Skip to main content
GuestStory

Legal

Privacy Policy

This policy explains how we handle personal information when you visit GuestStory, contact us or ask for a demonstration.

Last updated 17 August 2026

1. Who we are

GuestStory is a product of THENORTHGROUP LTD, trading as NorthForge ("NorthForge", "we", "us" or "our"). NorthForge is the controller of personal information collected through this website.

THENORTHGROUP LTD is registered in England and Wales under company number 16380517. Our registered office is Strawberry Fields Digital Hub, Euxton Lane, Chorley, England, PR7 1PS.

2. Information we collect

We may collect the following information:

  • information you enter into our demo form, including your name, work email, organisation, role, number of properties, website, preferred guest journey and any message you provide;
  • information contained in emails or other correspondence with us;
  • ordinary technical information generated when the website is used, such as IP address, browser type, device information, request times and security logs; and
  • information needed to manage a prospective or existing business relationship.

Please do not send special-category or otherwise sensitive personal information through the demo form.

3. How and why we use information

We use personal information to:

  • respond to enquiries and arrange demonstrations;
  • understand a property's requirements and prepare relevant follow-up;
  • manage prospective and existing business relationships;
  • operate, secure and improve the website; and
  • meet legal, regulatory, accounting and record-keeping obligations.

Our lawful bases are taking steps at your request before entering into a contract, complying with legal obligations and our legitimate interests in responding to business enquiries, developing GuestStory, maintaining business records and protecting our website and systems.

We do not use demo-form details to send unrelated marketing without an appropriate lawful basis. We do not make solely automated decisions that have legal or similarly significant effects on you.

4. How we share information

We only share personal information where reasonably necessary, including with:

  • authorised members of the NorthForge team;
  • FormSubmit, which transmits demo-form submissions to our business email accounts;
  • website hosting, email, security and other IT service providers;
  • professional advisers, such as accountants, insurers or legal advisers; and
  • regulators, courts or public authorities where required by law.

We do not sell personal information.

5. International transfers

Some suppliers may process information outside the United Kingdom. Where personal information is transferred internationally, we use legally recognised safeguards where required and take reasonable steps to ensure it remains protected.

6. How long we keep information

We normally keep unsuccessful or inactive enquiry records for up to 24 months after our last meaningful contact. If an enquiry develops into a customer, supplier or partner relationship, relevant records may be kept for the relationship and afterwards for up to six years where needed for legal, contractual, tax or accounting purposes.

Technical and security records are retained only for as long as reasonably needed for operation, troubleshooting and protection of the website. We may retain information for longer where the law requires it or where needed to establish, exercise or defend legal claims.

7. Your rights

Depending on the circumstances, you may have rights to access, correct, erase or restrict the use of your personal information, to object to processing, and to receive certain information in a portable format. Where processing relies on consent, you may withdraw that consent at any time.

To exercise a right, email adam@northforge.io. We may need to verify your identity before acting on a request.

You can also complain to the Information Commissioner's Office. We would appreciate the opportunity to address your concern first.

8. Security

We use reasonable technical and organisational measures designed to protect personal information. No internet transmission or storage system can be guaranteed to be completely secure.

9. Changes to this policy

We may update this policy when our services, suppliers or legal obligations change. The latest version will always be published on this page with its revision date.