Privacy policy
Last updated: 1 October 2026
Data controller
Swell Invest Ltd (BRN C22187700), c/o Legis Corporate Secretarial Services Ltd, 6 Edith Cavell Street, Port Louis, Mauritius. Contact: contact@56north.io.
Scope
This policy covers 56north.io and the exchanges that follow from it. Data processed in the Cockpit for our clients is governed by their contracts.
Data collected and purposes
“First conversation” form
Data: Name, job title, company, work email, approximate number of AI systems used, language of the form.
Purpose: Answer your request and arrange the conversation.
Legal basis: Steps taken at your request before a contract.
Retention: 3 years after the last contact, then deleted.
Monthly newsletter
Data: Name, job title, work email.
Purpose: Send you the newsletter, and nothing else.
Legal basis: Your consent, which you can withdraw at any time.
Retention: Until you unsubscribe.
Email exchanges
Data: The content of our exchanges and your contact details.
Purpose: Follow up the relationship.
Legal basis: The publisher's legitimate interest.
Retention: 3 years after the last contact.
Server technical logs
Data: IP address, date, page viewed.
Purpose: Keep the site secure and working.
Legal basis: The publisher's legitimate interest.
Retention: 12 months.
Who has access
- The members of the 56North team who handle requests.
- OVH SAS (France): website hosting, on a server located in the European Union, and email.
- Supabase Inc.: storage of form requests, in a database located in Paris.
- Resend Inc. (United States): delivery of an email alert containing your request to our team.
- Google LLC (United States): the mailbox that receives those alerts.
For the Cockpit, our technical subcontractors are Scaleway (hosting, France) and Mistral (evaluation model, EU).
Where the data is
Form data is hosted in the European Union (database in Paris). It may be accessed from Mauritius, where the publisher is established. The email alert passes through providers based in the United States; this transfer relies on the European Commission's standard contractual clauses.
Cookies and trackers
This site sets no advertising cookies and no social media trackers, and uses no audience measurement tool. Fonts are served from our own server: no data is sent to Google Fonts.
Security
Exchanges with the site are encrypted (HTTPS). The database cannot be read from the public site: only our server, with a secret key, can write to it.
Your rights
You have the right to access, correct, erase, restrict, object and port your data, and can withdraw your consent at any time. Write to contact@56north.io; we reply within one month. You can also contact the Data Protection Office of Mauritius or, if you live in the European Union, the authority of your country (in France, the CNIL, 3 place de Fontenoy, 75007 Paris).
Changes to this policy
Any change is published on this page, with its date.