Privacy Policy of Northbridge Marketing Automation Ltd
This Privacy Policy explains how Northbridge Marketing Automation Ltd collects, uses, stores, shares, and otherwise processes personal data in connection with its marketing-automation business, website, services, communications, and related activities.
1. Introduction and company information
Controller: Northbridge Marketing Automation Ltd
Address: Northbridge Automation, 14 Leman Street, London E1 8FA, United Kingdom
Email: [email protected]
Phone: +44 20 7946 8135
Northbridge Marketing Automation Ltd acts as the data controller for personal data processed under this Privacy Policy, unless stated otherwise. This policy applies to personal data collected through our website, forms, lead-generation tools, customer relationship management systems, email campaigns, automated marketing workflows, analytics tools, support channels, and any other interactions with us.
2. Data collection and processing
We may collect and process the following categories of personal data:
- Identification data: name, job title, company name, and similar identifiers.
- Contact data: email address, phone number, postal address, and communication preferences.
- Professional data: employer, role, industry, business interests, and professional profile details.
- Technical data: IP address, browser type, device identifiers, operating system, referral source, log data, and cookie-related information.
- Usage data: page visits, interaction history, email engagement, form submissions, click-through activity, and service usage patterns.
- Marketing and preference data: consent records, opt-in/opt-out status, communication preferences, and campaign response data.
- Communication data: correspondence with us, support requests, sales inquiries, and feedback.
- Billing and transaction data: where relevant, payment and invoicing information for services we provide.
We may collect personal data directly from you, automatically through our systems and cookies, from your employer or business contacts, from third-party platforms used in marketing and analytics, and from publicly available sources where permitted by law.
We may also process personal data to profile recipients of marketing communications and to automate communication flows, subject to applicable law and your rights.
3. Purpose of data processing
We process personal data for the following purposes:
- to provide and operate our services;
- to respond to enquiries and communicate with you;
- to manage client and business relationships;
- to deliver marketing communications, newsletters, and promotional materials where permitted;
- to personalise and improve our website, services, and communications;
- to conduct analytics, reporting, testing, and service optimisation;
- to manage consent, preferences, and unsubscribe requests;
- to maintain records and administer contracts, invoices, and payments;
- to ensure security, prevent fraud, and detect misuse;
- to comply with legal, regulatory, and tax obligations;
- to establish, exercise, or defend legal claims.
4. Legal basis for processing
We rely on one or more of the following legal bases, as applicable:
- Consent: where you have given clear consent, for example for certain marketing communications or cookies where required.
- Contract: where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
- Legitimate interests: where processing is necessary for our legitimate business interests, such as operating and improving our services, managing relationships, and protecting our business, provided those interests are not overridden by your rights and freedoms.
- Legal obligation: where processing is necessary to comply with legal or regulatory requirements.
- Vital interests: in rare cases where necessary to protect someone’s vital interests.
Where we rely on legitimate interests, these may include marketing to business contacts, service development, fraud prevention, internal administration, and ensuring secure and efficient operations.
5. Data sharing and third parties
We may share personal data with the following categories of recipients, where necessary for the purposes described in this policy:
- service providers supporting hosting, IT infrastructure, email delivery, analytics, CRM, customer support, and workflow automation;
- professional advisers such as lawyers, accountants, auditors, insurers, and consultants;
- payment processors, invoicing partners, and banks;
- marketing and advertising partners, including campaign management and analytics providers;
- business partners and clients, where needed to deliver services or fulfil contractual obligations;
- public authorities, regulators, courts, and law enforcement where required by law or to protect legal rights;
- prospective buyers or sellers in connection with a business transfer, merger, restructuring, or similar transaction.
We require third parties to process personal data in accordance with applicable law and, where relevant, under contractual confidentiality and security obligations. They may only use personal data for the specified purposes and not for their own independent purposes unless they are separate controllers and lawfully permitted to do so.
6. Data transfer to third countries
Because we may use service providers and tools located outside the United Kingdom, personal data may be transferred to countries that may not provide the same level of data protection as the UK.
Where such transfers occur, Northbridge Marketing Automation Ltd will implement appropriate safeguards, which may include:
- relying on adequacy regulations or decisions where available;
- using appropriate contractual protections such as standard contractual clauses or equivalent transfer mechanisms;
- carrying out transfer assessments and supplementary measures where required;
- ensuring recipients are subject to confidentiality and security obligations.
7. Storage duration
We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, contractual, and reporting requirements.
Retention periods vary depending on the category of data and the context of processing. In general:
- contact and enquiry data are retained for as long as reasonably necessary to handle the request and maintain relevant business records;
- client and contract data are retained for the duration of the relationship and for a further period as required by law or for legal defence purposes;
- marketing data are retained until you opt out, withdraw consent, or object, unless a longer retention period is justified and permitted by law;
- technical and analytics data are retained for limited periods aligned with security, performance, and reporting needs.
When personal data is no longer required, we will delete, anonymise, or securely archive it in accordance with our internal retention practices and applicable law.
8. User rights
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: to obtain confirmation of whether we process your personal data and to receive a copy of it.
- Rectification: to request correction of inaccurate or incomplete personal data.
- Erasure: to request deletion of personal data in certain circumstances.
- Restriction: to request that we limit the processing of your personal data in certain situations.
- Data portability: to receive certain personal data in a structured, commonly used, machine-readable format and, where technically feasible, to have it transmitted to another controller.
- Objection: to object to processing based on legitimate interests and to object at any time to direct marketing.
You may also have the right not to be subject to decisions based solely on automated processing, including profiling, where such decisions have legal or similarly significant effects, subject to applicable law.
To exercise your rights, please contact us using the details below. We may need to verify your identity before responding. We will respond within the timeframe required by applicable law.
9. Withdrawal of consent
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
You can withdraw consent by using the unsubscribe link in our emails, adjusting your preferences where available, or contacting us directly. If you withdraw consent, we may still process your personal data where another lawful basis applies.
10. Right to complain
If you have concerns about how we process your personal data, we encourage you to contact us first so we can try to resolve the issue.
You also have the right to lodge a complaint with a supervisory authority or data protection regulator in your jurisdiction. If you are based in the United Kingdom, you may contact the Information Commissioner’s Office (ICO).
11. Data security
Northbridge Marketing Automation Ltd implements appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
Such measures may include access controls, role-based permissions, encryption where appropriate, network and system monitoring, secure development practices, staff confidentiality obligations, vendor due diligence, and incident response procedures.
However, no system or transmission method is completely secure. While we work to protect personal data, we cannot guarantee absolute security.
12. Contact information
If you have any questions, requests, or concerns regarding this Privacy Policy or our handling of personal data, please contact:
Northbridge Marketing Automation Ltd
Northbridge Automation, 14 Leman Street, London E1 8FA, United Kingdom
Email: [email protected]
Phone: +44 20 7946 8135
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations.
Any updated version will be posted on our website with a revised effective date where appropriate. If changes are material, we may provide additional notice by email, website notice, or other reasonable means.
Your continued use of our services after any update indicates your acknowledgment of the revised Privacy Policy, to the extent permitted by law.