Privacy Policy
This Privacy Policy explains how Northstar Marketing Strategy Ltd collects, uses, stores, shares, and protects personal data when operating its marketing-strategy business. We are committed to handling personal data responsibly and in accordance with applicable privacy and data protection laws.
1. Introduction and company information
This Privacy Policy applies to personal data processed by Northstar Marketing Strategy Ltd in connection with our website, communications, client services, business development activities, and any other interactions you may have with us.
Data controller: Northstar Marketing Strategy Ltd
Registered / trading address: Northstar Strategy, 27 High Street, Milton Keynes, MK11 1AA, United Kingdom
Email: [email protected]
Phone: +44 1908 624 781
For the purposes of applicable data protection law, Northstar Marketing Strategy Ltd acts as the data controller in relation to personal data it determines the purposes and means of processing.
2. Data collection and processing
We may collect and process the following categories of personal data:
- Identity data: name, title, company name, job title, and similar identifiers.
- Contact data: email address, telephone number, postal address, and preferred contact details.
- Business and professional data: role, employer, business interests, project requirements, and communications related to marketing-strategy services.
- Technical data: IP address, browser type, device identifiers, operating system, language settings, log data, and usage data.
- Communication data: emails, enquiry details, meeting notes, feedback, and correspondence.
- Marketing data: preferences, consent records, engagement with our content, and responses to communications.
- Transaction and service data: invoices, payment-related records, contract details, and service history where applicable.
We may collect personal data directly from you, from your employer or organisation, from publicly available sources, from our website and analytics tools, and from third parties such as service providers or business partners where lawful and appropriate.
We process personal data using both automated and manual methods, depending on the nature of the activity and the services provided.
3. Purpose of data processing
We use personal data for the following purposes:
- to respond to enquiries and communicate with you;
- to provide marketing-strategy services and manage client relationships;
- to prepare proposals, agreements, and invoices;
- to manage our website, improve user experience, and analyse performance;
- to send administrative updates and service-related notices;
- to conduct business development, market research, and audience analysis;
- to send marketing communications where permitted by law;
- to maintain records, comply with legal obligations, and resolve disputes;
- to protect our business, systems, users, and stakeholders from fraud, abuse, or security threats.
4. Legal basis for processing
We process personal data only where we have an appropriate legal basis. Depending on the context, this may include:
- Consent: where you have given clear consent, for example for certain marketing communications or non-essential cookies.
- Contract: where processing is necessary to enter into or perform a contract with you.
- Legal obligation: where processing is required to comply with applicable law, regulation, court order, or tax requirements.
- Legitimate interests: where processing is necessary for our legitimate business interests, such as operating and improving our services, managing client relationships, protecting our rights, and promoting our business, provided those interests are not overridden by your rights and freedoms.
Where we rely on legitimate interests, we balance our interests against your privacy rights and take appropriate safeguards.
5. Data sharing and third parties
We may share personal data with trusted third parties where necessary and lawful for the purposes described in this Policy. These may include:
- IT and hosting providers;
- email, communication, and collaboration tools;
- analytics and website performance providers;
- CRM and client management platforms;
- professional advisers such as lawyers, accountants, auditors, and insurers;
- payment processors and invoicing providers;
- subcontractors, freelancers, and other service providers supporting delivery of our services;
- public authorities, regulators, courts, and law enforcement where required by law.
We require third parties to process personal data securely and only for authorised purposes, subject to appropriate contractual and legal safeguards.
We do not sell personal data.
6. Data transfer to third countries
Some of our service providers or recipients may be located outside the United Kingdom and/or the European Economic Area. Where personal data is transferred internationally, we take steps to ensure that appropriate safeguards are in place in accordance with applicable law. These safeguards may include adequacy regulations, standard contractual clauses, or other recognised transfer mechanisms.
Where required, we assess the risks associated with such transfers and implement supplementary measures to protect personal data.
7. Storage duration
We retain personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, tax, contractual, or regulatory requirements.
Retention periods vary depending on the nature of the data and the reason it is processed. In general:
- enquiry and correspondence records are kept for as long as needed to handle the matter and for a reasonable period afterwards;
- client and contractual records are retained for the duration of the relationship and thereafter as required for legal and business purposes;
- marketing preferences are retained until you withdraw consent or object, subject to legal record-keeping needs;
- technical and analytics data are retained for a limited period consistent with their purpose.
When personal data is no longer required, we will delete, anonymise, or securely archive it in accordance with our retention practices.
8. User rights
Depending on applicable law, you may have the following rights in relation to your personal data:
- Access: to request confirmation of whether we process your personal data and to obtain a copy of it.
- Rectification: to request correction of inaccurate or incomplete personal data.
- Erasure: to request deletion of your personal data in certain circumstances.
- Restriction: to request that we limit processing in certain circumstances.
- Data portability: to request your data in a structured, commonly used, machine-readable format where applicable.
- Objection: to object to processing based on legitimate interests or for direct marketing.
These rights are subject to legal conditions and exceptions. We may need to verify your identity before responding to your request.
To exercise any of these rights, please contact us using the details in the Contact Information section below.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
If you withdraw consent, we may no longer be able to provide certain communications or features that depend on that consent.
You can withdraw consent by contacting us at [email protected] or using any available unsubscribe or preference-management mechanism provided in our communications.
10. Right to complain
If you have concerns about how we handle personal data, we encourage you to contact us first so that we can try to resolve the issue.
You may also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. In the United Kingdom, this is the Information Commissioner's Office (ICO).
We would appreciate the opportunity to address your concerns before you escalate them to a regulator.
11. Data security
We use appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include access controls, encryption where appropriate, secure storage, staff confidentiality obligations, regular review of systems, and supplier due diligence.
While we take reasonable steps to safeguard personal data, no method of transmission over the internet or method of electronic storage is completely secure. We therefore cannot guarantee absolute security.
12. Contact information
If you have questions about this Privacy Policy or wish to exercise your rights, please contact:
Northstar Marketing Strategy Ltd
Northstar Strategy, 27 High Street, Milton Keynes, MK11 1AA, United Kingdom
Email: [email protected]
Phone: +44 1908 624 781
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will take reasonable steps to notify you, for example by posting the updated version on our website or by other appropriate means.
The updated Privacy Policy will take effect from the date stated or, if no date is stated, from the date it is published.
Last updated: July 2026