This Privacy Policy explains how Northlight Media Production Ltd collects, uses, stores, shares, and protects personal data in connection with its media-production activities, website, communications, services, and related business operations.
1. Introduction and Company Information
Northlight Media Production Ltd is the data controller responsible for the processing of personal data described in this Privacy Policy, unless stated otherwise.
- Company name: Northlight Media Production Ltd
- Address: Northlight Media, 24-26 White Lion Street, Islington, London N1 9PD, United Kingdom
- Email: [email protected]
- Phone: +44 20 7837 4625
This Policy applies to personal data collected from clients, prospective clients, suppliers, freelancers, cast, crew, visitors to our website, event attendees, individuals who contact us, and any other person whose personal data we process in the course of our business.
2. Data Collection and Processing
Northlight Media Production Ltd may collect and process the following categories of personal data:
- Identity data: name, professional title, employer, role, and related identifiers.
- Contact data: email address, postal address, telephone number, and other communication details.
- Professional data: CVs, portfolios, showreels, experience, qualifications, skills, availability, and references.
- Contract and transaction data: payment details, billing information, contracts, purchase orders, invoices, and service records.
- Communications data: correspondence, meeting notes, enquiry details, feedback, and preferences.
- Technical data: IP address, browser type, device identifiers, operating system, access times, and website usage information.
- Marketing data: communication preferences, subscription status, and engagement with our content.
- Visual and audio data: photographs, video, voice recordings, and other media captured during production, events, or promotional activities, where applicable.
We collect data directly from you, from our website and digital tools, from clients or partners, from public sources where lawful, and from third parties such as recruitment providers, production partners, or service providers.
We may also process special category data or sensitive information only where necessary and where permitted by applicable law, for example in relation to access requirements, health and safety, or equal opportunities, subject to appropriate safeguards.
3. Purpose of Data Processing
Northlight Media Production Ltd processes personal data for the following purposes:
- to provide media-production, creative, and related services;
- to manage client, supplier, and contractor relationships;
- to respond to enquiries and communicate with you;
- to prepare quotations, proposals, contracts, and invoices;
- to recruit, onboard, and administer freelancers, cast, crew, and other personnel;
- to conduct and document production activities, including filming, photography, editing, and post-production;
- to manage websites, analytics, security, and technical operations;
- to send marketing communications where permitted by law and where consent or another lawful basis applies;
- to comply with legal, regulatory, accounting, tax, and reporting obligations;
- to protect our rights, property, staff, contractors, and business operations;
- to establish, exercise, or defend legal claims.
4. Legal Basis for Processing
We only process personal data where we have a lawful basis to do so. Depending on the context, the legal basis may include:
- Contract: processing necessary to enter into or perform a contract with you;
- Legitimate interests: processing necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms;
- Consent: processing where you have given clear consent, which you may withdraw at any time;
- Legal obligation: processing necessary to comply with legal or regulatory requirements;
- Vital interests: processing necessary to protect someone’s vital interests in exceptional circumstances;
- Public interest or official authority: where applicable under relevant law;
- Employment and similar obligations: where relevant to personnel or contractor administration under applicable law.
Where we rely on legitimate interests, these may include running our media-production business, protecting against fraud, maintaining security, improving services, managing operations, and preserving evidence for legal or contractual purposes.
5. Data Sharing and Third Parties
Northlight Media Production Ltd may share personal data with the following categories of recipients where necessary and lawful:
- clients and project stakeholders;
- freelancers, contractors, cast, crew, and production personnel;
- service providers such as hosting, cloud storage, IT support, analytics, communication, finance, and payment processors;
- professional advisers including lawyers, accountants, insurers, and auditors;
- regulators, law enforcement, courts, or other public authorities where required;
- third-party production, distribution, or promotional partners;
- recruitment and talent sourcing providers;
- any other third party where you have instructed or consented to such sharing.
We require third parties who process personal data on our behalf to implement appropriate security measures and to process data only in accordance with our instructions and applicable law.
6. Data Transfer to Third Countries
As a media-production business, we may transfer personal data to countries outside the United Kingdom where necessary for service delivery, collaboration, hosting, production support, or storage.
Where such transfers occur, Northlight Media Production Ltd will take appropriate steps to ensure that personal data remains protected in accordance with applicable law. These steps may include:
- transferring data only to countries recognised as providing adequate protection;
- using approved contractual safeguards;
- implementing supplementary technical and organisational measures where needed;
- conducting risk assessments for international data transfers where required.
By using our services or communicating with us, you acknowledge that your data may be processed in jurisdictions outside your own, subject to appropriate protections.
7. Storage Duration
Northlight Media Production Ltd retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, tax, insurance, regulatory, and dispute-resolution requirements.
- Client and contract records: typically retained for the duration of the relationship and for a reasonable period thereafter.
- Financial and accounting records: retained for the period required by applicable law.
- Recruitment and freelancer records: retained for as long as necessary for engagement, administration, or lawful business needs.
- Marketing records: retained until you unsubscribe, object, or the data is no longer needed.
- Website and technical logs: retained for a limited period for security, diagnostics, and analytics purposes.
- Media files and production materials: retained as required by project needs, contractual obligations, archiving, legal requirements, or legitimate business interests.
When personal data is no longer required, we will delete, anonymise, or securely destroy it.
8. User Rights
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: to request confirmation of whether we process your personal data and to obtain a copy of it;
- Rectification: to request correction of inaccurate or incomplete data;
- Erasure: to request deletion of your data in certain circumstances;
- Restriction: to request limitation of processing in certain circumstances;
- Data portability: to receive certain data in a structured, commonly used, machine-readable format and to request transfer where technically feasible;
- Objection: to object to processing based on legitimate interests or for direct marketing purposes;
- Automated decision-making: to request information about any solely automated decision-making, where applicable.
To exercise your rights, please contact Northlight Media Production Ltd using the details below. We may need to verify your identity before responding. We will respond within a reasonable timeframe and in accordance with applicable law.
9. Withdrawal of Consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
You may withdraw consent by contacting us at [email protected] or by using any unsubscribe or preference-management options provided in our communications.
10. Right to Complain
If you believe that Northlight Media Production Ltd has processed your personal data unlawfully or in a way that infringes applicable data protection law, you have the right to lodge a complaint with the relevant supervisory authority.
We encourage you to contact us first so that we can try to resolve your concerns directly. However, this does not affect your right to complain to a regulator at any time.
11. Data Security
Northlight Media Production Ltd takes the security of personal data seriously and implements appropriate technical and organisational measures designed to protect data against unauthorised access, alteration, disclosure, loss, or destruction.
- access controls and authentication measures;
- secure storage and encrypted transmission where appropriate;
- role-based access to sensitive information;
- staff and contractor confidentiality obligations;
- regular review of systems, processes, and security practices;
- backup, disaster recovery, and incident response procedures.
While we take reasonable steps to protect personal data, no method of transmission or storage is completely secure. We cannot guarantee absolute security, but we will act promptly and appropriately in the event of a suspected or actual data incident.
12. Contact Information
If you have any questions about this Privacy Policy, your personal data, or how Northlight Media Production Ltd handles information, please contact us using the details below:
- Northlight Media Production Ltd
- Address: Northlight Media, 24-26 White Lion Street, Islington, London N1 9PD, United Kingdom
- Email: [email protected]
- Phone: +44 20 7837 4625
13. Changes to Privacy Policy
Northlight Media Production Ltd may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, technology, or business operations.
Any updated version will be effective when posted unless stated otherwise. We encourage you to review this Policy periodically to stay informed about how we process personal data.
If changes are material, we may take additional steps to notify you where appropriate.