Privacy Policy

Northbridge Client Growth is committed to protecting your privacy and handling your personal data in a lawful, fair, and transparent manner. This Privacy Policy explains how Northbridge Client Growth collects, uses, stores, shares, and protects personal data in connection with its customer-acquisition activities and related services.

1. Introduction and company information

This Privacy Policy applies to personal data processed by Northbridge Client Growth when you interact with us, visit our website, contact us, request information, engage our services, or otherwise communicate with us.

Data controller: Northbridge Client Growth

Registered/operating address: Northbridge Client Growth, 14 Finsbury Square, London EC2A 1AH, UK

Email: [email protected]

Phone: +44 20 7946 8372

For the purposes of UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Northbridge Client Growth acts as a data controller in relation to the personal data described in this Privacy Policy.

2. Data collection and processing

Northbridge Client Growth may collect and process the following categories of personal data:

• Identity data: name, title, job title, employer, and similar identifiers.
• Contact data: email address, telephone number, postal address, and business contact details.
• Communication data: correspondence, enquiry details, call notes, meeting notes, and records of communications with us.
• Technical data: IP address, browser type and version, device identifiers, operating system, time zone setting, and website usage data.
• Usage data: information about how you use our website, services, emails, and digital content.
• Marketing and preference data: your preferences in receiving marketing from us and your communication preferences.
• Business and engagement data: information relevant to customer-acquisition services, lead qualification, campaign performance, and client relationship management.

We may collect personal data directly from you, from our clients, from publicly available sources, from business partners, from analytics providers, and from other lawful third-party sources.

We do not intentionally collect special category data unless it is necessary and lawful to do so. If such data is processed, we will only do so where a valid legal basis applies and additional safeguards are in place.

3. Purpose of data processing

Northbridge Client Growth processes personal data for the following purposes:

• to provide and manage customer-acquisition, lead generation, outreach, and related business services;
• to assess enquiries, qualify leads, and communicate with prospective and existing clients;
• to administer contracts, billing, invoicing, and account management;
• to operate, maintain, and improve our website, systems, and services;
• to send service communications and, where permitted, marketing communications;
• to analyse campaign performance, audience engagement, and service effectiveness;
• to comply with legal obligations and regulatory requirements;
• to detect, prevent, and investigate fraud, misuse, security incidents, and other unlawful activity;
• to establish, exercise, or defend legal claims;
• to manage business operations, internal record-keeping, and reporting.

4. Legal basis for processing

We will only process personal data where we have a lawful basis under UK GDPR. Depending on the context, our legal bases may include:

• Consent: where you have given clear consent for us to process your personal data for a specific purpose, such as certain marketing activities or optional communications.
• Contract: where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
• Legal obligation: where processing is necessary to comply with applicable law, regulation, court order, or regulatory requirement.
• Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include business development, service improvement, fraud prevention, network and information security, and client relationship management.

Where we rely on legitimate interests, we carry out a balancing test to ensure that our interests are not unfairly prejudicial to you.

5. Data sharing and third parties

Northbridge Client Growth may share personal data with trusted third parties where necessary and lawful for the purposes described in this Privacy Policy. These may include:

• service providers and processors that support our operations, such as hosting, IT support, CRM systems, analytics, email delivery, and security services;
• professional advisers, including lawyers, accountants, auditors, and insurers;
• clients and business partners where required to deliver customer-acquisition services or manage business relationships;
• regulators, law enforcement, courts, and other authorities where required by law or to protect legal rights;
• third-party platforms and tools used for marketing, communications, and performance measurement;
• payment service providers and financial institutions where relevant to billing and payment processing.

We require third parties who process personal data on our behalf to implement appropriate security measures and to process data only in accordance with our instructions and applicable law.

We do not sell personal data.

6. Data transfer to third countries

Some of our service providers or business partners may be located outside the United Kingdom. Where personal data is transferred outside the UK, Northbridge Client Growth will ensure that appropriate safeguards are in place to protect the data in accordance with UK data protection law.

Such safeguards may include:

• the UK International Data Transfer Agreement (IDTA);
• the UK Addendum to the EU Standard Contractual Clauses;
• an adequacy regulation or decision recognising the destination country as providing adequate protection;
• other lawful transfer mechanisms permitted under UK GDPR.

Where required, we will also assess the risks associated with international transfers and apply supplementary measures where appropriate.

7. Storage duration

Northbridge Client Growth retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, reporting, and contractual requirements.

The retention period will depend on factors such as:

• the nature of the data;
• the purpose of processing;
• whether a contract is in place;
• legal and regulatory retention obligations;
• the need to resolve disputes or enforce agreements;
• our legitimate business needs.

When personal data is no longer required, we will delete, anonymise, or securely archive it in accordance with our retention procedures.

8. User rights

Under UK data protection law, you may have the following rights in relation to your personal data:

• Right of access: to request confirmation of whether we process your personal data and obtain a copy of that data.
• Right to rectification: to request correction of inaccurate or incomplete personal data.
• Right to erasure: to request deletion of your personal data in certain circumstances.
• Right to restriction: to request that we limit the processing of your personal data in certain circumstances.
• Right to data portability: to receive certain personal data in a structured, commonly used, machine-readable format and to request transfer to another controller where technically feasible.
• Right to object: to object to processing based on legitimate interests and to object at any time to direct marketing.

These rights are not absolute and may be subject to legal exceptions or limitations. If you wish to exercise any of these rights, please contact us using the details below.

9. Withdrawal of consent

Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

You can withdraw consent by contacting Northbridge Client Growth at [email protected] or by using any unsubscribe or preference-management option provided in our communications, where applicable.

If you withdraw consent, we may still process your personal data where another lawful basis applies.

10. Right to complain

If you have concerns about how Northbridge Client Growth handles your personal data, we encourage you to contact us first so that we can try to resolve the issue.

You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO).

Information Commissioner’s Office (ICO)
Website: https://ico.org.uk

We would appreciate the opportunity to address your concerns before you contact the ICO, but you are entitled to do so at any time.

11. Data security

Northbridge Client Growth takes the security of personal data seriously and implements appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, alteration, or disclosure.

These measures may include:

• access controls and authentication procedures;
• encryption and secure transmission methods where appropriate;
• regular system monitoring and vulnerability management;
• staff confidentiality obligations and data protection training;
• backup and disaster recovery procedures;
• vendor due diligence and contractual safeguards.

While we take reasonable steps to protect personal data, no system can be guaranteed to be completely secure. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will act in accordance with applicable legal requirements.

12. Contact information

If you have any questions about this Privacy Policy or how Northbridge Client Growth processes personal data, or if you wish to exercise your rights, please contact us using the details below:

Northbridge Client Growth
14 Finsbury Square
London EC2A 1AH
UK

Email: [email protected]
Phone: +44 20 7946 8372

13. Changes to privacy policy

Northbridge Client Growth may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updated version will be posted on our website with a revised effective date where appropriate.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

Effective date: 8 July 2026