Privacy Policy

Northbridge Search Partners (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal data in a lawful, fair, and transparent manner. This Privacy Policy explains how Northbridge Search Partners collects, uses, discloses, transfers, stores, and protects personal data in connection with our search-engine-marketing services, website, communications, and related business activities.

1. Introduction and company information

This Privacy Policy applies to personal data processed by Northbridge Search Partners in the course of operating our business as a search-engine-marketing provider. We act as a data controller in relation to the personal data described in this policy, unless we expressly state otherwise.

Company name: Northbridge Search Partners
Registered / business address: Northbridge Search Partners, 14 Farringdon Road, London EC1M 3HN, UK
Email: [email protected]
Phone: +44 20 7946 8372

This policy is intended to comply with applicable UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data collection and processing

We may collect and process the following categories of personal data:

• Identity data: name, job title, employer, and business contact details.
• Contact data: email address, telephone number, postal address, and communication preferences.
• Account and enquiry data: information you provide when you contact us, request a proposal, subscribe to updates, or use our services.
• Technical data: IP address, browser type, device identifiers, operating system, language settings, and website usage information.
• Usage data: pages visited, referral sources, click behaviour, session duration, and interaction with our website or communications.
• Marketing and communications data: your preferences in receiving marketing from us and your communication history with us.
• Client and campaign data: information necessary to provide search-engine-marketing services, such as campaign performance data, conversion data, audience insights, and analytics information.

We may collect personal data directly from you, from our clients, from publicly available sources, from analytics tools, from advertising platforms, and from third-party service providers. Where we receive personal data from a client or another organisation, we rely on that party to ensure it has a lawful basis to share the data with us.

3. Purpose of data processing

We process personal data for the following purposes:

• to respond to enquiries and communicate with prospective and existing clients;
• to provide, manage, and improve our search-engine-marketing services;
• to analyse campaign performance, website performance, and user engagement;
• to personalise and optimise advertising and marketing activities;
• to send service-related notices, administrative messages, and updates;
• to manage our business operations, including invoicing, record-keeping, and contract administration;
• to comply with legal and regulatory obligations;
• to detect, prevent, and investigate fraud, misuse, or security incidents;
• to establish, exercise, or defend legal claims;
• to improve our website, services, and customer experience;
• to send marketing communications where permitted by law and, where required, with your consent.

4. Legal basis for processing

We only process personal data where we have a lawful basis under UK data protection law. Depending on the context, our legal bases may include:

• Consent: where you have given us clear consent, for example for certain marketing communications or optional cookies.
• Contract: where processing is necessary to enter into or perform a contract with you or your organisation.
• Legal obligation: where processing is necessary to comply with applicable laws, regulations, or court orders.
• Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include service improvement, business development, fraud prevention, network and information security, and limited B2B marketing.
• Vital interests: in rare cases where processing is necessary to protect someone’s life.

Where we rely on legitimate interests, we carry out an assessment to ensure our interests are balanced against your rights and expectations.

5. Data sharing and third parties

We may share personal data with third parties where necessary for the purposes described in this policy, including:

• Service providers: hosting providers, analytics providers, customer relationship management systems, email service providers, IT support, and security providers;
• Advertising and analytics platforms: platforms used to deliver, measure, and optimise search-engine-marketing campaigns;
• Professional advisers: lawyers, accountants, auditors, insurers, and consultants;
• Payment and finance providers: where relevant to billing and payment processing;
• Regulators and authorities: where required by law or to protect our legal rights;
• Business counterparties: in connection with a merger, acquisition, restructuring, or sale of assets.

We require third parties to process personal data only in accordance with our instructions and applicable law, and to implement appropriate security measures. Where a third party acts as an independent controller, its own privacy policy may also apply.

6. Data transfer to third countries

Some of our service providers or partners may be located outside the UK, including in countries that may not provide the same level of data protection as the UK. Where personal data is transferred internationally, we take appropriate safeguards to protect it, which may include:

• the UK International Data Transfer Agreement (IDTA);
• the UK Addendum to the EU Standard Contractual Clauses;
• an adequacy regulation or decision recognised under UK law;
• additional technical and organisational measures where appropriate.

Where required, we assess the risks associated with international transfers and implement supplementary measures to help ensure that your personal data remains protected.

7. Storage duration

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, reporting, and contractual requirements.

In determining retention periods, we consider:

• the nature and sensitivity of the data;
• the purposes for which we process it;
• the legal basis for processing;
• applicable limitation periods and regulatory obligations;
• whether the data is needed for dispute resolution or defence of legal claims.

When personal data is no longer required, we will securely delete, anonymise, or otherwise irreversibly de-identify it.

8. User rights

Under UK data protection law, you may have the following rights in relation to your personal data:

• Access: to request a copy of the personal data we hold about you;
• Rectification: to request correction of inaccurate or incomplete data;
• Erasure: to request deletion of your personal data in certain circumstances;
• Restriction: to request that we limit how we use your personal data in certain circumstances;
• Data portability: to receive certain data in a structured, commonly used, machine-readable format and to have it transmitted to another controller where technically feasible;
• Objection: to object to processing based on legitimate interests and to object at any time to direct marketing;
• Automated decision-making: to not be subject to decisions based solely on automated processing where such rights apply.

These rights are not absolute and may be subject to legal exceptions and limitations. To exercise any of your rights, please contact us using the details below. We may need to verify your identity before responding.

9. Withdrawal of consent

Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before your withdrawal.

You can withdraw consent by contacting us at [email protected] or by using any unsubscribe or preference-management option provided in our communications, where available.

10. Right to complain

If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue.

You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Website: https://ico.org.uk/
Telephone: 0303 123 1113

11. Data security

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include access controls, encryption where appropriate, secure storage, staff confidentiality obligations, and regular review of security practices.

However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.

12. Contact information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:

Northbridge Search Partners
Northbridge Search Partners, 14 Farringdon Road, London EC1M 3HN, UK
Email: [email protected]
Phone: +44 20 7946 8372

13. Changes to privacy policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updated version will be posted on our website with a revised effective date where appropriate.

We encourage you to review this Privacy Policy periodically to stay informed about how Northbridge Search Partners processes personal data.

Last updated: July 2026