This Privacy Policy explains how Northstar FrameWorks Media Studio Ltd (“we”, “us”, “our”) collects, uses, stores, shares, and protects personal data when you interact with us, visit our website, contact us, or use our media-creation and related services.
1. Introduction and Company Information
Data Controller: Northstar FrameWorks Media Studio Ltd
Registered/Business Address: Northstar FrameWorks, 18 Redcliffe Road, MediaCityUK, Salford, M50 2QD, United Kingdom
Email: [email protected]
Telephone: +44 161 874 5927
Northstar FrameWorks Media Studio Ltd is a media-creation studio providing creative, production, post-production, content development, and related services. This Privacy Policy applies to personal data we process in the course of our business activities, including client communications, project delivery, marketing, website administration, and business operations.
2. Data Collection and Processing
We may collect and process the following categories of personal data, depending on how you interact with us:
- Identity data: name, job title, company name, and role.
- Contact data: email address, telephone number, postal address, and communication preferences.
- Project and service data: briefing information, creative assets, content submissions, feedback, project correspondence, and contractual details.
- Technical data: IP address, browser type and version, device information, operating system, time zone, log data, and website usage data.
- Financial and transactional data: billing information, payment records, invoicing details, and transaction history.
- Marketing and communications data: preferences regarding newsletters, promotions, service updates, and responses to our communications.
- Media and content data: images, audio, video, voice recordings, or other content provided for or created during the delivery of our services.
We may collect personal data directly from you, through our website, by email, telephone, meetings, project collaboration tools, third-party service providers, and publicly available sources where relevant and lawful.
We may also process personal data that is necessary to deliver our media services, including client-approved creative materials, production notes, and project collaboration information.
3. Purpose of Data Processing
We process personal data for the following purposes:
- to respond to enquiries and communicate with you;
- to provide, manage, and deliver our media-creation and studio services;
- to prepare quotations, proposals, contracts, and invoices;
- to manage projects, workflows, approvals, and client relationships;
- to maintain and improve our website, systems, and services;
- to carry out accounting, administration, audit, and record-keeping;
- to send service updates, notices, and marketing communications where permitted;
- to protect our business, staff, clients, and systems from fraud, misuse, or security threats;
- to comply with legal and regulatory obligations; and
- to establish, exercise, or defend legal claims.
4. Legal Basis for Processing
We process personal data only where we have a valid legal basis to do so. Depending on the context, our legal bases may include:
- Performance of a contract: where processing is necessary to provide services or fulfil contractual obligations.
- Legitimate interests: where processing is necessary for our legitimate business interests, such as service delivery, communications, administration, security, and business development, provided those interests are not overridden by your rights and freedoms.
- Consent: where you have given clear consent, for example for certain marketing communications or optional cookies, and you may withdraw that consent at any time.
- Legal obligation: where we must process data to comply with applicable law, tax rules, accounting requirements, or lawful requests by authorities.
- Vital interests: in rare circumstances where processing is necessary to protect someone’s life or physical safety.
5. Data Sharing and Third Parties
We may share personal data with trusted third parties where necessary for the purposes described in this Privacy Policy. These may include:
- IT hosting, cloud storage, and website service providers;
- email, communication, and collaboration platform providers;
- professional advisers such as lawyers, accountants, and insurers;
- payment processors, banking partners, and invoicing services;
- production partners, contractors, freelancers, and technical specialists supporting our projects;
- analytics, security, and marketing service providers;
- regulators, courts, law enforcement agencies, or other authorities where required by law.
We require third parties to handle personal data securely and in accordance with applicable data protection requirements. Where third parties act on our behalf, they are typically restricted from using personal data for their own purposes.
6. Data Transfer to Third Countries
Some of our service providers, contractors, or systems may be located outside the United Kingdom or may process data in countries outside the UK. Where such transfers occur, we take appropriate measures to protect personal data, which may include:
- using transfer mechanisms recognised under applicable law;
- relying on adequacy regulations or adequacy decisions where available;
- implementing contractual safeguards and data protection clauses;
- conducting risk assessments and applying supplementary technical or organisational measures where appropriate.
By using our services or communicating with us, you acknowledge that some data may be transferred internationally as described in this Privacy Policy, subject to applicable legal safeguards.
7. Storage Duration
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, tax, contractual, and reporting requirements.
The retention period depends on the nature of the data and the context in which it was collected. For example:
- enquiry data may be kept for a reasonable period to manage communications and follow-up;
- client and project records may be retained for the duration of the relationship and thereafter as required for business, legal, or dispute-resolution purposes;
- financial records may be retained in accordance with applicable accounting and tax obligations;
- marketing data may be retained until you opt out or withdraw consent, where applicable.
When personal data is no longer required, we will delete, anonymise, or securely archive it in accordance with our retention practices and applicable law.
8. User Rights
Subject to applicable law, you may have the following rights regarding your personal data:
- Right of access: to request confirmation of whether we process your data and obtain a copy of it.
- Right to rectification: to request correction of inaccurate or incomplete data.
- Right to erasure: to request deletion of your data in certain circumstances.
- Right to restriction: to request that we restrict processing in certain situations.
- Right to data portability: to receive certain data in a structured, commonly used, machine-readable format and to request transmission to another controller where technically feasible.
- Right to object: to object to processing based on legitimate interests or to direct marketing at any time.
You may also have rights relating to automated decision-making where applicable, although we do not generally make decisions solely by automated means that produce legal or similarly significant effects.
To exercise any of these rights, please contact us using the details in the “Contact Information” section. We may need to verify your identity before responding. We will respond within any timeframe required by applicable law.
9. Withdrawal of Consent
Where we rely on your consent to process personal data, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
If you wish to withdraw consent, please contact us at [email protected]. Where relevant, you may also unsubscribe from marketing communications using the opt-out mechanism provided in our emails.
10. Right to Complain
If you are concerned about how we process your personal data, please contact us first so that we can try to resolve the issue.
You also have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. If you are in the United Kingdom, this is ordinarily the Information Commissioner’s Office (ICO).
11. Data Security
We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include:
- access controls and role-based permissions;
- password protection and authentication measures;
- secure storage and encrypted transmission where appropriate;
- staff confidentiality obligations and training;
- regular system updates, backups, and security monitoring;
- supplier review and data processing controls.
While we take reasonable steps to protect your data, no method of transmission or storage is completely secure. We cannot guarantee absolute security, but we work to maintain a high standard of protection proportionate to the risks involved.
12. Contact Information
If you have any questions about this Privacy Policy, our data practices, or wish to exercise your rights, please contact:
Northstar FrameWorks Media Studio Ltd
Northstar FrameWorks, 18 Redcliffe Road, MediaCityUK, Salford, M50 2QD, United Kingdom
Email: [email protected]
Phone: +44 161 874 5927
13. Changes to Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any changes will take effect when posted on our website or otherwise communicated to you, unless stated otherwise.
We encourage you to review this Privacy Policy periodically to stay informed about how Northstar FrameWorks Media Studio Ltd processes personal data.
Last updated: August 31, 2026