Privacy Policy of Northbridge Production Facilities Ltd

1. Introduction and company information

This Privacy Policy explains how Northbridge Production Facilities Ltd collects, uses, stores, shares, and protects personal data in connection with its production-facility operations, including site access, visitor management, contractor engagement, supplier liaison, safety and security management, administrative activities, and communications with customers, prospects, and other stakeholders.

The data controller is Northbridge Production Facilities Ltd, of Northbridge Production Facilities, Unit 4, Riverside Industrial Estate, River Road, Barking, London IG11 0EA, United Kingdom. If you have any questions about this Privacy Policy or our data handling practices, you can contact us using the details set out below.

We are committed to handling personal data lawfully, fairly, and transparently, and to applying appropriate technical and organisational measures to protect personal information.

2. Data collection and processing

We may collect and process the following categories of personal data where necessary for our business activities:

  • Identity data: name, title, job role, employer, and identification details.
  • Contact data: address, email address, telephone number, and other communication details.
  • Business and contractual data: company affiliation, purchase orders, service details, contract records, invoices, and payment-related information.
  • Site access and security data: visitor logs, vehicle registration details, CCTV images where used, access badge information, and security incident records.
  • Operational and compliance data: health and safety information, training records, incident reports, risk assessments, and audit-related information.
  • Technical data: IP address, browser type, device information, and usage data when you interact with our website or digital services.
  • Communication data: correspondence and records of enquiries, complaints, and other interactions with us.

We may obtain personal data directly from you, from your employer or organisation, from our clients, suppliers, contractors, or from publicly available sources where appropriate and lawful.

We may also process special category data or criminal offence data only where permitted by applicable law and where necessary, for example to meet health and safety obligations or site security requirements.

3. Purpose of data processing

We process personal data for the following purposes:

  • to manage business relationships with customers, suppliers, contractors, and visitors;
  • to provide production-facility services and carry out contractual obligations;
  • to manage site access, security, and visitor control;
  • to maintain health, safety, and operational compliance at our facilities;
  • to communicate with you and respond to enquiries or complaints;
  • to administer accounts, billing, payments, and records;
  • to comply with legal and regulatory obligations;
  • to detect, investigate, and prevent fraud, misconduct, unauthorised access, and other security incidents;
  • to improve our services, systems, processes, and security; and
  • where permitted, to send business-related updates and marketing communications.

4. Legal basis for processing

We will process personal data only where we have a valid legal basis. Depending on the context, our legal bases may include:

  • Performance of a contract: where processing is necessary to enter into or perform a contract with you or your organisation;
  • Compliance with a legal obligation: where processing is required to meet statutory, regulatory, tax, employment, health and safety, or security obligations;
  • Legitimate interests: where processing is necessary for our legitimate business interests, such as operating our production facilities, protecting assets, ensuring security, managing risk, and improving services, provided those interests are not overridden by your rights and freedoms;
  • Consent: where we rely on your consent, for example for certain optional marketing activities or where required for specific processing;
  • Vital interests: in limited circumstances where processing is necessary to protect someone’s life or physical safety; and
  • Public interest or other applicable bases: where permitted by law and relevant to our activities.

Where we process special category data or criminal offence data, we will do so only where an additional lawful condition applies under applicable law.

5. Data sharing and third parties

We may share personal data with trusted third parties where necessary and lawful, including:

  • service providers supporting IT, hosting, cloud storage, communications, security, maintenance, and administration;
  • professional advisers such as lawyers, accountants, auditors, insurers, and consultants;
  • clients, suppliers, contractors, logistics providers, and business partners involved in our operations;
  • security providers, access control providers, and CCTV monitoring service providers;
  • regulators, law enforcement agencies, courts, and other public authorities where required or permitted by law;
  • payment processors, banking partners, and invoicing platforms; and
  • any other third party where you have instructed us to share data or where disclosure is otherwise lawful.

We require third parties to handle personal data securely and in accordance with applicable legal obligations. They are permitted to use personal data only for specified purposes and under appropriate contractual safeguards.

6. Data transfer to third countries

Some of our service providers or systems may be located outside the United Kingdom and the European Economic Area. Where personal data is transferred internationally, we will take steps to ensure that appropriate safeguards are in place and that the transfer is carried out in accordance with applicable data protection requirements.

These safeguards may include adequacy regulations, standard contractual clauses, international data transfer agreements, or other legally recognised mechanisms. Where necessary, we will also conduct assessments to evaluate the level of protection available in the destination country.

7. Storage duration

We will retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, regulatory, insurance, and reporting requirements.

Retention periods may vary depending on the type of data and the context in which it is processed. In determining retention, we consider factors such as:

  • the duration of our relationship with you or your organisation;
  • legal limitation periods and record-keeping obligations;
  • health and safety, security, and audit requirements;
  • the need to resolve disputes, claims, or investigations; and
  • the sensitivity and volume of the personal data.

When personal data is no longer required, we will delete it, anonymise it, or securely archive it in accordance with our retention procedures.

8. User rights

Subject to applicable law, you may have the following rights in relation to your personal data:

  • Access: to request confirmation of whether we process your data and to obtain a copy of that data;
  • Rectification: to request correction of inaccurate or incomplete personal data;
  • Erasure: to request deletion of your personal data in certain circumstances;
  • Restriction: to request that we limit the processing of your personal data in certain circumstances;
  • Data portability: to request that we provide certain data in a structured, commonly used, machine-readable format and, where applicable, transfer it to another controller;
  • Objection: to object to processing based on legitimate interests and to object to direct marketing at any time.

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before responding. Some rights may not apply in all circumstances, including where we must retain data to comply with legal obligations or defend legal claims.

9. Withdrawal of consent

Where we rely on your consent to process personal data, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal. If you withdraw consent, we may be unable to provide certain optional services or communications that depend on that consent.

You can withdraw consent by contacting us at the details provided below, or by using any unsubscribe or preference-management option we make available.

10. Right to complain

If you have concerns about how we handle your personal data, please contact us first so we can try to resolve the matter promptly.

You also have the right to complain to the relevant data protection supervisory authority, including the Information Commissioner’s Office (ICO) in the United Kingdom, or any other authority that may apply depending on your location or the circumstances of the processing.

11. Data security

We use appropriate technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, and destruction. These measures may include access controls, staff confidentiality obligations, physical security, network protections, backup procedures, and incident response processes.

While we take reasonable steps to protect personal data, no method of transmission over the internet or method of electronic storage is entirely secure. We therefore cannot guarantee absolute security, but we continuously review and improve our safeguards.

12. Contact information

If you have any questions, requests, or concerns regarding this Privacy Policy or our processing of your personal data, please contact:

Northbridge Production Facilities Ltd
Northbridge Production Facilities, Unit 4, Riverside Industrial Estate, River Road, Barking, London IG11 0EA, United Kingdom
Email: [email protected]
Phone: +44 20 8471 6395

13. Changes to privacy policy

We may update this Privacy Policy from time to time to reflect changes in our operations, legal requirements, or data protection practices. Any updated version will be effective when posted or otherwise communicated to you, unless a different effective date is stated.

We encourage you to review this Privacy Policy periodically to stay informed about how Northbridge Production Facilities Ltd processes personal data.

8/24/2026 Home