Zebra North is a fractional CMO practice run by Simon Sothcott. This site is how people find the work, send an enquiry, book a call, or subscribe to the newsletter. It is not a self-serve marketing platform and we do not sell a consumer app.
1. Who we are
Zebra North is the controller for personal data collected through this website. We operate from the United Kingdom and handle data under UK GDPR and the Data Protection Act 2018.
Questions or data requests go through the contact form. We reply from there — we do not publish an inbox on this page.
2. What we collect
Only what the task needs. In practice that is:
Enquiries
If you write via /contact, we receive the name, email, and the brief you type. Company name, website, revenue band, and stage are optional context so the reply is useful. We store the submission and email it to the inbox.
Booking a call
/book embeds Cal.com. Cal.com collects the name, email, and whatever you put in the booking form so the call can happen. Their privacy notice covers that processing.
Newsletter
An email address, if you subscribe. You can leave from the unsubscribe link in every issue.
Client work
If we work together, we hold what we need to do the job and invoice it: names, work emails, company details, access you grant (ads, HubSpot, analytics), and the correspondence around the engagement. That sits under the contract or statement of work, not this website form.
An account, if you create one
Some parts of the site can require a sign-in. In that case we hold the email and authentication data needed to keep the session. There is no public social network or user-generated feed.
What the browser sends
Standard request data (IP, user agent, pages requested) hits the host so the site can load and stay secure. Optional analytics and advertising tools run only after you opt in. See Cookie Policy and Cookie Settings.
3. Why we use it
- To answer an enquiry or run a booked call.
- To send the newsletter you asked for.
- To deliver and invoice consulting work.
- To keep the site up, signed-in where needed, and reasonably secure.
- If you opt in: to see which pages are used, and to measure advertising that sent someone here.
We do not sell personal data. We do not use enquiry forms as a marketing list unless you also subscribe or ask to stay in touch.
4. Legal basis
- Contract or steps toward one — enquiries, bookings, and client work.
- Consent — the newsletter, and optional analytics or marketing cookies.
- Legitimate interests — running and securing the site, keeping engagement records, and improving the work. You can object.
- Legal obligation — invoices, tax, and anything a court or regulator can require.
5. Who sees it
People at Zebra North who need it for the reply or the work. Then the processors that make the site function:
- Vercel — hosts the site. Privacy: vercel.com/legal/privacy-policy
- Supabase — stores form submissions, newsletter records, and sign-in if you have an account. Privacy: supabase.com/privacy
- Resend — sends transactional and newsletter email.
- Cal.com — scheduling on /book.
- Google — Analytics and Tag Manager, only if you opt in to those categories.
We may also share data if the law requires it, or with professional advisers under confidentiality. If the practice were sold, data would move with the relevant records.
6. How long we keep it
- Enquiries: while we are in conversation, then a working archive.
- Newsletter: until you unsubscribe, then we suppress the address.
- Bookings: as long as Cal.com retains the event for the calendar.
- Client files and invoices: for the engagement and the retention period UK accounting rules require.
- Cookie preference: six months, then we ask again.
When something is no longer needed we delete it or strip it so it cannot identify you.
7. Your rights
Under UK GDPR you can ask to:
- See what we hold
- Correct it
- Delete it, where the law allows
- Restrict or object to certain processing
- Take a copy in a portable form
- Withdraw consent (newsletter, optional cookies)
Use the contact form and say it is a data request. We will respond within a month. You can also complain to the Information Commissioner's Office.
8. Cookies
Essential cookies run the site and remember this choice. Analytics and marketing cookies stay off until you accept them. Change that at any time on Cookie Settings. The list of names sits in the Cookie Policy.
9. International transfers
Some processors are in the United States or other countries. Where that happens we rely on an adequacy decision or standard contractual clauses those vendors publish. Optional Google tools do not load unless you opt in.
10. Children
This site is for people buying or considering B2B marketing leadership. We do not aim it at anyone under 18 and we do not knowingly collect their data. If you think we have, use the contact form and we will delete it.
11. Changes
If the practice or the law changes, this page will change. The date at the top is the signal. Material changes get a clearer note on the site or by email if we have a reason to write to you.
12. Contact
Zebra North · United Kingdom
Contact form