Privacy Policy
This Privacy Policy explains how Northbridge Regional Services Ltd collects, uses, stores, shares, and protects personal data when providing its regional services. It also explains the rights available to individuals in relation to their personal data. This Privacy Policy should be read together with any other privacy notice or fair processing notice that may be provided in connection with a specific service, contract, event, or communication.
1. Introduction and company information
Data controller: Northbridge Regional Services Ltd
Registered / business address: Northbridge Regional Services, 24 King Street, Newcastle upon Tyne, NE1 6QF, UK
Email: [email protected]
Telephone: +44 191 487 2639
Northbridge Regional Services Ltd is a regional service provider. In the course of operating its business, it may process personal data relating to customers, prospective customers, suppliers, contractors, visitors, enquirers, employees, job applicants, and other individuals who interact with the company. This Privacy Policy applies to personal data processed by Northbridge Regional Services Ltd in connection with its business activities, including communications, service delivery, administration, compliance, and related operational activities.
For the purposes of applicable privacy laws, Northbridge Regional Services Ltd is the controller of the personal data described in this Privacy Policy unless otherwise stated.
2. Data collection and processing
Northbridge Regional Services Ltd may collect and process the following categories of personal data, depending on the nature of the relationship and services involved:
- Identity data: name, title, date of birth, and identification details where necessary.
- Contact data: address, email address, telephone number, and other communication details.
- Business and professional data: job title, employer, role, business contact details, and professional correspondence.
- Service and transaction data: details of services requested, provided, or considered, communications, account records, and transaction history.
- Financial data: billing information, payment records, and where necessary, bank or payment details.
- Technical data: IP address, device information, browser type, operating system, access times, and usage data collected through websites or digital tools.
- Marketing and preference data: communication preferences, consent choices, and responses to promotional communications.
- Correspondence data: records of communications with us, including emails, telephone calls, messages, and enquiry forms.
- Compliance data: information needed for identity verification, legal compliance, fraud prevention, safeguarding, auditing, or regulatory obligations.
We may collect personal data directly from individuals, from organisations acting on their behalf, from publicly available sources, from service providers, from professional advisers, and from automated technologies used on our websites or digital platforms. Where lawful and appropriate, we may also receive personal data from third parties involved in delivering or supporting our services.
Northbridge Regional Services Ltd may process personal data using both automated and manual means. Processing may include collection, recording, organisation, storage, adaptation, retrieval, consultation, use, disclosure, transmission, alignment, restriction, erasure, or destruction.
3. Purpose of data processing
Northbridge Regional Services Ltd processes personal data for the following purposes:
- to provide, manage, and administer our regional services;
- to respond to enquiries, requests, and communications;
- to enter into, perform, and manage contracts;
- to invoice, collect payments, and manage accounts;
- to maintain business records and internal administration;
- to verify identity and prevent fraud or misuse;
- to comply with legal and regulatory obligations;
- to monitor and improve our services, operations, and customer experience;
- to manage website, IT, and information security functions;
- to send service-related notices and, where permitted, marketing communications;
- to resolve disputes, handle complaints, and enforce legal rights;
- to carry out recruitment, employment, and contractor management activities;
- for any other purpose that is compatible with the original purpose for which the data was collected.
4. Legal basis for processing
Northbridge Regional Services Ltd will only process personal data where there is a lawful basis to do so. Depending on the context, the legal basis may include:
- Consent: where an individual has given clear consent for processing for a specific purpose.
- Contract: where processing is necessary for the performance of a contract or to take steps at the request of an individual before entering into a contract.
- Legal obligation: where processing is necessary to comply with a legal or regulatory requirement.
- Legitimate interests: where processing is necessary for our legitimate business interests or those of a third party, provided those interests are not overridden by the rights and freedoms of the individual.
- Vital interests: where processing is necessary to protect someone’s life or safety.
- Public task or official function: where applicable under relevant laws.
Where special category data or other sensitive data is processed, additional conditions and safeguards will be applied as required by applicable law. Northbridge Regional Services Ltd will only process such data when a lawful basis and, where required, an additional legal condition are satisfied.
5. Data sharing and third parties
Northbridge Regional Services Ltd may share personal data with third parties where necessary and lawful for the purposes described in this Privacy Policy. Such third parties may include:
- service providers and IT support providers;
- payment processors, banks, and financial institutions;
- professional advisers, including lawyers, accountants, and auditors;
- subcontractors, delivery partners, and other business associates involved in providing services;
- regulatory authorities, law enforcement agencies, courts, and other public bodies where required or permitted by law;
- insurers and claims handlers;
- recruitment and employment-related service providers;
- website hosting, analytics, security, and communications providers.
Where third parties act as processors, they will only process personal data on our instructions and under appropriate contractual and confidentiality safeguards. Where third parties act as independent controllers, they are responsible for their own processing and privacy practices.
Northbridge Regional Services Ltd does not sell personal data.
6. Data transfer to third countries
Some of our service providers or business partners may be located outside the United Kingdom or may process personal data in countries outside the UK. Where personal data is transferred internationally, Northbridge Regional Services Ltd will take steps to ensure that appropriate safeguards are in place and that transfers comply with applicable data protection requirements.
These safeguards may include:
- transfers to countries recognised as providing an adequate level of protection;
- standard contractual clauses or equivalent transfer mechanisms;
- additional technical, organisational, and contractual safeguards where necessary;
- risk assessments and transfer impact evaluations, where appropriate.
Individuals may contact us for more information about international transfers and the safeguards used in connection with their personal data.
7. Storage duration
Northbridge Regional Services Ltd will retain personal data only for as long as is necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, regulatory, audit, or reporting requirements.
The retention period will vary depending on the nature of the data and the purpose of processing. Factors considered when determining retention include:
- the duration of the relationship with the individual;
- whether the data is required to deliver services or manage contracts;
- legal limitation periods and statutory retention requirements;
- the need to resolve disputes, enforce rights, or defend claims;
- business, operational, and security considerations.
When personal data is no longer required, it will be securely deleted, destroyed, or anonymised in accordance with our retention practices.
8. User rights
Subject to applicable law, individuals may have the following rights in relation to their personal data:
- Right of access: to obtain confirmation as to whether we process personal data and to receive a copy of that data.
- Right to rectification: to request correction of inaccurate or incomplete personal data.
- Right to erasure: to request deletion of personal data in certain circumstances.
- Right to restriction: to request restriction of processing in certain circumstances.
- Right to data portability: to receive personal data in a structured, commonly used, machine-readable format and, where applicable, have it transmitted to another controller.
- Right to object: to object to processing based on legitimate interests or direct marketing, and in some cases to other forms of processing.
These rights are subject to legal limitations and may not apply in every case. Northbridge Regional Services Ltd may request information to verify identity before responding to a rights request. We will respond within the time limits required by applicable law.
9. Withdrawal of consent
Where the legal basis for processing is consent, individuals have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.
To withdraw consent, individuals may contact Northbridge Regional Services Ltd using the contact details set out in this Privacy Policy. If consent is withdrawn, we may no longer be able to provide certain services or communications that depend on that consent.
10. Right to complain
Individuals have the right to lodge a complaint with the relevant supervisory authority if they believe their personal data has been processed in a manner that infringes applicable data protection law.
Before making a complaint to a regulator, we encourage individuals to contact Northbridge Regional Services Ltd so that we may try to resolve the issue directly. However, this does not affect the right to contact a supervisory authority at any time.
For UK data protection matters, the relevant authority is generally the Information Commissioner’s Office (ICO). Individuals should refer to the ICO’s current contact details and guidance for making a complaint.
11. Data security
Northbridge Regional Services Ltd takes the security of personal data seriously and implements appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, disclosure, or misuse.
These measures may include:
- access controls and authentication procedures;
- confidentiality obligations for staff and relevant contractors;
- secure storage and transmission methods;
- system monitoring, backup, and recovery procedures;
- regular review of security controls and access rights;
- staff awareness and training in data protection and security practices.
Although we take reasonable steps to protect personal data, no method of transmission over the internet or electronic storage is completely secure. Individuals should take care when communicating sensitive information and notify us promptly if they suspect any unauthorised use of their personal data.
12. Contact information
If you have any questions about this Privacy Policy or how Northbridge Regional Services Ltd handles personal data, or if you wish to exercise any of your rights, please contact us using the details below:
Northbridge Regional Services Ltd
Northbridge Regional Services, 24 King Street, Newcastle upon Tyne, NE1 6QF, UK
Email: [email protected]
Telephone: +44 191 487 2639
We may need to verify your identity before responding to a request. Please provide sufficient information to help us identify you and understand your request.
13. Changes to privacy policy
Northbridge Regional Services Ltd may update this Privacy Policy from time to time to reflect changes in legal requirements, business practices, technology, or the services we provide. Any updates will take effect when posted, unless otherwise stated.
We encourage individuals to review this Privacy Policy periodically to stay informed about how we process personal data. Where appropriate and required by law, we will notify individuals of significant changes through reasonable means.
Last updated: July 2026