North South Industries Privacy Notice

Last updated: October 7, 2026.

North South Industries Inc. ("NSI", "we", "us"), at 550 N 5th Street, Rapid City, SD 57701, USA, operates northsouthindustries.io, press.northsouthindustries.io, and careers.northsouthindustries.io (the "Sites"). This notice explains what we collect on the Sites and your choices. Our individual product brands have their own privacy notices. For questions or requests, use the form at northsouthindustries.io/contact or email support@northsouthindustries.io.

1. Scope

This notice covers the three NSI company Sites above. It does not cover the separate product brands, which each publish their own notice.

2. What we collect

• Contact and media-request forms: your name, email address, and message, and for media requests the request type and organization. Submissions are delivered through our form processor, formsubmit.co, which emails them to support@northsouthindustries.io. A copy goes to our own marketing platform (marketing.northsouthindustries.io). For each submission it stores a SHA-256 hash of your email address, your name, and, for media requests, the organization you enter. For abuse protection, rate-limiting, and counting visits by device type, it also stores a salted, truncated hash of your IP address and a coarse device class (bot, mobile, tablet, or desktop). It does not store your raw IP address, the email address itself, the message content, or any other device data. We use what you send to respond to you.
• Careers: if you apply, your application and resume go to our careers system. Resumes are not publicly accessible.
• Campaign cookie: our first-party marketing script sets one cookie, nsi_mk, for one year (SameSite=Lax). It records your first-touch campaign source (utm parameters, referrer, landing path, and a timestamp). We use no third-party analytics and no advertising pixels.
• Tracking protection (NodPulse): the Sites run behind our own NodPulse gateway, which strips tracking parameters and tracker cookies from requests, and identifying headers from responses, before they reach our server. No NodPulse script runs in your browser.
• Press: the press site offers an RSS feed and does not require an account.
• Server logs: standard web-server access logs (IP address, time, page, user agent) for security and troubleshooting.

3. Cookies and your choices

The only cookie we set is nsi_mk (first-party, one year), described above, for campaign attribution. It is not used for third-party advertising, and we do not set it unless you click Accept on our cookie banner; if you decline or make no choice, the marketing snippet and the nsi_mk cookie do not load. To remember your choice, we store two strictly necessary items in your browser's local storage, nsi_consent and nsi_consent_date; these are not cookies and are used only to honor your consent decision. You can reopen the banner from the "Cookie settings" link in the footer, and you can block or delete cookies and local storage through your browser settings.

4. Why we process it, and legal bases (GDPR / UK GDPR)

• Responding to your contact or media request: your request and our legitimate interest in replying.
• Processing a job application: steps toward possible employment and our legitimate interest in recruiting.
• Campaign attribution (nsi_mk): your consent where required, otherwise our legitimate interests.
• Security (server logs, NodPulse): our legitimate interests.
• Any marketing email: your consent.

5. Sharing and subprocessors

We do not sell your personal information or share it for advertising. We use: formsubmit.co (form delivery), our own marketing platform and NodPulse gateway (both NSI first-party), our hosting provider, and our careers system. We may disclose data to comply with law or in a merger, with notice where required.

6. International transfers

We are based in the United States and process data there. Where we transfer personal data from the European Economic Area or the United Kingdom, we rely on appropriate safeguards, including the EU Standard Contractual Clauses and the UK International Data Transfer Addendum.

7. Retention

Form messages: as long as needed to handle your request and for our records, then deleted. Marketing-platform records (hash and name, and consented email/message): until you ask to be removed or 24 months, whichever comes first. Campaign cookie: one year. Job applications and resumes: for the hiring process and up to two years unless you ask us to remove them earlier or a longer period is required. Server logs: 90 days.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to processing, to data portability, and to withdraw consent, and to complain to a supervisory authority. California residents (CCPA/CPRA): you may know, access, correct, and delete your personal information and limit the use of sensitive personal information; we do not sell or share personal information for cross-context behavioral advertising. To exercise any right, email support@northsouthindustries.io or use the contact form.

9. Children

The Sites are not directed to children under 16, and we do not knowingly collect their personal information.

10. Changes and contact

We will post any update here with a new date. North South Industries Inc., 550 N 5th Street, Rapid City, SD 57701, USA. Contact: support@northsouthindustries.io or northsouthindustries.io/contact.

Effective date: on publication.