1. Introduction and company information
This Privacy Policy explains how Northbridge Sound Studio Ltd collects, uses, stores, shares, and protects personal data when operating its sound-studio services, including client enquiries, booking and session management, recording and production services, website communications, marketing where permitted, and related administrative activities.
Data controller: Northbridge Sound Studio Ltd
Address: Northbridge Sound Studio, 14 St John's Road, Brighton, BN2 1RY, United Kingdom
Email: [email protected]
Phone: +44 1273 894 762
This Privacy Policy is intended to provide clear information about our processing activities and the rights available to individuals whose personal data we process.
2. Data collection and processing
Northbridge Sound Studio Ltd may collect and process personal data directly from you, automatically through our website and related systems, and from third parties where permitted by law.
Depending on your interaction with us, we may process the following categories of personal data:
- Identity data: name, company name, username, and similar identifiers.
- Contact data: email address, telephone number, postal address, and preferred contact details.
- Booking and service data: session dates, project details, preferences, attendance information, and communication relating to studio services.
- Payment and transaction data: billing information, payment status, invoice details, and transaction records.
- Technical data: IP address, browser type, device identifiers, log data, and cookies or similar technologies.
- Communications data: emails, messages, enquiry forms, call notes, and records of correspondence.
- Marketing data: preferences for receiving marketing, newsletter subscriptions, and engagement with promotional communications.
- Audio, image, and content data: recordings, session files, photos, videos, and other content created, submitted, or stored in the course of studio services, where applicable.
We only collect personal data that is relevant and necessary for our business activities. Where you provide personal data relating to another person, you should ensure that you have authority to do so and that they are aware of this Privacy Policy.
3. Purpose of data processing
Northbridge Sound Studio Ltd processes personal data for the following purposes:
- to respond to enquiries and provide quotations;
- to manage bookings, studio sessions, and client accounts;
- to provide recording, editing, mixing, mastering, production, and related studio services;
- to prepare invoices, process payments, and maintain financial records;
- to communicate about services, project progress, technical matters, and support;
- to administer our website, systems, and internal operations;
- to improve our services, website performance, and customer experience;
- to send marketing communications where lawful and appropriate;
- to comply with legal, accounting, tax, and regulatory obligations;
- to prevent fraud, misuse, security incidents, and unlawful activity;
- to establish, exercise, or defend legal claims.
We do not use personal data for purposes that are incompatible with the purposes described in this Policy unless we have a lawful basis to do so.
4. Legal basis for processing
We process personal data only where we have a valid legal basis. Depending on the context, our processing may rely on one or more of the following bases:
- Contract: where processing is necessary to enter into or perform a contract with you, including managing bookings, providing studio services, and handling payments.
- Legal obligation: where processing is necessary to comply with laws and regulations, such as tax, accounting, and record-keeping obligations.
- Legitimate interests: where processing is necessary for our legitimate business interests, such as operating and improving our services, maintaining security, responding to enquiries, and managing business administration, provided your rights and interests do not override those interests.
- Consent: where you have given clear consent, for example for certain marketing communications or optional cookies, and where consent is required by applicable law.
Where we rely on legitimate interests, we assess the impact of the processing and take appropriate safeguards. Where we rely on consent, you may withdraw that consent at any time.
5. Data sharing and third parties
Northbridge Sound Studio Ltd may share personal data with trusted third parties where necessary for the purposes described in this Privacy Policy. These third parties may include:
- payment service providers and banking partners;
- accountants, auditors, and professional advisers;
- IT, hosting, cloud storage, communications, and software service providers;
- customer relationship, scheduling, invoicing, and business administration providers;
- website analytics, email delivery, and marketing technology providers;
- legal, regulatory, and law enforcement authorities where required or permitted by law;
- insurance providers and claims handlers;
- other parties involved in the delivery of studio services, only where necessary and appropriate.
We require third parties to handle personal data securely and to use it only for specified purposes consistent with applicable legal requirements. We do not sell personal data.
6. Data transfer to third countries
Where personal data is transferred outside the United Kingdom or, where applicable, outside the European Economic Area, Northbridge Sound Studio Ltd will take steps to ensure that appropriate safeguards are in place.
Such safeguards may include:
- transfers to countries recognised as providing an adequate level of protection;
- standard contractual clauses or equivalent legal mechanisms;
- supplementary technical and organisational measures where needed;
- reliance on other lawful transfer mechanisms permitted under applicable privacy law.
Where required, we will provide additional information about cross-border transfers upon request.
7. Storage duration
Northbridge Sound Studio Ltd retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements.
Retention periods may vary depending on the type of data and the context in which it is processed. In general:
- enquiry and communications data may be retained for a reasonable period to manage business correspondence and follow-up;
- contract, booking, and transaction records may be retained for the duration of the relationship and for the period required by tax and accounting laws;
- marketing data is retained until you opt out, unsubscribe, or object, or until it is otherwise no longer needed;
- technical and security logs are retained for a limited period unless needed for investigation, security, or legal reasons;
- content and recording files are retained according to the terms of the relevant service agreement, project requirements, and any applicable legal obligations.
When personal data is no longer required, we will delete, anonymise, or securely archive it as appropriate.
8. User rights
Subject to applicable law, you may have the following rights regarding your personal data:
- Access: to request confirmation of whether we process your personal data and to receive a copy of that data.
- Rectification: to request correction of inaccurate or incomplete personal data.
- Erasure: to request deletion of personal data in certain circumstances.
- Restriction: to request that we limit the processing of your personal data in certain situations.
- Data portability: to receive certain personal data in a structured, commonly used, machine-readable format and, where feasible, to have it transmitted to another controller.
- Objection: to object to processing based on legitimate interests and to object at any time to direct marketing.
To exercise your rights, please contact us using the details in Section 12. We may need to verify your identity before responding. We will respond within the timeframe required by applicable law.
9. Withdrawal of consent
Where we process personal data on the basis of your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
You can withdraw consent by using the unsubscribe link in marketing emails, changing your preferences where available, or contacting us directly using the details below. If you withdraw consent, we may still process your personal data where another lawful basis applies.
10. Right to complain
If you have concerns about how Northbridge Sound Studio Ltd handles your personal data, we encourage you to contact us first so that we can try to resolve the matter.
You also have the right to lodge a complaint with the relevant supervisory authority in the United Kingdom, the Information Commissioner’s Office (ICO), or any other competent data protection authority if applicable.
For more information about your rights, you may visit the ICO’s website or contact the authority directly.
11. Data security
Northbridge Sound Studio Ltd implements appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure.
Such measures may include, as appropriate:
- access controls and role-based permissions;
- password protection and authentication measures;
- secure storage and encrypted communications where appropriate;
- backup and recovery procedures;
- staff confidentiality obligations and awareness training;
- monitoring and maintenance of systems and security controls.
No method of transmission or storage is completely secure. While we take reasonable precautions, we cannot guarantee absolute security.
12. Contact information
If you have questions about this Privacy Policy or wish to exercise your rights, please contact:
Northbridge Sound Studio Ltd
Northbridge Sound Studio, 14 St John's Road, Brighton, BN2 1RY, United Kingdom
Email: [email protected]
Phone: +44 1273 894 762
13. Changes to privacy policy
Northbridge Sound Studio Ltd may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs.
Any updated version will be posted with a revised effective date where appropriate. We encourage you to review this Privacy Policy periodically to stay informed about how we process personal data. Continued use of our services after changes take effect may indicate your acceptance of the updated policy, to the extent permitted by law.