Privacy Policy

This Privacy Policy explains how Northbridge Account-Based Marketing Ltd collects, uses, stores, shares, and protects personal data when providing account-based marketing services and operating its website, communications, and related business activities. It is intended to comply with applicable UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Introduction and company information

Data controller: Northbridge Account-Based Marketing Ltd

Registered / business address: Northbridge Account-Based Marketing Ltd, 27 St John Street, London EC1M 4DN, UK

Email: [email protected]

Phone: +44 20 7946 8372

Northbridge Account-Based Marketing Ltd is an account-based marketing business. In the course of providing marketing strategy, campaign management, lead generation, analytics, and related services, we may process personal data relating to clients, prospective clients, website visitors, business contacts, suppliers, and other individuals.

This Privacy Policy applies where we act as a data controller. Where we process personal data on behalf of a client or another organisation, we may act as a data processor and will process such data in accordance with our contractual obligations and applicable law.

2. Data collection and processing

We may collect and process the following categories of personal data:

• Identity data: name, job title, employer, and professional role.
• Contact data: business email address, telephone number, postal address, and other contact details.
• Business and account data: company name, industry, account information, preferences, and communications history.
• Technical data: IP address, browser type, device identifiers, operating system, referral source, and website usage data.
• Marketing and communications data: preferences, campaign responses, event attendance, and engagement with our emails, advertisements, and content.
• Client service data: information provided in the course of enquiries, proposals, contracts, and service delivery.
• Supplier and partner data: contact and business information relating to vendors, contractors, and business partners.

We may collect personal data directly from you, from your organisation, from publicly available sources, from business information providers, from our website and analytics tools, and from third parties such as advertising platforms, CRM systems, and professional networking services.

We do not intentionally collect special category personal data unless it is necessary and lawful to do so. If such data is provided to us, we will only process it where permitted by law and with appropriate safeguards.

3. Purpose of data processing

We process personal data for the following purposes:

• to provide account-based marketing services and related consultancy;
• to manage client relationships, enquiries, proposals, and contracts;
• to identify and research target accounts and business opportunities;
• to personalise and deliver marketing communications and campaigns;
• to analyse campaign performance, website usage, and business development activity;
• to maintain records, administer our business, and improve our services;
• to comply with legal, regulatory, tax, accounting, and reporting obligations;
• to detect, investigate, and prevent fraud, security incidents, and misuse;
• to establish, exercise, or defend legal claims;
• to send relevant business-to-business marketing communications where permitted by law.

4. Legal basis for processing

We will only process personal data where we have a lawful basis under UK GDPR. Depending on the context, our legal bases may include:

• Consent: where you have given clear consent for us to process your personal data for a specific purpose, such as certain marketing communications or cookie-based tracking where required.
• Contract: where processing is necessary to enter into or perform a contract with you or your organisation.
• Legal obligation: where processing is necessary to comply with a legal or regulatory obligation.
• Legitimate interests: where processing is necessary for our legitimate business interests, such as business development, account-based marketing, service improvement, fraud prevention, and internal administration, provided that our interests are not overridden by your rights and freedoms.
• Vital interests: in rare circumstances where processing is necessary to protect someone’s life.
• Public task: where applicable, if processing is necessary for the performance of a task carried out in the public interest.

Where we rely on legitimate interests, we will carry out an assessment to ensure that our interests are balanced against your rights and expectations. Where required by law, we will obtain your consent before processing your personal data.

5. Data sharing and third parties

We may share personal data with trusted third parties where necessary for the purposes described in this Privacy Policy. These may include:

• service providers supporting our website, hosting, email delivery, analytics, CRM, and IT systems;
• advertising and marketing platforms;
• professional advisers, including lawyers, accountants, auditors, and insurers;
• payment processors and banking providers;
• subcontractors and consultants assisting with service delivery;
• regulators, law enforcement, courts, and other authorities where required by law;
• prospective buyers or investors in connection with a business transaction, subject to appropriate confidentiality protections.

We require third parties who process personal data on our behalf to implement appropriate security measures and to process personal data only in accordance with our instructions and applicable law.

We do not sell personal data.

6. Data transfer to third countries

Some of our service providers or business partners may be located outside the UK, including in countries that may not provide the same level of data protection as the UK.

Where we transfer personal data outside the UK, we will ensure that appropriate safeguards are in place, which may include:

• the UK International Data Transfer Agreement (IDTA);
• the UK Addendum to the EU Standard Contractual Clauses;
• an adequacy regulation or decision recognised under UK law;
• other lawful transfer mechanisms permitted by applicable data protection law.

Where relevant, you may contact us for further information about the safeguards used for international transfers.

7. Storage duration

We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, reporting, and business requirements.

In determining retention periods, we consider:

• the nature and sensitivity of the personal data;
• the purposes for which we process the data;
• the legal basis for processing;
• any applicable legal or regulatory retention requirements;
• the risk of harm from unauthorised use or disclosure;
• whether the purposes can be achieved by other means.

When personal data is no longer required, we will securely delete, anonymise, or archive it in accordance with our retention practices and legal obligations.

8. User rights

Under UK data protection law, you may have the following rights in relation to your personal data:

• Access: to request a copy of the personal data we hold about you.
• Rectification: to request correction of inaccurate or incomplete data.
• Erasure: to request deletion of your personal data in certain circumstances.
• Restriction: to request that we limit the processing of your personal data in certain circumstances.
• Data portability: to receive certain personal data in a structured, commonly used, machine-readable format and to request transfer to another controller where technically feasible.
• Objection: to object to processing based on legitimate interests and to object to direct marketing at any time.

These rights are not absolute and may be subject to legal exceptions. We may need to verify your identity before responding to your request.

To exercise any of these rights, please contact us using the details in the Contact Information section below.

9. Withdrawal of consent

Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.

If you withdraw consent, we may no longer be able to provide certain services or communications to you. We will inform you if this is the case.

You can withdraw consent by contacting us at [email protected].

10. Right to complain

If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue.

You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO):

Information Commissioner’s Office (ICO)
Website: https://ico.org.uk
Telephone: 0303 123 1113

11. Data security

We take appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration, disclosure, or destruction. These measures may include:

• access controls and authentication measures;
• encryption where appropriate;
• secure storage and backup procedures;
• staff confidentiality obligations and training;
• regular review of security controls and supplier arrangements;
• incident response and breach management procedures.

While we take reasonable steps to protect personal data, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security.

12. Contact information

If you have any questions about this Privacy Policy or our data protection practices, or if you wish to exercise your rights, please contact:

Northbridge Account-Based Marketing Ltd
Northbridge Account-Based Marketing Ltd, 27 St John Street, London EC1M 4DN, UK
Email: [email protected]
Phone: +44 20 7946 8372

13. Changes to privacy policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. Any updated version will be posted on our website with a revised effective date where appropriate.

We encourage you to review this Privacy Policy periodically to stay informed about how Northbridge Account-Based Marketing Ltd processes personal data.