1. Introduction and company information
This Privacy Policy explains how Northstar Podcast Production Ltd collects, uses, stores, shares, and protects personal data in connection with its podcast production business and related services. It applies to personal data collected through our website, email communications, telephone calls, contract enquiries, client work, supplier relationships, and any other interaction with us.
Data controller: Northstar Podcast Production Ltd
Registered / business address: Northstar Podcast Production, 14a St John's Street, Manchester, M3 4EA, United Kingdom
Email: [email protected]
Phone: +44 161 924 7583
For the purposes of this Privacy Policy, references to “we”, “us”, and “our” mean Northstar Podcast Production Ltd.
2. Data collection and processing
We may collect and process the following categories of personal data:
- Identity data: name, job title, company name, and similar identifiers.
- Contact data: email address, telephone number, postal address, and communication preferences.
- Client and project data: project briefs, podcast concepts, scripts, audio files, guest details, production notes, feedback, and communications relevant to our services.
- Financial and billing data: invoicing details, payment records, and transactional information.
- Technical data: IP address, browser type, device identifiers, log data, and website usage information.
- Marketing and communications data: preferences for receiving marketing, correspondence records, and responses to our communications.
- Special category data: in limited circumstances, personal data that may reveal sensitive information may be processed if you voluntarily provide it to us or if it is necessary for a specific project and legally permitted.
We collect personal data directly from you, from your organisation, from our website and other digital services, from publicly available sources, and from third parties such as service providers, professional advisers, and business partners where lawful to do so.
We process personal data using both automated and manual means. In connection with podcast production, this may include recording, editing, storing, transcribing, transferring, publishing, and archiving audio or related materials that contain personal data.
3. Purpose of data processing
We process personal data for the following purposes:
- to respond to enquiries and provide quotations;
- to enter into and perform contracts with clients, guests, suppliers, and contractors;
- to plan, produce, edit, manage, and deliver podcast production services;
- to communicate with clients, guests, and collaborators;
- to manage billing, payments, invoices, and accounts;
- to maintain records and administer our business operations;
- to improve our services, website, and customer experience;
- to send service-related notices and, where permitted, marketing communications;
- to comply with legal, regulatory, accounting, and tax obligations;
- to protect our rights, property, and safety, and those of others;
- to detect, prevent, and investigate fraud, misuse, and security incidents.
4. Legal basis for processing
We only process personal data where we have a lawful basis to do so. Depending on the context, our legal bases include:
- Contract: where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
- Legal obligation: where processing is necessary for compliance with legal or regulatory requirements.
- Legitimate interests: where processing is necessary for our legitimate business interests, provided your interests and fundamental rights do not override those interests.
- Consent: where you have given clear consent for a specific purpose, such as certain marketing activities or the use of optional cookies or promotional materials, where applicable.
- Vital interests: in rare cases where processing is necessary to protect someone’s life.
- Public task or official authority: where applicable under relevant law.
Where we rely on legitimate interests, these may include operating and improving our podcast production services, maintaining business records, securing our systems, managing client relationships, and promoting our services.
5. Data sharing and third parties
We may share personal data with the following categories of recipients where necessary and lawful:
- IT, cloud hosting, file storage, backup, and cybersecurity providers;
- audio editing, transcription, and production tools or vendors;
- payment processors, banks, accountants, and professional advisers;
- guest booking, scheduling, and communications platforms;
- website analytics and email service providers;
- subcontractors, freelancers, and contractors assisting with podcast production;
- legal, insurance, and compliance advisers;
- regulatory, tax, law enforcement, or other authorities where required by law;
- business partners and clients where necessary to deliver agreed services.
We require third parties to handle personal data in accordance with applicable data protection requirements and only for specified purposes. We do not sell personal data.
6. Data transfer to third countries
Some of our service providers, contractors, or platforms may process personal data outside the United Kingdom. Where personal data is transferred internationally, we take appropriate steps to protect it in accordance with applicable law. These steps may include:
- using adequacy regulations or decisions where available;
- entering into standard contractual clauses or equivalent safeguards;
- implementing supplementary technical and organisational measures where appropriate;
- assessing the risks associated with the transfer and the recipient’s security controls.
By using our services or communicating with us, you acknowledge that some processing may occur outside your country of residence, subject to applicable legal safeguards.
7. Storage duration
We retain personal data only for as long as necessary for the purposes for which it was collected, including for legal, accounting, tax, and reporting obligations. Retention periods may vary depending on the type of data and the context of processing.
- Client and project records: retained for the duration of the relationship and for a reasonable period thereafter to manage follow-up, disputes, and recordkeeping.
- Financial records: retained for the period required by applicable law and standard accounting practice.
- Marketing data: retained until you unsubscribe, object, or ask us to stop using it, subject to any necessary suppression records.
- Technical and security logs: retained for a limited period, unless required longer for security, legal, or operational reasons.
When personal data is no longer required, we will securely delete, anonymise, or otherwise irreversibly de-identify it where appropriate.
8. User rights (access, rectification, erasure, restriction, data portability, objection)
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: to request confirmation of whether we process your personal data and to obtain a copy of it.
- Rectification: to request correction of inaccurate or incomplete personal data.
- Erasure: to request deletion of your personal data in certain circumstances.
- Restriction: to request that we restrict the processing of your personal data in certain circumstances.
- Data portability: to request that we provide certain data to you or another controller in a structured, commonly used, machine-readable format, where applicable.
- Objection: to object to processing based on legitimate interests or to direct marketing at any time.
To exercise any of these rights, please contact us using the details in the Contact information section. We may need to verify your identity before responding. In some cases, we may be entitled or required to refuse or limit a request under applicable law.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
You may withdraw consent by contacting us at [email protected] or by using any unsubscribe or preference-management option we provide. If you withdraw consent, we may still process your personal data where we have another lawful basis to do so.
10. Right to complain
If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the matter.
You also have the right to lodge a complaint with the relevant supervisory authority. In the United Kingdom, this is generally the Information Commissioner’s Office (ICO).
ICO website: https://ico.org.uk/
11. Data security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures may include:
- access controls and user authentication;
- secure password practices and, where appropriate, multi-factor authentication;
- encrypted transmission and secure storage where appropriate;
- backup and disaster recovery procedures;
- confidentiality obligations for staff, contractors, and relevant third parties;
- regular review of systems, processes, and security arrangements.
While we work to protect personal data, no method of transmission or storage is completely secure. We cannot guarantee absolute security, but we will act promptly and in accordance with applicable law if a data incident occurs.
12. Contact information
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:
Northstar Podcast Production Ltd
Northstar Podcast Production, 14a St John's Street, Manchester, M3 4EA, United Kingdom
Email: [email protected]
Phone: +44 161 924 7583
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or operational needs. Any updated version will be posted on our website or otherwise made available to you as appropriate.
Please review this Privacy Policy periodically to stay informed about how Northstar Podcast Production Ltd processes personal data. Continued use of our services after an update constitutes acknowledgement of the revised policy to the extent permitted by law.