Northshore Creative Production Ltd (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal data in a lawful, fair, and transparent manner. This Privacy Policy explains how we collect, use, share, store, and protect personal data in connection with our creative-production services, website, communications, and related business activities.
1. Introduction and Company Information
This Privacy Policy applies to personal data processed by Northshore Creative Production Ltd in the course of providing creative-production services, including but not limited to strategy, design, content production, photography, video, live event production, post-production, project management, supplier coordination, and client communications.
Data controller: Northshore Creative Production Ltd
Registered business address: Northshore Creative, 2a St Peter's Square, Manchester, M2 3AE, UK
Email: [email protected]
Telephone: +44 161 924 7583
For the purposes of this Privacy Policy, “personal data” means any information relating to an identified or identifiable individual.
2. Data Collection and Processing
We may collect and process the following categories of personal data:
- Identity data: name, job title, employer, business relationship details, and similar identifiers.
- Contact data: email address, postal address, telephone number, and other communication details.
- Client and project data: briefs, project requirements, feedback, approvals, correspondence, deliverables, and records relating to the services we provide.
- Technical data: IP address, browser type, device information, operating system, website usage data, and cookies or similar technologies where applicable.
- Financial and transaction data: billing details, payment records, invoicing information, and related accounting records.
- Marketing and communication data: preferences for receiving communications, responses to surveys, and marketing interactions.
- Supplier and partner data: details of freelancers, contractors, vendors, and business partners involved in our productions.
- Special category data: we do not intentionally collect special category data unless it is necessary and lawfully provided in connection with a project or service, and where an appropriate legal basis applies.
We collect personal data directly from individuals, from client organisations, from suppliers and business partners, from correspondence, and from our website or other digital channels where relevant.
3. Purpose of Data Processing
We process personal data for the following purposes:
- to respond to enquiries and provide quotations, proposals, and service information;
- to manage client relationships and deliver creative-production services;
- to plan, coordinate, produce, edit, and deliver projects and outputs;
- to communicate with clients, suppliers, contractors, and other stakeholders;
- to invoice, process payments, and manage accounts and records;
- to maintain internal business administration, reporting, and quality control;
- to comply with legal, regulatory, tax, accounting, and contractual obligations;
- to protect our business, clients, and users from fraud, misuse, and security risks;
- to improve our services, website, operations, and customer experience;
- to send marketing communications where permitted by law or with consent;
- to defend, establish, or exercise legal claims or rights.
4. Legal Basis for Processing
We will only process personal data where we have a lawful basis to do so. Depending on the circumstances, the legal bases may include:
- Contract: processing necessary to enter into or perform a contract with you or your organisation.
- Legal obligation: processing necessary to comply with applicable legal, tax, accounting, or regulatory requirements.
- Legitimate interests: processing necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and freedoms. This may include business administration, service improvement, security, and communications relating to our services.
- Consent: where we rely on your consent, for example for certain marketing communications or specific types of non-essential processing.
- Vital interests: in rare circumstances, where processing is necessary to protect someone’s vital interests.
Where we rely on legitimate interests, we take steps to assess and balance those interests against potential impacts on individuals.
5. Data Sharing and Third Parties
We may share personal data with third parties where necessary and appropriate for the purposes described in this Privacy Policy. These third parties may include:
- Service providers and processors: hosting providers, IT support, cloud storage, email platforms, collaboration tools, CRM systems, analytics providers, invoicing and accounting platforms.
- Creative-production partners: freelancers, editors, production crew, photographers, videographers, designers, and technical specialists engaged to support project delivery.
- Professional advisers: lawyers, accountants, auditors, insurers, and other professional consultants.
- Authorities and regulators: courts, law enforcement, tax authorities, or other public bodies where required by law or to protect legal rights.
- Business counterparties: clients, suppliers, and event or production venue operators where necessary for service delivery.
We require third parties who process personal data on our behalf to handle it securely, confidentially, and only in accordance with our instructions and applicable legal requirements.
6. Data Transfer to Third Countries
Some of our service providers, partners, or tools may be located outside the United Kingdom and may process personal data in countries that may not provide the same level of data protection as the UK.
Where personal data is transferred internationally, we will implement appropriate safeguards as required by applicable law. These safeguards may include:
- standard contractual clauses or equivalent transfer mechanisms;
- data transfer assessments where required;
- technical and organisational safeguards to protect the data.
We will take appropriate steps to ensure that any such transfers are lawful and that your personal data remains protected.
7. Storage Duration
We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, contractual, and reporting obligations.
Retention periods may vary depending on the type of data and the context in which it was collected. In general:
- client and project records are retained for the duration of the relationship and for a reasonable period thereafter;
- financial and accounting records are retained in line with applicable tax and accounting requirements;
- marketing data is retained until you unsubscribe, object, or your consent is withdrawn, where applicable;
- technical and website data is retained for a limited period necessary for security, analytics, and operational purposes.
When personal data is no longer required, we will securely delete, anonymise, or otherwise dispose of it.
8. User Rights
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: the right to request confirmation of whether we process your personal data and to obtain a copy of that data.
- Rectification: the right to request correction of inaccurate or incomplete personal data.
- Erasure: the right to request deletion of your personal data in certain circumstances.
- Restriction: the right to request that we limit the processing of your personal data in certain situations.
- Data portability: the right to receive certain personal data in a structured, commonly used, machine-readable format and to request transmission to another controller where technically feasible.
- Objection: the right to object to processing based on legitimate interests and, in some cases, direct marketing.
These rights may be subject to legal limitations and exemptions. We may need to verify your identity before responding to your request.
9. Withdrawal of Consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
If you withdraw consent, we may be unable to provide certain services or communications that depend on that consent.
10. Right to Complain
If you are concerned about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue.
You may also have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction where you live, work, or where an alleged infringement occurred.
In the United Kingdom, this is typically the Information Commissioner’s Office (ICO).
11. Data Security
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
These measures may include:
- access controls and authentication measures;
- encryption or secure transmission methods where appropriate;
- role-based permissions and confidentiality obligations;
- regular review of systems and processes;
- backup and recovery procedures;
- staff awareness and security training.
However, no system can be guaranteed to be completely secure. You are responsible for keeping any credentials or access information confidential where applicable.
12. Contact Information
If you have any questions about this Privacy Policy or our handling of personal data, please contact:
Northshore Creative Production Ltd
Northshore Creative, 2a St Peter's Square, Manchester, M2 3AE, UK
Email: [email protected]
Phone: +44 161 924 7583
13. Changes to Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. Any changes will take effect when the updated Privacy Policy is posted on our website or otherwise made available to you.
We encourage you to review this Privacy Policy periodically to stay informed about how Northshore Creative Production Ltd processes personal data.