Effective date: 31 August 2026
1. Introduction and company information
This Privacy Policy explains how Northbridge Creative Studio Ltd (“we”, “us”, “our”) collects, uses, discloses, stores, and otherwise processes personal data in connection with our advertising and creative studio services, website, client communications, marketing activities, events, and related business operations.
Northbridge Creative Creative Studio Ltd is the data controller responsible for the processing of your personal data described in this Privacy Policy, unless we state otherwise.
Company details:
- Legal name: Northbridge Creative Studio Ltd
- Address: Northbridge Creative Studio, 14a Old Street, London EC1V 9BH, UK
- Email: [email protected]
- Phone: +44 20 7846 5921
This Privacy Policy applies to personal data collected from clients, prospective clients, suppliers, contractors, website visitors, event attendees, marketing contacts, and other individuals who interact with Northbridge Creative Studio Ltd.
2. Data collection and processing
We may collect and process the following categories of personal data:
- Identity data: name, title, job role, employer, signature, and similar identifiers.
- Contact data: email address, postal address, telephone number, and social media or professional contact details.
- Business and account data: company name, billing details, project details, correspondence, contract information, and payment-related information.
- Technical data: IP address, browser type, device identifiers, operating system, access times, and website usage data.
- Marketing and communications data: preferences for receiving marketing, newsletter subscriptions, responses to campaigns, and communication history.
- Creative and project data: content, briefs, assets, photographs, video, copy, brand materials, and other materials shared with us for the delivery of services.
- Recruitment data: CVs, cover letters, employment history, qualifications, references, and interview notes where applicable.
- Financial data: invoicing details, payment records, and tax-related information.
We collect personal data directly from you, from organisations you represent, through our website and digital channels, from business partners, from publicly available sources, and from third-party service providers where lawful.
We may also process data using cookies and similar technologies on our website. Where required, we will obtain consent or provide the necessary controls in accordance with applicable law.
3. Purpose of data processing
We process personal data for the following purposes:
- to provide creative, design, advertising, branding, and related studio services;
- to manage client relationships, enquiries, proposals, quotations, and contracts;
- to communicate with clients, suppliers, prospects, and website users;
- to deliver, personalise, and improve our services, content, and website experience;
- to process payments, invoices, tax records, and accounts administration;
- to conduct marketing, promotional campaigns, and business development activities;
- to organise and manage meetings, events, and workshops;
- to recruit employees, contractors, and freelancers;
- to maintain records, protect our business, and enforce our legal rights;
- to comply with applicable legal, regulatory, accounting, and reporting obligations.
4. Legal basis for processing
We process personal data only where we have a lawful basis to do so. Depending on the context, our legal bases may include:
- Performance of a contract: where processing is necessary to enter into or perform a contract with you or the organisation you represent.
- Legitimate interests: where processing is necessary for our legitimate business interests, such as providing and improving services, securing our systems, managing business relationships, and marketing to business contacts, provided those interests are not overridden by your rights and interests.
- Consent: where you have given us clear consent for specific processing activities, such as certain marketing communications or cookies where required.
- Legal obligation: where processing is necessary to comply with legal or regulatory obligations.
- Vital interests: where necessary to protect someone’s life or physical safety, in rare circumstances.
- Public task or official authority: where applicable under relevant law, though this is generally unlikely for our business.
Where we rely on legitimate interests, we will consider and balance any potential impact on you and your rights before processing your personal data.
5. Data sharing and third parties
We may share personal data with selected third parties where necessary and lawful, including:
- service providers acting on our behalf, such as website hosting, IT support, cloud storage, CRM, analytics, email delivery, and project management providers;
- professional advisers, including lawyers, accountants, auditors, insurers, and consultants;
- payment processors, banks, and invoicing platforms;
- subcontractors, freelancers, photographers, designers, developers, production partners, and other delivery partners involved in client work;
- regulatory authorities, law enforcement, courts, and other public bodies where required by law;
- prospective buyers or successors in the event of a merger, acquisition, restructuring, or sale of assets, subject to confidentiality protections.
We require third parties who process personal data on our behalf to protect it and to use it only for the purposes for which it was disclosed. Where such third parties act as processors, they are contractually bound to process data in accordance with our instructions and applicable law.
6. Data transfer to third countries
Some of our service providers or business partners may be located outside the United Kingdom or the European Economic Area. This may result in the transfer of personal data to countries that may not provide the same level of data protection as the UK.
Where such transfers occur, we will take appropriate safeguards as required by applicable law. These safeguards may include:
- standard contractual clauses or equivalent approved transfer mechanisms;
- assessments of the destination country’s legal framework;
- additional technical, organisational, and contractual protections where necessary.
If you would like further information about international transfers and the safeguards we use, please contact us using the details below.
7. Storage duration
We keep personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, contractual, or reporting requirements.
The retention period depends on the nature of the data and the purpose of processing. In general:
- client and contract records are retained for the duration of the relationship and for a reasonable period thereafter;
- financial and tax records are retained for the period required by applicable law;
- marketing data is retained until you opt out, withdraw consent, or we determine it is no longer relevant;
- recruitment data is retained for the recruitment process and, where permitted, for a limited period afterward;
- website and technical logs are retained for security, analytics, and operational purposes for limited periods.
When personal data is no longer required, we will securely delete it, anonymise it, or otherwise render it unusable.
8. User rights
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: to request confirmation of whether we process your personal data and obtain a copy of it.
- Rectification: to request correction of inaccurate or incomplete personal data.
- Erasure: to request deletion of your personal data in certain circumstances.
- Restriction: to request that we limit the processing of your personal data in certain situations.
- Data portability: to request a copy of certain personal data in a structured, commonly used, machine-readable format and, where technically feasible, have it transmitted to another controller.
- Objection: to object to processing based on legitimate interests or for direct marketing purposes.
We may need to verify your identity before responding to your request. We will respond within the timeframe required by applicable law.
These rights may be subject to limitations and exceptions under applicable law, including where processing is necessary for compliance with legal obligations or the establishment, exercise, or defence of legal claims.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
You may withdraw consent by contacting us using the details in this Privacy Policy or, where relevant, by using unsubscribe links, cookie settings, or account preferences.
10. Right to complain
If you have concerns about how we process your personal data, we encourage you to contact us first so that we can try to resolve the issue.
You also have the right to lodge a complaint with a supervisory authority. In the UK, the relevant authority is the Information Commissioner’s Office (ICO). You can contact the ICO through its website or by other means made available by the ICO.
11. Data security
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include:
- access controls and authentication procedures;
- encrypted communications and secure storage where appropriate;
- role-based access restrictions;
- staff confidentiality obligations and training;
- regular review of security practices and vendor controls;
- backup, recovery, and incident response procedures.
Although we take reasonable steps to secure personal data, no system can be guaranteed to be completely secure. If we become aware of a personal data breach affecting your data, we will handle it in accordance with applicable law.
12. Contact information
If you have any questions about this Privacy Policy or how Northbridge Creative Studio Ltd handles personal data, please contact us:
- Northbridge Creative Studio Ltd
- Address: Northbridge Creative Studio, 14a Old Street, London EC1V 9BH, UK
- Email: [email protected]
- Phone: +44 20 7846 5921
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, operational needs, or service offerings. Any updates will be posted on this page with a revised effective date where appropriate.
We encourage you to review this Privacy Policy periodically to stay informed about how Northbridge Creative Studio Ltd processes personal data.