Plain English, including the data bit.

Who controls your information

Northbridge Web Co. is the controller of personal information used to run this business. Jack Hamilton is responsible for deciding why and how that information is used. You can use the email or phone number on this page for any privacy question or request.

What is collected

Depending on how you contact Northbridge, this can include:

• your name, business name, email address and phone number;
• your website address and the details you include in an enquiry;
• messages, project notes, proposals, agreements, invoices and payment records;
• public business contact details used for carefully targeted business-to-business outreach; and
• limited technical and security information processed by the website host, such as an IP address, browser details and submission time.

Please do not send passwords, identity documents, medical information, financial account details or other sensitive personal data through the website forms.

Why it is used

Enquiries and quotes

To assess what you need, reply, carry out a compatibility check and prepare a quote. The lawful bases are taking steps at your request before a contract and Northbridge's legitimate interest in responding to genuine business enquiries.

Client work and administration

To deliver agreed work, provide support, keep project records, invoice and meet tax or legal duties. The lawful bases are contract and legal obligation.

Security and service reliability

To prevent spam, diagnose faults, protect the website and maintain reliable enquiry routes. The lawful basis is legitimate interests in operating a secure and dependable service.

Limited business-to-business outreach

Northbridge may use public business contact details to send a relevant, individual message to a limited company or other corporate subscriber where lawful. The lawful basis is legitimate interests. Every objection or opt-out is respected and recorded so the business is not contacted again.

Who information is shared with

Northbridge does not sell personal information. It is shared only where needed with service providers that help run the business, including website hosting and form processing, business email, cloud documents, security, payment and accounting services. Information may also be disclosed when required by law or to establish, exercise or defend legal claims.

Some suppliers may process information outside the UK. Where this happens, Northbridge relies on the supplier's contractual safeguards and the transfer mechanisms required by UK data protection law.

How long it is kept

• Enquiries that do not become client work are normally deleted 12 months after the last contact.
• Client and project information is kept while the work and support relationship is active, then only for as long as needed for records, disputes and legal duties.
• Tax and accounting records are kept for at least the period required by HMRC, normally at least five years after the relevant 31 January Self Assessment deadline.
• A minimal suppression record may be kept for as long as needed to honour an opt-out or clear request not to be contacted.
• Technical security records are kept only for the host or service provider's operational retention period.

Your rights

Depending on the circumstances, you can ask for access to your information, correction, deletion, restriction, portability or object to its use. You have an absolute right to object to direct marketing. Email hello@northbridgeweb.co.uk and Northbridge will respond without unnecessary delay.

If you are unhappy with the response, you can complain to the Information Commissioner's Office.

Cookies and changes

The Northbridge website does not currently use advertising or analytics cookies. The hosting platform may use strictly necessary security and delivery technology. This notice will be reviewed when the website, suppliers or uses of personal data change.