This Privacy Policy explains how Northlight Commercial Studio Ltd collects, uses, stores, shares, and protects personal data in connection with its commercial-studio activities. It also explains the rights available to individuals under applicable privacy and data protection laws.
1. Introduction and Company Information
The data controller responsible for your personal data is:
- Company: Northlight Commercial Studio Ltd
- Address: Northlight Studio, 2-6 Minerva Road, Park Royal, London NW10 6HJ, United Kingdom
- Email: [email protected]
- Phone: +44 20 8962 7415
Northlight Commercial Studio Ltd operates as a commercial studio, providing creative, production, studio, and related services to clients, suppliers, contractors, and website visitors. This Privacy Policy applies to personal data collected through our website, email, telephone, in person, during commercial engagements, and through any related communications or services.
2. Data Collection and Processing
We may collect and process the following categories of personal data:
- Identity and contact details: name, job title, company name, email address, telephone number, postal address, and similar contact information.
- Business and project information: client requirements, project briefs, production details, correspondence, preferences, and contractual records.
- Financial and transactional information: billing details, payment records, invoices, bank details where necessary, and transaction history.
- Technical and usage information: IP address, browser type, device information, log data, cookies, analytics data, and website interaction details.
- Communications data: enquiries, feedback, complaints, survey responses, and other messages.
- Images, video, and audio: where provided by you or generated in the course of our commercial services, subject to applicable legal and contractual requirements.
We collect personal data directly from you, from your employer or organisation, from our website and digital tools, from public sources, and from third parties such as service providers, business partners, and payment processors where lawful and appropriate.
We process personal data using both manual and automated means, including storage, organisation, retrieval, analysis, disclosure, and deletion, as necessary for our operations.
3. Purpose of Data Processing
We process personal data for the following purposes:
- to provide and manage our services and commercial studio operations;
- to respond to enquiries and communicate with clients, suppliers, and website visitors;
- to prepare quotations, proposals, contracts, invoices, and project documentation;
- to manage relationships with clients, contractors, freelancers, and suppliers;
- to process payments, account administration, and financial management;
- to maintain business records, quality control, and internal administration;
- to operate, secure, and improve our website, systems, and services;
- to conduct analytics, reporting, and service development;
- to comply with legal, regulatory, tax, accounting, and contractual obligations;
- to establish, exercise, or defend legal claims;
- to send marketing communications where permitted by law and, where required, with your consent;
- to protect our rights, property, staff, clients, and business interests.
4. Legal Basis for Processing
Where applicable privacy laws require a legal basis for processing, we rely on one or more of the following:
- Performance of a contract: where processing is necessary to enter into or perform a contract with you or your organisation.
- Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests. These interests may include operating our studio, communicating with clients, securing our systems, preventing fraud, and improving services.
- Consent: where you have given us clear consent for a specific purpose, such as certain marketing communications or optional cookies, where required.
- Legal obligation: where processing is necessary to comply with legal, regulatory, tax, accounting, or other statutory requirements.
- Vital interests: where processing is necessary to protect someone’s life or physical safety in exceptional circumstances.
- Public interest or official authority: where applicable under relevant laws, and only where lawfully permitted.
5. Data Sharing and Third Parties
We may share personal data with third parties where necessary and lawful for the purposes described in this Privacy Policy. Such third parties may include:
- IT and cloud service providers, hosting providers, and website support providers;
- payment processors, banks, and accounting service providers;
- professional advisers, including lawyers, accountants, auditors, and insurers;
- freelancers, contractors, production partners, and suppliers engaged in delivering our services;
- analytics, communications, customer relationship, and project management tool providers;
- public authorities, regulators, courts, and law enforcement where required or permitted by law;
- other parties involved in a transaction, reorganisation, or business transfer involving Northlight Commercial Studio Ltd.
We require third parties to handle personal data with appropriate confidentiality and security safeguards and to process it only for the agreed purposes or as otherwise required by law.
6. Data Transfer to Third Countries
Where personal data is transferred outside the United Kingdom and/or other jurisdictions with equivalent data protection protections, we will take appropriate measures to ensure that such transfers are lawful and adequately protected. These measures may include:
- adequacy decisions or equivalent legal mechanisms;
- standard contractual clauses or other approved transfer safeguards;
- technical and organisational security measures;
- assessments of the destination country and recipient practices, where required.
By using our services or communicating with us, you acknowledge that some service providers may operate in jurisdictions outside your home country. We will take reasonable steps to protect your personal data in such circumstances.
7. Storage Duration
We retain personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, reporting, contractual, and operational requirements.
- Client and project records: retained for the duration of the relationship and for a reasonable period thereafter.
- Financial and tax records: retained for the period required by applicable law.
- Marketing data: retained until you unsubscribe, withdraw consent, or object where applicable.
- Website and technical logs: retained for a limited period appropriate to security, analytics, and operational needs.
When personal data is no longer required, we will delete it, anonymise it, or securely archive it in accordance with our retention practices and legal obligations.
8. User Rights
Subject to applicable law, you may have the following rights regarding your personal data:
- Access: to request confirmation of whether we process your personal data and to obtain a copy of that data.
- Rectification: to request correction of inaccurate or incomplete personal data.
- Erasure: to request deletion of personal data in certain circumstances.
- Restriction: to request that we limit the processing of your personal data in certain circumstances.
- Data portability: to receive certain personal data in a structured, commonly used, machine-readable format and to request transfer to another controller where technically feasible.
- Objection: to object to processing based on legitimate interests or to direct marketing at any time.
To exercise any of these rights, please contact us using the details in the Contact Information section. We may need to verify your identity before responding. We will respond within the time limits required by applicable law.
9. Withdrawal of Consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.
If you withdraw consent, we may no longer be able to provide certain optional features or communications. You can withdraw consent by contacting us at [email protected] or by following any unsubscribe or preference management instructions provided in our communications.
10. Right to Complain
If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue promptly and fairly.
You may also have the right to lodge a complaint with the relevant supervisory authority or data protection regulator in your jurisdiction. In the United Kingdom, this is the Information Commissioner’s Office (ICO).
11. Data Security
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, disclosure, or misuse. These measures may include:
- access controls and role-based permissions;
- password protection and authentication measures;
- secure storage and encryption where appropriate;
- staff confidentiality obligations and training;
- monitoring and maintenance of systems and security procedures;
- backup, recovery, and incident response processes.
While we take reasonable steps to safeguard personal data, no method of transmission or storage is completely secure. You should also take care when sharing information with us and when using digital communication channels.
12. Contact Information
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:
- Northlight Commercial Studio Ltd
- Address: Northlight Studio, 2-6 Minerva Road, Park Royal, London NW10 6HJ, United Kingdom
- Email: [email protected]
- Phone: +44 20 8962 7415
13. Changes to Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal obligations, or regulatory requirements. Any updated version will be posted on our website or otherwise made available to you where appropriate.
The date of the latest update may be included at the top or bottom of the policy, if applicable. We encourage you to review this Privacy Policy periodically to stay informed about how Northlight Commercial Studio Ltd processes personal data.