Last updated: 28 August 2026
1. Introduction and company information
This Privacy Policy explains how Northstar Digital Studio Ltd ("we", "us", "our") collects, uses, stores, shares, and protects personal data when you visit our website, contact us, or use our web-studio services.
Northstar Digital Studio Ltd is the data controller for the purposes of applicable data protection laws.
Company details:
- Legal name: Northstar Digital Studio Ltd
- Address: Northstar Studio, 2nd Floor, 18-20 Great Ancoats Street, Manchester M4 5BD, UK
- Email: [email protected]
- Phone: +44 161 832 9475
- Business type: Web-Studio
By using our services or interacting with us, you acknowledge that your personal data may be processed in accordance with this Privacy Policy.
2. Data collection and processing
We may collect and process the following categories of personal data:
- Identity data: name, job title, company name, username or similar identifiers.
- Contact data: email address, telephone number, postal address, and other communication details.
- Project and enquiry data: information you provide in enquiries, briefs, contracts, specifications, feedback, and correspondence.
- Technical data: IP address, browser type and version, device identifiers, operating system, referring URLs, and website usage data.
- Usage data: pages visited, time spent on pages, interaction data, and site navigation patterns.
- Marketing data: your preferences for receiving marketing communications and your interaction with those communications.
- Financial and billing data: invoice details, payment references, and transaction information where applicable.
- Cookie and tracking data: information collected through cookies, pixels, analytics tools, and similar technologies.
We may collect data directly from you, automatically through our website, and from third parties such as analytics providers, hosting providers, CRM systems, payment processors, and publicly available sources where lawful.
3. Purpose of data processing
We process personal data for the following purposes:
- to respond to enquiries and provide quotations;
- to enter into and perform contracts;
- to deliver web design, development, maintenance, digital studio, and related services;
- to communicate with clients, suppliers, and website visitors;
- to manage accounts, invoicing, payments, and administration;
- to operate, secure, maintain, and improve our website and services;
- to conduct analytics, performance monitoring, and service optimisation;
- to send service-related and, where permitted, marketing communications;
- to comply with legal and regulatory obligations;
- to establish, exercise, or defend legal claims.
We only process personal data where the processing is necessary, relevant, and limited to the stated purpose.
4. Legal basis for processing
We rely on the following legal bases, where applicable:
- Consent: where you have given clear permission for specific processing, such as certain marketing communications or non-essential cookies.
- Contract: where processing is necessary to enter into or perform a contract with you.
- Legal obligation: where processing is required to comply with laws, regulations, tax requirements, or lawful requests from authorities.
- Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include website security, service improvement, business administration, and limited direct marketing to business contacts where permitted.
5. Data sharing and third parties
We may share personal data with trusted third parties where necessary for the purposes described in this Policy. These may include:
- website hosting and infrastructure providers;
- cloud storage and collaboration tools;
- email and communication service providers;
- customer relationship management and project management systems;
- analytics and performance monitoring providers;
- payment processors and accounting providers;
- professional advisers, such as lawyers, accountants, and insurers;
- government bodies, regulators, courts, and law enforcement where required by law;
- selected subcontractors or freelancers assisting with project delivery under confidentiality and data protection obligations.
We require third parties to process personal data only on our instructions where they act as processors, and to implement appropriate safeguards. Where third parties act as independent controllers, their own privacy notices may also apply.
6. Data transfer to third countries
Some of our service providers may store or access personal data outside the United Kingdom, including in countries that may not provide the same level of data protection as the UK.
Where such transfers occur, we take appropriate measures to protect personal data, which may include:
- relying on adequacy regulations or decisions where available;
- using standard contractual clauses or equivalent lawful transfer mechanisms;
- carrying out transfer risk assessments where appropriate;
- implementing technical and organisational safeguards.
By using our services or submitting personal data to us, you acknowledge that your data may be transferred internationally subject to such safeguards.
7. Storage duration
We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, reporting, and dispute-resolution requirements.
- Enquiry data: retained for a reasonable period after the enquiry is resolved or unless you request deletion where applicable.
- Client and contract data: retained for the duration of the contractual relationship and thereafter for legal and record-keeping purposes.
- Financial records: retained for periods required by law and accounting standards.
- Marketing data: retained until you unsubscribe, object, or the data is no longer needed.
- Technical and analytics data: retained for a limited period, depending on the tool and configuration used.
When data is no longer required, we will delete, anonymise, or securely archive it where appropriate.
8. User rights
Subject to applicable law, you may have the following rights regarding your personal data:
- Access: to request confirmation of whether we process your data and to obtain a copy of that data.
- Rectification: to request correction of inaccurate or incomplete data.
- Erasure: to request deletion of your data in certain circumstances.
- Restriction: to request that we limit processing in certain circumstances.
- Data portability: to receive certain data in a structured, commonly used, machine-readable format and, where feasible, to have it transmitted to another controller.
- Objection: to object to processing based on legitimate interests and to object at any time to direct marketing.
You may exercise these rights by contacting us using the details provided in this Policy. We may need to verify your identity before responding. We will respond within the time limits required by applicable law.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before withdrawal.
You may withdraw consent by:
- following the unsubscribe instructions in our communications;
- adjusting cookie preferences through the website where available;
- contacting us directly at [email protected].
If you withdraw consent, we may still be able to process your personal data where another lawful basis applies.
10. Right to complain
If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve the matter.
You also have the right to lodge a complaint with the relevant supervisory authority in the United Kingdom. In particular, you may contact the Information Commissioner's Office (ICO) or another competent authority in the jurisdiction where you live or where the issue arose.
11. Data security
We take appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, unlawful use, alteration, disclosure, or destruction. These measures may include:
- access controls and password protection;
- encryption where appropriate;
- secure hosting and backup procedures;
- limited access on a need-to-know basis;
- staff and contractor confidentiality obligations;
- regular review of security practices and incident response procedures.
Although we strive to protect your personal data, no method of transmission or storage is completely secure. We cannot guarantee absolute security.
12. Contact information
If you have questions about this Privacy Policy or wish to exercise your rights, please contact:
- Northstar Digital Studio Ltd
- Address: Northstar Studio, 2nd Floor, 18-20 Great Ancoats Street, Manchester M4 5BD, UK
- Email: [email protected]
- Phone: +44 161 832 9475
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or operational requirements. Any updates will be posted on this page with a revised "Last updated" date.
We encourage you to review this Privacy Policy periodically to stay informed about how Northstar Digital Studio Ltd processes personal data. Your continued use of our website or services after any changes are posted constitutes your acknowledgment of the updated Policy, where permitted by law.