Effective date: 31 August 2026
1. Introduction and company information
This Privacy Policy explains how Northstar Automation Ltd collects, uses, discloses, and protects personal data when it provides marketing-automation services, operates its website, communicates with clients and prospects, and otherwise carries out its business activities.
Northstar Automation Ltd is the data controller responsible for the processing of personal data described in this Privacy Policy.
Company details:
- Company name: Northstar Automation Ltd
- Address: Northstar Automation, 3rd Floor, 12 Hammersmith Grove, Hammersmith, London W6 7AP, United Kingdom
- Email: [email protected]
- Phone: +44 20 7864 5192
This Privacy Policy applies to personal data collected from website visitors, prospective customers, current customers, business contacts, suppliers, and other individuals whose data is processed by Northstar Automation Ltd.
2. Data collection and processing
Northstar Automation Ltd may collect and process the following categories of personal data, depending on the nature of the relationship and interactions with us:
- Identity data: name, job title, company name, and similar identifiers.
- Contact data: email address, telephone number, postal address, and business contact details.
- Communication data: messages, enquiries, meeting notes, correspondence, and feedback.
- Account and service data: login details, user settings, service preferences, subscription information, and records of services provided.
- Technical data: IP address, device information, browser type, operating system, pages viewed, session data, and website interaction data.
- Marketing and analytics data: communication preferences, engagement with emails or campaigns, event participation, and responses to marketing content.
- Transaction and billing data: invoice details, payment status, and related financial records where relevant.
- Special category data: generally not intentionally collected; if exceptionally processed, this will only occur where permitted by law and with appropriate safeguards.
Personal data may be collected directly from you, generated through your use of our website or services, received from your employer or organisation, or obtained from third parties such as business partners, service providers, and publicly available sources where lawful.
Where you provide data relating to other individuals, you must ensure that you have the authority to do so and that they have been informed of this Privacy Policy where required.
3. Purpose of data processing
Northstar Automation Ltd processes personal data for the following purposes:
- to provide, administer, and improve our marketing-automation services;
- to respond to enquiries and communicate with clients, prospects, suppliers, and business contacts;
- to manage customer relationships, accounts, onboarding, and service delivery;
- to analyse website usage, performance, and campaign effectiveness;
- to personalise content and communications based on legitimate business interests and preferences;
- to send marketing communications where permitted by law and subject to your rights and preferences;
- to process payments, invoicing, and financial administration;
- to comply with legal, regulatory, tax, accounting, and record-keeping obligations;
- to detect, prevent, and investigate fraud, abuse, security incidents, or unlawful activity;
- to establish, exercise, or defend legal claims;
- to operate and secure our systems, networks, and premises; and
- to carry out internal business operations, including reporting, audit, and governance.
4. Legal basis for processing
Northstar Automation Ltd will only process personal data where it has a lawful basis to do so. Depending on the context, the legal bases may include:
- Consent: where you have given clear consent for a specific purpose, such as receiving certain marketing communications or cookies where required.
- Performance of a contract: where processing is necessary to enter into or perform a contract with you or your organisation.
- Legal obligation: where processing is necessary to comply with applicable laws and regulations.
- Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include service improvement, fraud prevention, direct business-to-business communications, and network security.
- Vital interests: where necessary to protect someone’s life in rare circumstances.
Where we rely on legitimate interests, we carry out a balancing assessment to ensure that our interests do not unfairly impact your rights.
5. Data sharing and third parties
Northstar Automation Ltd may share personal data with the following categories of recipients where necessary and lawful:
- service providers and processors assisting with hosting, cloud storage, email delivery, analytics, CRM, customer support, IT maintenance, and security;
- professional advisers such as lawyers, accountants, auditors, insurers, and consultants;
- payment processors, invoicing platforms, and financial institutions;
- business partners, subcontractors, and suppliers involved in delivering services;
- regulatory authorities, law enforcement, courts, and other public bodies where required by law or to protect rights and interests;
- prospective buyers or investors in the event of a merger, acquisition, restructuring, or sale of assets, subject to appropriate safeguards.
We require third parties that process personal data on our behalf to protect it and to use it only in accordance with our instructions and applicable law.
6. Data transfer to third countries
Because Northstar Automation Ltd may use service providers or business partners located outside the United Kingdom and/or the European Economic Area, your personal data may be transferred to countries that may not provide the same level of data protection as your home jurisdiction.
Where such transfers occur, we will take appropriate measures to safeguard personal data, which may include:
- using standard contractual clauses or equivalent approved safeguards;
- relying on adequacy decisions where available;
- performing transfer risk assessments where appropriate; and
- implementing technical and organisational measures to protect the data.
You may contact us using the details below if you would like more information about transfer safeguards.
7. Storage duration
Northstar Automation Ltd retains personal data only for as long as necessary for the purposes for which it was collected, including for legal, accounting, tax, reporting, or contractual requirements.
Retention periods vary depending on the type of data and the purpose of processing. In general:
- customer and contract records are kept for the duration of the relationship and for a reasonable period thereafter;
- marketing data is retained until you opt out, withdraw consent, or it is no longer needed;
- financial and accounting records are retained for the period required by applicable law;
- technical and analytics data may be retained for a limited period necessary for security, performance, and reporting;
- records needed for legal claims or compliance may be retained for as long as required to establish, exercise, or defend rights.
When personal data is no longer required, we will delete it or anonymise it where appropriate.
8. User rights
Subject to applicable law, you may have the following rights regarding your personal data:
- Access: to request confirmation of whether we process your personal data and obtain a copy of it.
- Rectification: to request correction of inaccurate or incomplete data.
- Erasure: to request deletion of your personal data in certain circumstances.
- Restriction: to request limitation of processing in certain circumstances.
- Data portability: to receive certain data in a structured, commonly used, machine-readable format and, where technically feasible, have it transferred to another controller.
- Objection: to object to processing based on legitimate interests and to direct marketing at any time.
You may also have the right not to be subject to decisions based solely on automated processing where such rights apply under law. If Northstar Automation Ltd uses automated decision-making in a way that materially affects you, we will provide appropriate information and safeguards where required.
To exercise your rights, please contact us using the details in Section 12. We may need to verify your identity before responding. We will respond within the timeframe required by applicable law.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
You can withdraw consent by following any unsubscribe instructions in our communications or by contacting Northstar Automation Ltd at [email protected].
10. Right to complain
If you have concerns about how Northstar Automation Ltd handles your personal data, please contact us first so that we can try to resolve the issue.
You also have the right to lodge a complaint with a relevant supervisory authority, in particular in the country or region where you live, work, or where an alleged infringement occurred. If you are in the United Kingdom, you may contact the Information Commissioner's Office (ICO).
11. Data security
Northstar Automation Ltd takes appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include:
- access controls and authentication measures;
- encryption where appropriate;
- secure storage and transmission practices;
- staff confidentiality obligations and training;
- regular review of security controls and procedures;
- backup and recovery measures; and
- incident detection and response processes.
However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Contact information
If you have questions, requests, or concerns about this Privacy Policy or the processing of your personal data, please contact:
- Northstar Automation Ltd
- Address: Northstar Automation, 3rd Floor, 12 Hammersmith Grove, Hammersmith, London W6 7AP, United Kingdom
- Email: [email protected]
- Phone: +44 20 7864 5192
13. Changes to privacy policy
Northstar Automation Ltd may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updated version will be posted on our website with a revised effective date.
We encourage you to review this Privacy Policy periodically to stay informed about how we process personal data.