Privacy Policy of Northbridge Regional Services Ltd
Effective date: 20 July 2026
1. Introduction and company information
This Privacy Policy explains how Northbridge Regional Services Ltd collects, uses, stores, discloses, and otherwise processes personal data when operating its regional services business, including through its website, communications, customer interactions, service delivery activities, and related administrative functions.
Northbridge Regional Services Ltd acts as the data controller for the personal data described in this Privacy Policy, meaning it determines the purposes and means of processing.
Company details:
- Name: Northbridge Regional Services Ltd
- Address: Northbridge Regional Services, 18 Wapping Lane, London E1W 2RL, UK
- Email: [email protected]
- Phone: +44 20 7946 8372
This Privacy Policy should be read together with any terms of service, notices, consent statements, or other information provided to you from time to time.
2. Data collection and processing
Northbridge Regional Services Ltd may collect and process the following categories of personal data, depending on your relationship with us and how you interact with our services:
- Identity data: name, title, username, job title, and similar identifiers.
- Contact data: postal address, email address, telephone number, and preferred contact details.
- Account and profile data: login credentials, account settings, preferences, and communication choices.
- Transaction and service data: records of services requested, provided, or delivered, correspondence, feedback, and support requests.
- Payment and financial data: billing details, payment status, and transaction records, where applicable.
- Technical data: IP address, browser type, device identifiers, operating system, log files, and usage information collected through websites or digital systems.
- Communications data: emails, messages, call notes, meeting notes, and contact history.
- Marketing and preference data: your marketing preferences and consent choices.
- Compliance data: information needed to meet legal, regulatory, tax, accounting, or audit obligations.
We may collect personal data directly from you, automatically through our systems and websites, from third parties such as service providers or business partners, or from publicly available sources where permitted by law.
We do not intentionally collect special category data unless it is necessary and permitted under applicable law, and where required we will request appropriate consent or rely on another lawful basis.
3. Purpose of data processing
Northbridge Regional Services Ltd processes personal data for the following purposes:
- to provide, manage, and improve our regional services;
- to communicate with clients, suppliers, and website users;
- to respond to enquiries, requests, complaints, and support matters;
- to manage business relationships and contractual obligations;
- to process invoices, payments, and financial records;
- to maintain internal administration, accounting, and record keeping;
- to ensure the security, integrity, and proper operation of our systems and premises;
- to comply with legal and regulatory obligations;
- to prevent fraud, misuse, and other unlawful activity;
- to carry out analytics, service planning, and service improvement;
- to send marketing communications where permitted and in accordance with your preferences;
- to establish, exercise, or defend legal claims.
4. Legal basis for processing
We process personal data only where we have a lawful basis to do so under applicable privacy laws. Depending on the circumstances, our legal bases may include:
- Performance of a contract: where processing is necessary to enter into or perform a contract with you.
- Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.
- Consent: where you have given clear consent for a specific purpose, such as certain marketing activities or optional data uses.
- Legal obligation: where processing is necessary to comply with a legal or regulatory requirement.
- Vital interests: where processing is necessary to protect someone’s life or physical safety.
- Public task or official authority: where applicable and permitted by law.
Where we rely on legitimate interests, these may include managing and improving our services, maintaining security, handling customer relationships, preventing fraud, and administering our operations efficiently.
5. Data sharing and third parties
Northbridge Regional Services Ltd may share personal data with third parties only where necessary and appropriate for the purposes described in this Privacy Policy. These third parties may include:
- IT, hosting, cloud, and communications service providers;
- professional advisers such as lawyers, accountants, auditors, and insurers;
- payment processors, banking partners, and financial service providers;
- business partners, contractors, and subcontractors involved in service delivery;
- regulatory authorities, tax authorities, law enforcement, or courts where required by law;
- other third parties where you have instructed us to do so or consented to the disclosure.
All third parties are required to handle personal data securely and in accordance with applicable legal obligations. We do not sell personal data.
6. Data transfer to third countries
Depending on the systems and service providers we use, personal data may be transferred to, stored in, or accessed from countries outside the United Kingdom and, where applicable, outside the European Economic Area.
Where such transfers occur, Northbridge Regional Services Ltd will take appropriate safeguards to protect your personal data, which may include:
- relying on adequacy regulations or adequacy decisions where available;
- using standard contractual clauses or equivalent transfer mechanisms;
- implementing additional technical and organisational safeguards where necessary.
We will ensure that any international transfer is carried out in a manner consistent with applicable privacy requirements.
7. Storage duration
Northbridge Regional Services Ltd retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, tax, regulatory, and reporting obligations, or to establish, exercise, or defend legal claims.
The retention period depends on factors such as:
- the nature of the data;
- the purpose of the processing;
- contractual or business needs;
- legal retention requirements;
- limitation periods for claims.
When personal data is no longer required, we will securely delete it, anonymise it, or otherwise ensure it is no longer identifiable, unless retention is required by law.
8. User rights
Subject to applicable law, you may have the following rights in relation to your personal data:
- Right of access: to request confirmation of whether we process your personal data and to obtain a copy of that data.
- Right to rectification: to request correction of inaccurate or incomplete personal data.
- Right to erasure: to request deletion of personal data in certain circumstances.
- Right to restriction: to request limitation of processing in certain circumstances.
- Right to data portability: to receive certain personal data in a structured, commonly used, machine-readable format and to request its transfer where technically feasible.
- Right to object: to object to processing based on legitimate interests or to direct marketing at any time.
To exercise any of these rights, please contact us using the details provided in the Contact Information section. We may need to verify your identity before responding. We will respond within the timeframe required by applicable law.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.
If you withdraw consent, we may be unable to continue providing certain optional features or communications that depend on it. You may withdraw consent by contacting Northbridge Regional Services Ltd at [email protected].
10. Right to complain
If you have concerns about how Northbridge Regional Services Ltd handles your personal data, we encourage you to contact us first so we can try to resolve the matter.
You also have the right to lodge a complaint with the relevant supervisory authority or data protection regulator in your jurisdiction, particularly where you believe that your rights have been infringed.
For UK residents, this may include the Information Commissioner's Office (ICO). Details of the relevant authority may vary depending on your location and the applicable law.
11. Data security
Northbridge Regional Services Ltd implements appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
These measures may include, where appropriate:
- access controls and authentication measures;
- staff confidentiality obligations and training;
- secure storage and transmission methods;
- role-based permissions and least-privilege access;
- regular maintenance, monitoring, and vulnerability management;
- procedures for dealing with suspected data incidents or breaches.
While we work to protect your personal data, no system can be guaranteed to be completely secure. You should also take care to protect your own information, including any passwords or account credentials.
12. Contact information
If you have any questions about this Privacy Policy, our privacy practices, or wish to exercise your rights, please contact:
- Northbridge Regional Services Ltd
- Address: Northbridge Regional Services, 18 Wapping Lane, London E1W 2RL, UK
- Email: [email protected]
- Phone: +44 20 7946 8372
13. Changes to privacy policy
Northbridge Regional Services Ltd may update this Privacy Policy from time to time to reflect changes in our practices, operational requirements, technology, or applicable legal obligations.
Any updates will take effect when published on our website or otherwise communicated to you, unless a different effective date is stated. We encourage you to review this Privacy Policy periodically to stay informed about how we process personal data.