1. Introduction and Company Information

This Privacy Policy explains how Northbridge Creative Productions Ltd collects, uses, stores, shares, and protects personal data when you interact with us, including when you contact us, use our services, visit our website, attend our studio, or otherwise engage with our photography and production services.

Northbridge Creative Productions Ltd is the data controller for the personal data described in this Privacy Policy.

This Privacy Policy is intended to provide clear information about our data handling practices in connection with our photography-production-studio business, including portrait sessions, commercial shoots, event coverage, creative production, client consultations, editing, delivery of media, and related services.

2. Data Collection and Processing

We may collect and process the following categories of personal data:

We collect personal data directly from you, from your employer or organisation if you engage us on their behalf, from third-party service providers, from our website, from social media platforms where you interact with us, and from publicly available sources where lawful and appropriate.

Where we photograph events, productions, or public-facing activities, personal data may also be captured incidentally in images or recordings. We seek to process such data fairly and in accordance with applicable law.

3. Purpose of Data Processing

We process personal data for the following purposes:

4. Legal Basis for Processing

We only process personal data where we have a lawful basis to do so. Depending on the context, our legal bases may include:

Where we process special category data, we will only do so where an additional lawful condition applies under applicable law.

5. Data Sharing and Third Parties

We may share personal data with trusted third parties where necessary for the purposes described in this Privacy Policy. These may include:

We require third parties to respect the security of personal data and to process it in accordance with applicable law and our instructions where they act as processors. Some third parties may act as independent controllers and will be responsible for their own privacy practices.

6. Data Transfer to Third Countries

Where personal data is transferred outside the United Kingdom or the European Economic Area, we will take appropriate steps to ensure that the transfer is lawful and that your data is protected. These steps may include:

If you would like further information about international data transfers, you may contact us using the details below.

7. Storage Duration

We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, contractual, insurance, and reporting requirements.

When personal data is no longer required, we will delete, anonymise, or securely archive it in accordance with our retention practices and legal obligations.

8. User Rights

Subject to applicable law, you may have the following rights in relation to your personal data:

You may also have the right not to be subject to certain automated decisions, where applicable. These rights may be subject to legal exemptions and limitations.

To exercise any of your rights, please contact us using the information provided in this Privacy Policy. We may need to verify your identity before responding.

9. Withdrawal of Consent

Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

If you withdraw consent, we may not be able to provide certain services or continue particular activities, such as specific marketing communications or the use of images for promotional purposes where consent is required.

10. Right to Complain

If you are concerned about how we handle your personal data, please contact us first so that we can try to resolve the issue.

You may also have the right to lodge a complaint with the relevant data protection authority in your country of residence, place of work, or where you believe an infringement has occurred. In the United Kingdom, this is generally the Information Commissioner’s Office (ICO).

11. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures may include:

While we work to protect your data, no system can be guaranteed completely secure. You should take care when transmitting information to us electronically.

12. Contact Information

If you have any questions about this Privacy Policy or how we process your personal data, please contact:

13. Changes to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. Any updated version will be posted with a revised effective date where appropriate.

We encourage you to review this Privacy Policy periodically to stay informed about how Northbridge Creative Productions Ltd processes personal data.

8/31/2026 Home