This Privacy Policy explains how Northbridge Marketing Ltd collects, uses, discloses, transfers, stores, and protects personal data when you interact with us, including when you use our website, contact us, request our services, subscribe to communications, or otherwise engage with our marketing activities.
Northbridge Marketing Ltd is the data controller for the personal data described in this Privacy Policy, unless we notify you otherwise in a specific case.
Company details:
Northbridge Marketing Ltd
Northbridge Marketing, 14 Great Ancoats Street, Manchester M4 5AD, United Kingdom
Email: [email protected]
Phone: +44 161 924 7583
1. Introduction and company information
Northbridge Marketing Ltd is a marketing business that may provide services such as digital marketing, campaign management, lead generation, analytics, advertising support, email communications, and related consultancy services.
We are committed to respecting your privacy and handling personal data fairly, transparently, and securely. This Privacy Policy applies to personal data we collect from:
- visitors to our website;
- prospective and existing clients;
- business contacts and suppliers;
- individuals who subscribe to newsletters or marketing communications;
- people who communicate with us by email, phone, or other channels;
- individuals whose data we process in connection with marketing activities, subject to applicable law.
2. Data collection and processing
We may collect and process the following categories of personal data:
- Identity data: name, title, job title, employer, and similar identifiers.
- Contact data: email address, telephone number, postal address, and business contact details.
- Account and correspondence data: records of communications, enquiries, and support interactions.
- Technical data: IP address, browser type, device identifiers, operating system, referral source, log data, and website usage information.
- Marketing and preference data: communication preferences, consent records, responses to campaigns, and engagement metrics.
- Usage data: information about how you use our website, services, and emails, including pages viewed and links clicked.
- Transaction and service data: billing information, contract details, service history, and delivery records.
We may collect personal data directly from you, automatically through our website or systems, from our clients, from public sources, and from third-party service providers or partners where permitted by law.
We do not intentionally collect special category data or sensitive personal data unless this is necessary and lawful in a specific context and we have an appropriate legal basis. Where required, we will seek your explicit consent or rely on another lawful basis permitted by applicable law.
3. Purpose of data processing
We process personal data for the following purposes:
- to provide and manage our marketing services;
- to respond to enquiries and communicate with you;
- to create and manage client and business relationships;
- to send newsletters, promotional materials, and other marketing communications where permitted;
- to analyse website performance, campaign effectiveness, and audience engagement;
- to personalise content and improve user experience;
- to administer contracts, invoicing, payments, and service delivery;
- to maintain business records and internal administration;
- to detect, investigate, and prevent fraud, misuse, or security incidents;
- to comply with legal, regulatory, accounting, and reporting obligations;
- to establish, exercise, or defend legal claims.
4. Legal basis for processing
We will only process personal data where we have a valid legal basis. Depending on the context, the legal bases may include:
- Consent: where you have given clear consent for us to process your personal data for a specific purpose, such as receiving certain marketing communications or optional cookies.
- Performance of a contract: where processing is necessary to enter into or perform a contract with you or to take steps at your request before entering into a contract.
- Legal obligation: where processing is necessary to comply with applicable laws and regulatory requirements.
- Legitimate interests: where processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests. These interests may include business development, service improvement, security, fraud prevention, and certain direct marketing activities where permitted by law.
Where we rely on legitimate interests, we will consider and balance any potential impact on you and your rights. You may object to processing based on legitimate interests in accordance with Section 8 below.
5. Data sharing and third parties
We may share personal data with trusted third parties where necessary for the purposes described in this Privacy Policy, including:
- service providers that support hosting, IT, analytics, customer relationship management, communications, and security;
- email delivery, marketing automation, and advertising technology providers;
- payment processors, accountants, auditors, and professional advisers;
- subcontractors and business partners involved in service delivery;
- regulators, law enforcement, courts, or other authorities where required by law;
- third parties involved in a corporate transaction, merger, acquisition, restructuring, or asset sale, subject to confidentiality obligations.
We require third parties to handle personal data securely and in accordance with applicable data protection requirements. Where a third party acts as our processor, it will only process personal data on our documented instructions, unless otherwise required by law.
We do not sell personal data in the ordinary sense of the term. However, certain advertising and analytics arrangements may involve sharing data with third-party service providers or technologies as described in this Policy and in any applicable cookie notice.
6. Data transfer to third countries
Some of our service providers or partners may be located outside the United Kingdom or may process data in countries that do not provide the same level of data protection as the UK.
Where we transfer personal data internationally, we will take appropriate safeguards as required by applicable law. These may include:
- standard contractual clauses or equivalent approved transfer mechanisms;
- adequacy regulations or decisions, where applicable;
- supplementary technical and organisational measures where appropriate.
You may contact us for further information about the safeguards we use for international transfers.
7. Storage duration
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, reporting, and business requirements.
In determining retention periods, we consider:
- the nature and sensitivity of the data;
- the purposes for which we process the data;
- the legal basis for processing;
- applicable limitation periods and statutory retention requirements;
- whether the data is needed for dispute resolution or enforcement.
When personal data is no longer required, we will delete, anonymise, or securely archive it in accordance with our retention practices and applicable law.
8. User rights (access, rectification, erasure, restriction, data portability, objection)
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: to request confirmation of whether we process your personal data and obtain a copy of it.
- Rectification: to request correction of inaccurate or incomplete personal data.
- Erasure: to request deletion of your personal data in certain circumstances.
- Restriction: to request that we restrict processing in certain circumstances.
- Data portability: to request receipt of certain data in a structured, commonly used, machine-readable format and, where feasible, transmission to another controller.
- Objection: to object to processing based on legitimate interests and to object at any time to processing for direct marketing purposes.
To exercise any of these rights, please contact us using the details in Section 12. We may need to verify your identity before responding to your request. We will respond within the timeframe required by applicable law.
Please note that these rights are not absolute and may be subject to legal exceptions and limitations.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before your withdrawal.
If you withdraw consent, we may no longer be able to provide certain services or communications to you. To withdraw consent, you can use any available unsubscribe mechanism or contact us at [email protected].
10. Right to complain
If you have concerns about how we process your personal data, we encourage you to contact us first so that we can address your concerns.
You also have the right to lodge a complaint with a relevant data protection supervisory authority or regulator, subject to applicable law. If you are in the United Kingdom, you may have the right to complain to the Information Commissioner's Office (ICO) or the competent authority in your jurisdiction.
11. Data security
Northbridge Marketing Ltd implements appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
These measures may include:
- access controls and authentication measures;
- encryption and secure transmission protocols where appropriate;
- network and system monitoring;
- regular backups and recovery procedures;
- staff confidentiality obligations and privacy training;
- vendor and supplier due diligence;
- incident response and breach management processes.
However, no system can be guaranteed to be completely secure. We cannot guarantee absolute security of information transmitted over the internet, and you provide information at your own risk to the extent permitted by law.
12. Contact information
If you have any questions, requests, or concerns about this Privacy Policy or our data practices, please contact:
Northbridge Marketing Ltd
Northbridge Marketing, 14 Great Ancoats Street, Manchester M4 5AD, United Kingdom
Email: [email protected]
Phone: +44 161 924 7583
Please include sufficient information to help us identify you and respond to your request appropriately.
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations.
When we make material changes, we will take reasonable steps to notify you, which may include posting the updated policy on our website or contacting you directly where appropriate. The updated version will become effective when posted, unless stated otherwise.
We encourage you to review this Privacy Policy periodically to stay informed about how Northbridge Marketing Ltd processes personal data.