1. Introduction and company information
This Privacy Policy explains how Northstar Content Marketing Ltd collects, uses, discloses, transfers, stores, and protects personal data when you interact with us, including through our website, email communications, phone calls, social media channels, lead-generation activities, and any other services we provide in connection with our content-marketing business.
Data controller: Northstar Content Marketing Ltd
Address: Northstar Content Marketing, 27 Windsor Street, Manchester, M15 6BD, UK
Email: [email protected]
Phone: +44 161 924 7583
We are committed to handling personal data responsibly and in accordance with applicable privacy and data protection laws. This Policy is intended to provide clear information about our practices and your rights.
2. Data collection and processing
We may collect and process the following categories of personal data:
- Identity data: name, job title, company name, and professional role.
- Contact data: email address, telephone number, postal address, and other contact details.
- Business and communications data: correspondence content, enquiry details, meeting notes, project briefs, feedback, and records of communications.
- Marketing and technical data: IP address, browser type, device identifiers, cookies, usage data, referral sources, and interaction data relating to our website or campaigns.
- Service and account data: information provided in connection with proposals, contracts, billing, invoicing, and service delivery.
- Preference data: communication preferences, marketing consent choices, and unsubscribe settings.
We obtain personal data directly from you, from your organisation, from publicly available professional sources, from analytics tools, and from third parties such as marketing and customer relationship management platforms, where lawful.
We do not intentionally collect special category data unless there is a lawful basis to do so and such data is necessary for a specific purpose. We ask that you do not provide sensitive information unless requested and clearly relevant.
3. Purpose of data processing
We process personal data for the following purposes:
- To respond to enquiries and communicate with prospective and existing clients.
- To provide content-marketing services, including strategy, copywriting, campaign management, and related professional services.
- To manage business relationships, contracts, billing, invoicing, and administration.
- To operate, maintain, and improve our website, systems, and services.
- To conduct analytics, performance measurement, and service optimisation.
- To send marketing communications, subject to your preferences and applicable law.
- To personalise communications and content based on legitimate business interests and user preferences.
- To comply with legal, regulatory, accounting, and tax obligations.
- To protect our rights, prevent fraud, and ensure the security of our systems and operations.
4. Legal basis for processing
We process personal data only where we have a lawful basis to do so. Depending on the specific context, the legal bases may include:
- Consent: where you have given clear consent for a specific processing activity, such as certain marketing communications or optional cookies.
- Contract: where processing is necessary to enter into or perform a contract with you or your organisation.
- Legal obligation: where processing is necessary to comply with applicable legal, tax, accounting, or regulatory requirements.
- Legitimate interests: where processing is necessary for our legitimate business interests, such as managing client relationships, improving services, securing our systems, and promoting our services, provided those interests are not overridden by your rights and interests.
Where we rely on legitimate interests, we assess the impact of the processing and take appropriate safeguards. Where we rely on consent, you may withdraw it at any time.
5. Data sharing and third parties
We may share personal data with third parties only where necessary and lawful, including:
- Service providers: IT support, hosting providers, email delivery services, analytics providers, CRM systems, cloud storage, and payment or accounting providers.
- Professional advisers: lawyers, accountants, insurers, and auditors.
- Business partners and subcontractors: freelancers, consultants, and specialist vendors engaged to support content-marketing projects.
- Authorities and regulators: where required by law, court order, or lawful request.
- Prospective buyers or reorganised entities: in connection with a merger, acquisition, restructuring, or sale of assets, subject to confidentiality and legal safeguards.
We require third parties that process personal data on our behalf to use appropriate technical and organisational measures and to process data only in accordance with our instructions and applicable law.
6. Data transfer to third countries
Where personal data is transferred outside the UK and, where applicable, outside the European Economic Area, we take steps to ensure that appropriate safeguards are in place. These may include:
- transferring data to countries deemed to provide an adequate level of protection;
- using standard contractual clauses or equivalent approved transfer mechanisms;
- implementing additional technical and organisational safeguards where required.
If you would like more information about international transfers and the safeguards we use, please contact us using the details below.
7. Storage duration
We keep personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, contractual, and reporting requirements.
- Client and contract records: retained for the duration of the relationship and thereafter for a reasonable period for legal and administrative purposes.
- Enquiry and marketing records: retained for as long as needed to handle the enquiry or maintain legitimate business contact, or until you object or unsubscribe where applicable.
- Technical and analytics data: retained for a limited period consistent with our analytics and security needs.
When personal data is no longer required, we will delete it, anonymise it, or securely archive it in accordance with applicable retention requirements.
8. User rights
Depending on applicable privacy laws, you may have the following rights in relation to your personal data:
- Access: the right to request confirmation of whether we process your personal data and to obtain a copy of that data.
- Rectification: the right to request correction of inaccurate or incomplete personal data.
- Erasure: the right to request deletion of your personal data in certain circumstances.
- Restriction: the right to request limitation of processing in certain circumstances.
- Data portability: the right to receive certain data in a structured, commonly used, machine-readable format and to request transmission to another controller where technically feasible.
- Objection: the right to object to processing based on legitimate interests and to object at any time to direct marketing.
To exercise any of these rights, please contact us using the details in Section 12. We may need to verify your identity before responding. We will respond within a reasonable timeframe and in accordance with applicable law.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.
You can withdraw consent by using any unsubscribe mechanism provided in our communications or by contacting us directly at [email protected]. If you withdraw consent, we may still process your data where another lawful basis applies.
10. Right to complain
If you have concerns about how we handle your personal data, please contact us first so we can try to resolve the issue.
You also have the right to lodge a complaint with the relevant data protection supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO). We encourage you to contact us before escalating a complaint, but you are entitled to contact the supervisory authority at any time.
11. Data security
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include:
- access controls and password protection;
- encryption where appropriate;
- secure storage and backup procedures;
- staff confidentiality obligations and awareness practices;
- vendor due diligence and contractual safeguards;
- monitoring and incident response procedures.
No system can be guaranteed to be completely secure. However, we continuously review and improve our safeguards to protect personal data as far as reasonably practicable.
12. Contact information
If you have any questions, requests, or concerns about this Privacy Policy or our handling of personal data, please contact:
Northstar Content Marketing Ltd
Northstar Content Marketing, 27 Windsor Street, Manchester, M15 6BD, UK
Email: [email protected]
Phone: +44 161 924 7583
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updated version will be posted with a revised effective date where appropriate.
We encourage you to review this Privacy Policy periodically to stay informed about how Northstar Content Marketing Ltd processes personal data. Continued use of our services or website after changes take effect constitutes your acknowledgment of the updated Policy, to the extent permitted by law.