsubscribe, we may retain a minimal record of the address and opt-out so we can respect that preference.

Client files and project records follow the retention arrangements established for the engagement. Relevant contracts, invoices, and other records may need to be kept longer for accounting, legal, or dispute-resolution purposes. The inquiry-retention period does not automatically apply to those records. Deleted information may remain in restricted provider backups until their normal expiry or deletion cycle.

7. Your choices and requests

You can ask us about the personal information we hold about you and request correction or deletion by emailing contact@northmetricfinance.com. Depending on your location and applicable law, you may also have rights to access or obtain a copy of information, restrict or object to processing, withdraw consent, or complain to a relevant privacy authority. We may need to verify your identity and may retain information where an applicable obligation or exception requires it. If your information was supplied by a client for their project, we may refer the request to that client or assist them in responding.

8. Security and changes

No internet transmission or storage system is completely secure. Please use the agreed file-sharing process for project information and contact us if you suspect information has been shared incorrectly.

We may update this notice when our practices change. The updated notice will show its revision date, and we will provide additional notice where required.