This Privacy Policy explains how Northlight Commercial Studio Ltd collects, uses, stores, shares, and protects personal data in connection with its commercial-studio activities. It also explains the rights available to individuals under applicable privacy and data protection laws.

1. Introduction and Company Information

The data controller responsible for your personal data is:

Northlight Commercial Studio Ltd operates as a commercial studio, providing creative, production, studio, and related services to clients, suppliers, contractors, and website visitors. This Privacy Policy applies to personal data collected through our website, email, telephone, in person, during commercial engagements, and through any related communications or services.

2. Data Collection and Processing

We may collect and process the following categories of personal data:

We collect personal data directly from you, from your employer or organisation, from our website and digital tools, from public sources, and from third parties such as service providers, business partners, and payment processors where lawful and appropriate.

We process personal data using both manual and automated means, including storage, organisation, retrieval, analysis, disclosure, and deletion, as necessary for our operations.

3. Purpose of Data Processing

We process personal data for the following purposes:

4. Legal Basis for Processing

Where applicable privacy laws require a legal basis for processing, we rely on one or more of the following:

5. Data Sharing and Third Parties

We may share personal data with third parties where necessary and lawful for the purposes described in this Privacy Policy. Such third parties may include:

We require third parties to handle personal data with appropriate confidentiality and security safeguards and to process it only for the agreed purposes or as otherwise required by law.

6. Data Transfer to Third Countries

Where personal data is transferred outside the United Kingdom and/or other jurisdictions with equivalent data protection protections, we will take appropriate measures to ensure that such transfers are lawful and adequately protected. These measures may include:

By using our services or communicating with us, you acknowledge that some service providers may operate in jurisdictions outside your home country. We will take reasonable steps to protect your personal data in such circumstances.

7. Storage Duration

We retain personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, reporting, contractual, and operational requirements.

When personal data is no longer required, we will delete it, anonymise it, or securely archive it in accordance with our retention practices and legal obligations.

8. User Rights

Subject to applicable law, you may have the following rights regarding your personal data:

To exercise any of these rights, please contact us using the details in the Contact Information section. We may need to verify your identity before responding. We will respond within the time limits required by applicable law.

9. Withdrawal of Consent

Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

If you withdraw consent, we may no longer be able to provide certain optional features or communications. You can withdraw consent by contacting us at [email protected] or by following any unsubscribe or preference management instructions provided in our communications.

10. Right to Complain

If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue promptly and fairly.

You may also have the right to lodge a complaint with the relevant supervisory authority or data protection regulator in your jurisdiction. In the United Kingdom, this is the Information Commissioner’s Office (ICO).

11. Data Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, disclosure, or misuse. These measures may include:

While we take reasonable steps to safeguard personal data, no method of transmission or storage is completely secure. You should also take care when sharing information with us and when using digital communication channels.

12. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:

13. Changes to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal obligations, or regulatory requirements. Any updated version will be posted on our website or otherwise made available to you where appropriate.

The date of the latest update may be included at the top or bottom of the policy, if applicable. We encourage you to review this Privacy Policy periodically to stay informed about how Northlight Commercial Studio Ltd processes personal data.

8/28/2026 Home