Privacy Notice

About this notice

This notice explains how Northbridge Tech Ltd collects and uses personal information when you visit our website, contact us or work with us, and the rights you have. We have written it to be clear and proportionate to how we actually use information.

Who we are

Northbridge Tech Ltd is the controller of the personal information described in this notice. We are a company registered in England and Wales (company number 16999336), with our registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. We are registered with the Information Commissioner's Office (ICO).

For any question about this notice or your personal information, email info@northbridgetech.co.uk or call +44 20 3951 6599. Please mark your message “Privacy” so it reaches the right person.

Information we collect

We only collect information that we need. Depending on how you interact with us, this may include:

• Enquiry form details: your name, email address, company name, optional telephone number, the topic you choose and your message. We also record which page or service the enquiry came from (for example, a hosting package you selected).
• Messages and calls: information you give us by email, telephone or WhatsApp, such as your contact details and what you would like help with.
• Customer information: if you become a customer, business contact details, information needed to agree and deliver services, and account, billing and service records.
• Technical information: when you use our website, our hosting provider's servers record standard technical data such as your IP address, browser type, the pages requested and the time of the request. When you send the enquiry form, we use a scrambled (one-way hashed) version of your IP address for a short time to limit repeated submissions and spam. We do not use it to identify you.
• Website analytics (only if you accept analytics cookies): information about how you use our website, such as pages visited, how you arrived, approximate location (country or city), device and browser type, and an identifier stored in a Google Analytics cookie. We collect this using Google Analytics 4. We see it as aggregated reports and do not use it to identify you. Google states that Google Analytics 4 does not log or store IP addresses.

We do not ask for special category information (such as health details) and ask you not to include it in an enquiry. Please don't send passwords or other sensitive account details through the website.

How and why we use information

We use personal information for the following purposes, each with a lawful basis under UK data protection law:

Sending an enquiry does not sign you up to marketing. We do not currently send marketing emails or newsletters. If that changes, we will only do so in line with the law and this notice will be updated first.

We do not sell personal information, and we do not make decisions about you using solely automated processing.

How the enquiry form works

When you submit the enquiry form, your details are sent securely from our website to our business email system, which uses Microsoft 365. The message is delivered to our enquiries mailbox so that we can reply to you. Your email address is added as the reply address so that our response comes straight back to you. Enquiries are not stored in a separate website database.

Who we share information with

We share personal information only where necessary, with:

• Microsoft, which provides our business email and productivity services (Microsoft 365), including delivery of website enquiries to our mailbox.
• Google, which provides Google Analytics and Google Tag Manager, if you accept analytics cookies.
• Our website hosting and content delivery provider, which hosts this website and processes technical information such as server logs.
• Our professional advisers, such as accountants, where needed for business administration.
• Suppliers of products you buy through us, such as software licence providers, where needed to provide the service you have asked for.
• Law enforcement, regulators or other authorities, where we are required to by law.

Our service providers act on our instructions and must protect personal information. If you contact us using WhatsApp, the information you send is also handled by WhatsApp (Meta) under its own terms and privacy policy.

International transfers

Some of our service providers, or their own suppliers, may process personal information outside the UK. For example, Google may process analytics data in the United States. Where this happens, we rely on the protections required by UK law, such as UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or the International Data Transfer Agreement or Addendum. Contact us if you would like more information about these safeguards.

How long we keep information

• Enquiries from people who do not become customers: up to 24 months after our last contact, then deleted.
• Customer records: for as long as we provide services, and afterwards for as long as needed for legal, tax and accounting purposes. Financial records are kept for at least six years, as required by UK law.
• Spam-protection data: the hashed IP address is held only as a scrambled value, is used solely to limit form submissions within a one-hour window, and is not used for anything else.
• Website analytics: event-level data in Google Analytics is deleted automatically after the retention period set in our account, which cannot be longer than 14 months. Analytics cookies on your device last up to 2 years unless you delete them or withdraw consent (see our Cookie Notice).
• Server logs: kept by our hosting provider for a limited period for security and operational purposes.

How we protect information

We use appropriate technical and organisational measures to protect personal information. These include encrypted (HTTPS) connections to our website, restricted access to systems that hold personal information, and limiting the permissions our website has, so that it can only send email from our dedicated website mailbox. No method of transmission or storage is completely secure, but we work to protect your information and review our measures over time.

Your rights

Under UK data protection law you have rights over your personal information, including the right to:

• ask for a copy of the information we hold about you
• ask us to correct information that is wrong or incomplete
• ask us to delete information in certain circumstances
• ask us to restrict how we use information in certain circumstances
• object to our use of information based on our legitimate interests
• ask for information you provided to be transferred to you or another organisation in certain circumstances
• withdraw consent at any time, where we rely on consent

To exercise any of these rights, contact us at info@northbridgetech.co.uk. We will respond within one month, unless the law allows longer for complex requests. We may need to confirm your identity first. There is usually no charge.

Complaints

If you have a concern about how we use your personal information, please contact us first at info@northbridgetech.co.uk and we will try to resolve it.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator: ico.org.uk/make-a-complaint, telephone 0303 123 1113.

Cookies

We use essential storage to make our website work and, only if you accept, Google Analytics cookies to understand how the site is used. You can change your choice at any time using Cookie settings at the bottom of every page. Read our Cookie Notice for details.

Children

Our services are intended for businesses and organisations. Our website is not designed for children, and we do not knowingly collect information from them.

Changes to this notice

We may update this notice when our services, providers or legal requirements change. The date at the top of this page shows when it was last updated. Where changes are significant, we will take reasonable steps to let affected customers know.