Privacy Policy

Northbridge Programmatic Media is committed to protecting your privacy and handling your personal data in a lawful, fair, and transparent manner in accordance with applicable UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Introduction and company information

This Privacy Policy explains how Northbridge Programmatic Media collects, uses, stores, shares, and protects personal data when you visit our website, interact with our services, contact us, or otherwise engage with us in connection with our programmatic-advertising business.

Data controller: Northbridge Programmatic Media

Registered/business address: Northbridge Programmatic Media, 27 Finsbury Square, London EC2A 1DS, United Kingdom

Email: [email protected]

Phone: +44 20 7946 5831

2. Data collection and processing

We may collect and process the following categories of personal data:

• Identity data: name, title, company name, job title, and similar identifiers.
• Contact data: email address, telephone number, postal address, and business contact details.
• Technical data: IP address, browser type and version, device identifiers, operating system, time zone setting, language preferences, and other technology on the devices you use to access our services.
• Usage data: information about how you use our website, services, and communications, including pages viewed, links clicked, session duration, and interaction patterns.
• Marketing and advertising data: advertising identifiers, cookie data, audience segment information, campaign interaction data, and conversion-related information.
• Communication data: records of correspondence with us, including enquiries, feedback, and support requests.
• Business relationship data: information relating to contracts, proposals, account management, billing, and service delivery.

We may collect personal data directly from you, automatically through cookies and similar technologies, and from third parties such as analytics providers, advertising partners, data suppliers, and publicly available sources where permitted by law.

Because we operate in programmatic advertising, we may process data to support ad delivery, measurement, attribution, frequency capping, audience segmentation, fraud prevention, and campaign optimisation. Where required, we will obtain valid consent for cookies and similar technologies used for advertising and analytics.

3. Purpose of data processing

We process personal data for the following purposes:

• to provide and operate our website and services;
• to manage business relationships and respond to enquiries;
• to deliver, optimise, and measure advertising campaigns;
• to personalise content and advertising where permitted;
• to analyse website and campaign performance;
• to detect and prevent fraud, abuse, and security incidents;
• to comply with legal and regulatory obligations;
• to maintain records, administer contracts, and manage billing;
• to send service communications and, where permitted, marketing communications;
• to establish, exercise, or defend legal claims.

4. Legal basis for processing

We will only process personal data where we have a lawful basis under the UK GDPR. Depending on the context, our legal bases may include:

• Consent: where you have given clear consent, for example for certain cookies, marketing communications, or specific advertising uses.
• Contract: where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
• Legal obligation: where processing is necessary to comply with applicable law.
• Legitimate interests: where processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests. This may include service improvement, fraud prevention, security, business administration, and certain B2B communications.

Where we rely on legitimate interests, we carry out a balancing test to ensure that our interests are not overridden by your rights and freedoms.

5. Data sharing and third parties

We may share personal data with the following categories of recipients where necessary and lawful:

• Service providers: hosting providers, analytics providers, customer relationship management tools, email service providers, IT support, and security vendors.
• Advertising and measurement partners: ad exchanges, demand-side platforms, supply-side platforms, verification providers, attribution providers, and audience measurement partners.
• Professional advisers: lawyers, accountants, auditors, insurers, and other professional advisers.
• Regulators and authorities: where required by law, court order, or regulatory request.
• Business counterparties: clients, publishers, agencies, and other parties involved in the delivery of our services.

We require third parties that process personal data on our behalf to do so under appropriate contractual safeguards and in compliance with applicable data protection laws. We do not sell personal data in the traditional sense, but certain advertising technologies may involve disclosures or sharing that could be considered a “sale” or “sharing” under other jurisdictions; where relevant, we will provide appropriate notices and choices.

6. Data transfer to third countries

Some of our service providers and advertising partners may be located outside the United Kingdom, including in countries that may not provide the same level of data protection as the UK. Where we transfer personal data internationally, we will ensure appropriate safeguards are in place, such as:

• the UK International Data Transfer Agreement (IDTA);
• the UK Addendum to the EU Standard Contractual Clauses;
• an adequacy regulation or decision, where applicable;
• other lawful transfer mechanisms permitted under UK data protection law.

Where required, we will also assess whether additional technical and organisational measures are needed to protect your personal data.

7. Storage duration

We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, reporting, and contractual requirements.

The retention period depends on the type of data and the purpose of processing. In general:

• business and contract records are retained for the duration of the relationship and for a reasonable period thereafter;
• support and correspondence records are retained as needed to manage the enquiry and for record-keeping purposes;
• technical and analytics data are retained for limited periods consistent with operational needs and cookie settings;
• marketing data is retained until you opt out, withdraw consent, or the data is no longer needed;
• legal and compliance records may be retained for longer where required by law.

When personal data is no longer required, we will securely delete, anonymise, or irreversibly aggregate it where appropriate.

8. User rights

Under UK data protection law, you may have the following rights in relation to your personal data:

• Access: to request confirmation of whether we process your personal data and obtain a copy of it.
• Rectification: to request correction of inaccurate or incomplete personal data.
• Erasure: to request deletion of your personal data in certain circumstances.
• Restriction: to request that we restrict the processing of your personal data in certain circumstances.
• Data portability: to receive certain personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.
• Objection: to object to processing based on legitimate interests and to object at any time to direct marketing.

These rights are subject to certain conditions and exemptions under applicable law. If you wish to exercise any of these rights, please contact us using the details below.

9. Withdrawal of consent

Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

You may withdraw consent by using the relevant preference tools, cookie settings, unsubscribe links, or by contacting us directly. If you withdraw consent for certain cookies or advertising technologies, some features of our website or services may not function as intended.

10. Right to complain

If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue.

You also have the right to lodge a complaint with the UK data protection supervisory authority:

Information Commissioner’s Office (ICO)
Website: https://ico.org.uk

We would appreciate the opportunity to address your concerns before you contact the ICO, but you are not required to do so.

11. Data security

We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include:

• access controls and role-based permissions;
• encryption in transit and, where appropriate, at rest;
• network and endpoint security measures;
• monitoring and logging of systems;
• staff confidentiality obligations and training;
• regular review of security practices and vendor controls.

However, no system can be guaranteed to be completely secure. You should also take care to protect your own information, including using strong passwords and keeping your devices secure.

12. Contact information

If you have any questions about this Privacy Policy or our use of your personal data, or if you wish to exercise your rights, please contact:

Northbridge Programmatic Media
27 Finsbury Square
London EC2A 1DS
United Kingdom

Email: [email protected]
Phone: +44 20 7946 5831

13. Changes to privacy policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations. Any updates will be posted on this page with a revised effective date where appropriate.

We encourage you to review this Privacy Policy periodically to stay informed about how Northbridge Programmatic Media protects your personal data.