Effective date: 31 August 2026
1. Introduction and company information
This Privacy Policy explains how Northbridge Audio Production Studio Ltd ("we", "us", "our") collects, uses, stores, shares, and protects personal data when you visit our website, contact us, book services, request quotations, attend our premises, or otherwise interact with us in connection with our audio-production-studio business.
Northbridge Audio Production Studio Ltd is the data controller responsible for your personal data for the purposes described in this Privacy Policy.
Contact details:
Northbridge Audio Production Studio Ltd
Unit 4, 12 Hope Street, Liverpool L1 9BY, United Kingdom
Email: [email protected]
Phone: +44 151 792 4683
2. Data collection and processing
We may collect and process the following categories of personal data:
- Identity data: name, professional title, company name, and similar identifiers.
- Contact data: email address, phone number, billing address, and correspondence details.
- Booking and project data: session details, production preferences, project briefs, creative instructions, deadlines, and deliverable specifications.
- Payment and transaction data: payment status, invoice details, and related records, excluding full card details where these are handled by payment processors.
- Technical data: IP address, device information, browser type, operating system, log data, and website usage information.
- Communication data: emails, call notes, messages, feedback, and other communications.
- Audio and media content: recordings, voice tracks, stems, mixes, and other materials you provide or that we create during the course of our services.
- Marketing preferences: your consent choices and communication preferences.
We collect personal data directly from you, from your representatives, from our website and communication channels, from payment and business service providers, and from publicly available sources where appropriate and lawful.
Where we process audio or media content that may contain personal data, including a voice recording or spoken content, we do so only as necessary for providing our services, managing projects, and fulfilling contractual obligations.
3. Purpose of data processing
We process personal data for the following purposes:
- to provide our audio-production services, including recording, editing, mixing, mastering, and related studio services;
- to manage enquiries, quotations, bookings, and client accounts;
- to communicate with you about projects, schedules, deliverables, and support requests;
- to issue invoices, process payments, and maintain accounting records;
- to improve our services, operations, website, and client experience;
- to maintain internal records, quality control, and project management;
- to protect our studio, systems, personnel, clients, and assets, including prevention of fraud and misuse;
- to comply with legal, regulatory, tax, and contractual obligations;
- to send marketing communications where permitted by law and where you have not opted out, or where you have given consent.
4. Legal basis for processing
We rely on one or more of the following legal bases for processing personal data, depending on the context and purpose:
- Performance of a contract: where processing is necessary to provide our services, fulfil bookings, or take steps at your request before entering into a contract.
- Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include managing client relationships, securing our operations, improving services, and maintaining records.
- Consent: where you have given clear consent, for example for certain marketing communications or optional uses of your content.
- Legal obligation: where processing is necessary to comply with laws and regulations, including accounting, tax, and other statutory duties.
Where we rely on consent, you may withdraw it at any time. This will not affect the lawfulness of processing carried out before withdrawal.
5. Data sharing and third parties
We may share personal data with trusted third parties only where necessary and lawful. These may include:
- payment service providers and banks;
- IT, hosting, cloud storage, backup, and cybersecurity providers;
- email, communications, and customer relationship management providers;
- accountants, auditors, insurers, legal advisers, and other professional advisers;
- subcontractors, freelance engineers, session musicians, editors, or technical specialists engaged to support a project;
- government bodies, regulators, courts, law enforcement, and other authorities where required by law;
- business partners and suppliers involved in delivering services to you.
We require third parties that process personal data on our behalf to act under appropriate contractual and security obligations and to use the data only for the purposes we specify.
6. Data transfer to third countries
Some of our service providers may be located outside the United Kingdom or may process data in countries outside the United Kingdom. Where this occurs, we take steps to ensure that appropriate safeguards are in place to protect your personal data, which may include:
- reliance on adequacy regulations or decisions where available;
- use of contractual protections and standard contractual clauses or equivalent safeguards;
- assessment of the risks associated with the transfer and implementation of additional protective measures where appropriate.
By using our services or communicating with us, you acknowledge that your data may be transferred and processed in jurisdictions other than your own, subject to applicable legal protections.
7. Storage duration
We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, contractual, and reporting obligations.
- Client and project records: typically retained for the duration of the business relationship and for a further period as required for legal and business purposes.
- Accounting and tax records: retained for the period required by applicable law.
- Marketing data: retained until you unsubscribe, object, or your consent is withdrawn, unless a longer retention period is required or permitted by law.
- Technical logs and security records: retained for a limited period unless needed for incident investigation, security, or legal compliance.
- Audio and production files: retained according to project requirements, agreed archiving arrangements, or deletion requests, subject to legal or contractual obligations.
When personal data is no longer required, we will delete it, anonymise it, or securely archive it where appropriate.
8. User rights (access, rectification, erasure, restriction, data portability, objection)
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: to request confirmation of whether we process your personal data and to receive a copy of that data.
- Rectification: to request correction of inaccurate or incomplete personal data.
- Erasure: to request deletion of your personal data in certain circumstances.
- Restriction: to request that we limit the processing of your personal data in certain circumstances.
- Data portability: to request a copy of certain personal data in a structured, commonly used, machine-readable format and, where technically feasible, to have it transferred to another controller.
- Objection: to object to processing based on legitimate interests and to object at any time to direct marketing.
To exercise any of these rights, please contact us using the details below. We may need to verify your identity before responding. We will respond within the timeframe required by applicable law.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you may withdraw that consent at any time by contacting us at [email protected] or by using any unsubscribe method provided in our communications.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. It may also mean that we are unable to provide certain services or features where consent is necessary.
10. Right to complain
If you are concerned about how we handle your personal data, we encourage you to contact us first so we can try to resolve the matter.
You also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. In the United Kingdom, this is the Information Commissioner's Office (ICO). You can find more information on the ICO website.
11. Data security
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include access controls, secure storage, encryption where appropriate, staff confidentiality obligations, backup procedures, and system monitoring.
No method of transmission or storage is completely secure. While we take reasonable steps to protect your personal data, we cannot guarantee absolute security. If we become aware of a personal data breach that affects your rights and freedoms, we will handle it in accordance with applicable law.
12. Contact information
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:
Northbridge Audio Production Studio Ltd
Unit 4, 12 Hope Street, Liverpool L1 9BY, United Kingdom
Email: [email protected]
Phone: +44 151 792 4683
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or operational needs. Any updated version will be published on our website with a revised effective date where appropriate.
We encourage you to review this Privacy Policy periodically to stay informed about how Northbridge Audio Production Studio Ltd processes personal data.