Effective date: 26 August 2026
1. Introduction and company information
This Privacy Policy explains how Northbridge Search Marketing Ltd collects, uses, stores, shares, and protects personal data when providing search-marketing and related digital marketing services, operating our website, communicating with clients and prospects, and carrying out our business activities.
Northbridge Search Marketing Ltd is the data controller for the personal data described in this Privacy Policy unless we state otherwise.
- Company name: Northbridge Search Marketing Ltd
- Address: Northbridge Search, 2nd Floor, 24 Great Northern Road, West End, Leeds LS1 3BJ, UK
- Email: [email protected]
- Phone: +44 113 794 6825
This Policy applies to personal data we collect from website visitors, leads, clients, suppliers, business contacts, and individuals who interact with us through email, telephone, forms, online advertising, analytics tools, or social media platforms.
2. Data collection and processing
We may collect and process the following categories of personal data:
- Identity data: name, job title, employer, and similar identifiers.
- Contact data: email address, telephone number, postal address, and communication preferences.
- Business information: company details, website details, billing information, and service requirements.
- Technical data: IP address, browser type, device identifiers, operating system, referral URLs, and log data.
- Usage data: pages visited, interactions with our website, form submissions, and engagement metrics.
- Marketing and communications data: preferences for receiving marketing, responses to campaigns, and consent records.
- Client service data: account information, project communications, campaign performance data, and contractual records.
- Billing and transaction data: payment status, invoicing details, and financial records necessary for managing our relationship with you.
We collect data directly from you when you contact us, submit forms, subscribe to updates, request a proposal, or enter into a contract with us. We may also collect data automatically through cookies, analytics technologies, advertising platforms, and server logs. In some cases, we may receive personal data from third parties such as business partners, lead-generation services, advertising networks, publicly available sources, or clients who provide us with contact details for their employees or stakeholders.
We process personal data only to the extent necessary for the purposes described in this Policy and in accordance with applicable data protection requirements.
3. Purpose of data processing
We process personal data for the following purposes:
- to respond to enquiries and provide information about our services;
- to deliver and manage search-marketing services, including SEO, PPC, content strategy, analytics, and campaign reporting;
- to communicate with clients, prospects, suppliers, and other business contacts;
- to administer contracts, invoicing, payments, and account management;
- to maintain and improve our website, systems, products, and services;
- to monitor website performance, user engagement, and marketing effectiveness;
- to conduct business development, lead qualification, and marketing activities;
- to comply with legal, regulatory, accounting, and tax obligations;
- to detect, prevent, and investigate fraud, security incidents, or misuse of our services;
- to establish, exercise, or defend legal claims.
Where permitted, we may also use personal data for internal analysis, service improvement, and aggregation or anonymisation for statistical purposes.
4. Legal basis for processing
We process personal data only where we have a valid legal basis. Depending on the circumstances, the legal basis may include:
- Consent: where you have given clear consent, for example for certain marketing communications or non-essential cookies.
- Contract: where processing is necessary to enter into or perform a contract with you or your organisation.
- Legal obligation: where processing is necessary to comply with law, including tax, accounting, and regulatory duties.
- Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include managing our business, securing our systems, improving services, and carrying out limited marketing to business contacts.
Where we rely on legitimate interests, we assess the impact of the processing and take steps to minimise any impact on your privacy.
5. Data sharing and third parties
We may share personal data with trusted third parties where necessary for the purposes described in this Policy. These may include:
- hosting, cloud storage, and IT service providers;
- website analytics and tag management providers;
- advertising and marketing platforms;
- CRM, email, and customer communication systems;
- accounting, invoicing, and payment service providers;
- professional advisers such as lawyers, accountants, auditors, and insurers;
- subcontractors and specialist consultants supporting our client services;
- government bodies, regulators, law enforcement, or courts where required by law.
We only share personal data where it is necessary, subject to appropriate confidentiality obligations, and with suitable safeguards in place.
Where we act on behalf of clients as a processor or service provider, we may process personal data in accordance with our contract and the client’s instructions. In such cases, the client may be the controller of that data.
6. Data transfer to third countries
Some of our service providers or group partners may process personal data outside the United Kingdom and, where applicable, outside the European Economic Area. Where such transfers occur, we take steps to ensure that an adequate level of protection is provided, which may include:
- transferring data to countries recognised as providing adequate protection;
- using approved contractual safeguards, such as standard contractual clauses or equivalent transfer mechanisms;
- implementing supplementary technical and organisational measures where appropriate.
We assess international transfers and seek to ensure that personal data remains protected in line with applicable requirements.
7. Storage duration
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, reporting, and dispute-resolution purposes.
The retention period depends on factors such as:
- the nature of the data and the purpose of processing;
- the length of our relationship with you or your organisation;
- applicable limitation periods and legal retention requirements;
- whether a complaint, dispute, or legal claim is pending or reasonably anticipated.
When personal data is no longer required, we will securely delete, anonymise, or otherwise dispose of it in accordance with our retention procedures.
8. User rights
Depending on your location and applicable law, you may have some or all of the following rights in relation to your personal data:
- Access: to obtain confirmation of whether we process your personal data and to receive a copy of that data.
- Rectification: to request correction of inaccurate or incomplete personal data.
- Erasure: to request deletion of personal data where there is a lawful basis for doing so.
- Restriction: to request that we limit the processing of your personal data in certain circumstances.
- Data portability: to receive certain data in a structured, commonly used, machine-readable format and, where feasible, to have it transmitted to another controller.
- Objection: to object to processing based on legitimate interests or to direct marketing at any time.
To exercise any of these rights, please contact us using the details in the Contact information section below. We may need to verify your identity before responding. We will respond within a reasonable timeframe and in accordance with applicable law.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before the withdrawal.
You can withdraw consent by following the unsubscribe instructions in our communications, adjusting your cookie preferences where available, or contacting us directly.
If you withdraw consent, we may still process your data where another lawful basis applies.
10. Right to complain
If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue.
You may also have the right to lodge a complaint with the relevant data protection supervisory authority. In the United Kingdom, this is the Information Commissioner's Office (ICO).
Website: ico.org.uk
11. Data security
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include:
- access controls and authentication measures;
- encryption or other secure transmission methods where appropriate;
- restricted access to personal data on a need-to-know basis;
- staff confidentiality obligations and privacy training;
- backup, monitoring, and incident-response procedures;
- regular review of systems, suppliers, and security practices.
No method of transmission or storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.
12. Contact information
If you have any questions about this Privacy Policy, our data practices, or your rights, please contact:
- Northbridge Search Marketing Ltd
- Address: Northbridge Search, 2nd Floor, 24 Great Northern Road, West End, Leeds LS1 3BJ, UK
- Email: [email protected]
- Phone: +44 113 794 6825
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or operational needs. Any changes will take effect when the updated version is posted on our website or otherwise made available to you, unless a different effective date is stated.
We encourage you to review this Privacy Policy periodically to stay informed about how Northbridge Search Marketing Ltd processes personal data.