Effective date: 31 August 2026
1. Introduction and company information
This Privacy Policy explains how Northbridge Digital Marketing Ltd collects, uses, discloses, transfers, and protects personal data when you visit our website, contact us, request our services, or otherwise interact with us. We are a website-marketing business and, in the context of our services, we may process personal data relating to website visitors, prospective clients, client contacts, and other individuals whose information is provided to us.
Northbridge Digital Marketing Ltd is the data controller for the personal data described in this Privacy Policy, unless we state otherwise. Our contact details are:
- Company name: Northbridge Digital Marketing Ltd
- Address: Northbridge Digital, 24 St John's Road, Tunbridge Wells, TN4 9NE, UK
- Email: [email protected]
- Phone: +44 20 7946 8372
We encourage you to read this Privacy Policy carefully so that you understand how your personal data is handled.
2. Data collection and processing
We may collect and process the following categories of personal data:
- Identity data: name, title, company name, job title, and similar identifiers.
- Contact data: email address, telephone number, postal address, and communication preferences.
- Technical data: IP address, browser type and version, device identifiers, operating system, time zone setting, page interaction data, referral source, and website usage data.
- Marketing and communication data: your preferences in receiving marketing from us and your communication history with us.
- Service and account data: enquiry details, project requirements, meeting notes, service-related correspondence, and information necessary to provide marketing services.
- Payment and transaction data: billing information, payment status, and transaction records, where applicable.
- Client campaign data: data relevant to website marketing services, such as analytics, conversion events, lead information, form submissions, and advertising performance data.
We may collect personal data in the following ways:
- directly from you when you submit forms, contact us, request a proposal, or communicate with us;
- automatically through cookies and similar technologies when you use our website;
- from our clients where they provide us with information necessary to deliver services;
- from third-party service providers, analytics tools, advertising platforms, and publicly available sources, where appropriate and lawful.
3. Purpose of data processing
We process personal data for the following purposes:
- to respond to enquiries and provide quotes, proposals, and information about our services;
- to deliver website-marketing services, including campaign planning, optimisation, reporting, and account management;
- to operate, maintain, and improve our website, services, systems, and customer experience;
- to analyse website traffic, user behaviour, campaign performance, and service effectiveness;
- to communicate with you regarding administrative, service, and support matters;
- to send marketing communications where permitted by law and, where required, with your consent;
- to comply with legal, regulatory, and contractual obligations;
- to prevent fraud, misuse, security incidents, and other unlawful activities;
- to establish, exercise, or defend legal claims;
- to manage our business operations, record keeping, and internal administration.
4. Legal basis for processing
We process personal data only where we have a valid legal basis. Depending on the specific context, our processing may be based on one or more of the following:
- Consent: where you have given us permission, for example for certain marketing communications or cookie-based tracking where required.
- Contract: where processing is necessary to enter into or perform a contract with you or to take steps at your request before entering into a contract.
- Legitimate interests: where processing is necessary for our legitimate interests, such as operating our website, improving our services, securing our systems, and managing client relationships, provided those interests are not overridden by your rights and freedoms.
- Legal obligation: where processing is necessary to comply with a legal or regulatory obligation.
Where we rely on legitimate interests, those interests may include delivering and improving marketing services, analysing website performance, preventing fraud, and maintaining business records.
5. Data sharing and third parties
We may share personal data with selected third parties where necessary and lawful, including:
- Service providers: hosting providers, analytics providers, email service providers, CRM providers, payment processors, IT support, and document storage providers;
- Advertising and marketing platforms: platforms used for website analytics, paid advertising, conversion tracking, audience measurement, and campaign management;
- Professional advisers: lawyers, accountants, auditors, insurers, and other professional advisers where required;
- Authorities and regulators: courts, law enforcement bodies, tax authorities, or regulatory bodies where required by law or to protect our rights;
- Business transferees: a purchaser, successor, or prospective purchaser in connection with a merger, acquisition, restructuring, or sale of assets.
We require third parties that process personal data on our behalf to implement appropriate safeguards and to use the data only for specified purposes and in accordance with applicable law.
6. Data transfer to third countries
Where personal data is transferred outside the United Kingdom and/or the European Economic Area, we will take appropriate steps to ensure that the data receives an adequate level of protection. This may include relying on:
- an adequacy decision or equivalent recognition by the relevant authority;
- standard contractual clauses or other approved transfer mechanisms;
- supplementary technical and organisational safeguards, where necessary;
- your explicit consent, where permitted and appropriate.
Please note that some of our service providers, analytics tools, and advertising platforms may store or process data in third countries. Where this happens, we seek to ensure that appropriate protections are in place.
7. Storage duration
We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy any legal, accounting, reporting, or contractual requirements.
- Enquiry and contact data are typically retained for as long as needed to manage the enquiry and for a reasonable period thereafter.
- Client and service records are generally retained for the duration of the relationship and for a period after completion for legal, tax, and business record purposes.
- Marketing preference data is retained until you unsubscribe, withdraw consent, or object where applicable.
- Technical and analytics data is retained in accordance with our cookie and analytics settings and the retention periods of the relevant tools.
Where data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you.
8. User rights
Depending on the applicable law and the circumstances of processing, you may have the following rights in relation to your personal data:
- Access: to request confirmation of whether we process your personal data and to obtain a copy of it;
- Rectification: to request correction of inaccurate or incomplete personal data;
- Erasure: to request deletion of your personal data in certain circumstances;
- Restriction: to request that we restrict the processing of your personal data in certain circumstances;
- Data portability: to request a copy of certain personal data in a structured, commonly used, machine-readable format and, where technically feasible, to have it transmitted to another controller;
- Objection: to object to processing based on legitimate interests and to object at any time to direct marketing.
To exercise any of these rights, please contact us using the details in the Contact Information section. We may need to verify your identity before responding to your request. We will respond within the timeframe required by applicable law.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
If you withdraw consent, we may no longer be able to provide certain services or communications to you. You can withdraw consent by using the unsubscribe mechanism in our communications, adjusting your cookie settings where applicable, or contacting us directly.
10. Right to complain
If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue.
You may also have the right to lodge a complaint with a supervisory authority or data protection regulator in your country of residence, place of work, or where the alleged infringement occurred. If you are in the United Kingdom, this may include the Information Commissioner's Office (ICO).
11. Data security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures may include:
- access controls and authentication measures;
- encryption where appropriate;
- secure storage and transmission practices;
- regular system monitoring and maintenance;
- staff confidentiality obligations and training;
- data minimisation and retention controls.
Although we take reasonable steps to protect personal data, no system or method of transmission over the internet is completely secure. We therefore cannot guarantee absolute security.
12. Contact information
If you have any questions about this Privacy Policy or our use of personal data, or if you wish to exercise your rights, please contact us at:
- Northbridge Digital Marketing Ltd
- Address: Northbridge Digital, 24 St John's Road, Tunbridge Wells, TN4 9NE, UK
- Email: [email protected]
- Phone: +44 20 7946 8372
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updated version will be published on our website with a revised effective date where appropriate.
We encourage you to review this Privacy Policy periodically to stay informed about how Northbridge Digital Marketing Ltd protects your personal data.