Effective date: 31 August 2026
1. Introduction and company information
This Privacy Policy explains how Northstar Motion Studio Ltd (“we”, “us”, “our”) collects, uses, discloses, stores, and protects personal data when you interact with our digital-production-studio services, website, communications, and related business activities.
Northstar Motion Studio Ltd is the controller of your personal data for the purposes described in this Privacy Policy.
Company details:
Northstar Motion Studio Ltd
Northstar Motion Studio, 2nd Floor, 14 St John Street, Manchester, M3 4DY, United Kingdom
Email: [email protected]
Phone: +44 161 924 7583
This Privacy Policy should be read together with any other notices we may provide from time to time. By using our services, visiting our website, or communicating with us, you acknowledge that your personal data may be processed as described below.
2. Data collection and processing
We may collect and process the following categories of personal data, depending on how you interact with us:
- Identity data: name, job title, company name, and similar identifiers.
- Contact data: email address, phone number, postal address, and messaging details.
- Client and project data: information you provide in relation to production briefs, creative concepts, project requirements, feedback, approvals, and correspondence.
- Payment and billing data: invoicing details, payment status, and related financial records.
- Technical data: IP address, browser type, device identifiers, operating system, time zone, language settings, and similar technical information.
- Usage data: information about how you use our website, services, and communications, including pages viewed and interaction patterns.
- Marketing and communication data: preferences for receiving communications, subscription status, and responses to marketing materials.
- Content and media data: files, images, videos, audio, drafts, and other materials submitted to us or created in the course of production work, where such materials include personal data.
We collect personal data directly from you, from our clients and business partners, from publicly available sources where appropriate, and automatically through our website and digital tools.
We do not knowingly collect special category data unless it is necessary for a specific lawful purpose and with an appropriate legal basis. We ask that you do not provide sensitive information unless requested or clearly necessary for a project or service.
3. Purpose of data processing
We process personal data for the following purposes:
- to provide and manage our services, including creative, production, post-production, and related studio services;
- to communicate with clients, suppliers, collaborators, and prospective customers;
- to prepare quotations, proposals, contracts, statements of work, and invoices;
- to manage projects, schedules, approvals, revisions, and delivery of work;
- to maintain business records and administer our commercial relationships;
- to respond to enquiries, requests, complaints, and support matters;
- to operate, maintain, secure, and improve our website, systems, and internal operations;
- to perform analytics, performance monitoring, and service improvement;
- to send marketing communications where permitted by law and subject to your preferences;
- to comply with legal obligations, regulatory requirements, and lawful requests;
- to establish, exercise, or defend legal claims;
- to protect our rights, property, personnel, clients, and business interests.
4. Legal basis for processing
We will only process your personal data where we have a lawful basis to do so. Depending on the context, our legal bases include:
- Performance of a contract: where processing is necessary to enter into or perform a contract with you or your organisation.
- Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. These interests may include service delivery, business administration, fraud prevention, network and information security, and business development.
- Consent: where you have given clear consent for a specific purpose, such as certain marketing communications or optional cookies where required.
- Legal obligation: where processing is necessary to comply with applicable law, court orders, tax, accounting, or regulatory obligations.
- Vital interests: in rare circumstances where processing is necessary to protect someone’s life or physical safety.
Where we rely on legitimate interests, we balance our interests against your interests and fundamental rights. Where consent is used as the lawful basis, you may withdraw it at any time.
5. Data sharing and third parties
We may share personal data with trusted third parties where necessary for the purposes described in this Privacy Policy. These third parties may include:
- Service providers: hosting providers, cloud storage providers, email and communications platforms, IT support providers, analytics providers, and security vendors;
- Professional advisers: lawyers, accountants, auditors, insurers, and consultants;
- Payment and finance providers: banks, payment processors, and invoicing platforms;
- Creative and production collaborators: freelancers, contractors, editors, animators, designers, production partners, and specialist suppliers involved in delivering a project;
- Authorities and regulators: public authorities, courts, and law enforcement where required by law or necessary to protect rights and safety;
- Business transferees: in connection with a merger, acquisition, restructuring, sale of assets, or similar corporate transaction.
We require third parties that process personal data on our behalf to handle it securely, keep it confidential, and use it only in accordance with our instructions and applicable law.
6. Data transfer to third countries
Where personal data is transferred outside the United Kingdom and/or the European Economic Area, we will take appropriate steps to ensure an adequate level of protection. These steps may include:
- transferring data to countries recognised as providing an adequate level of protection;
- using approved contractual safeguards such as standard contractual clauses or equivalent transfer mechanisms;
- implementing supplementary technical and organisational measures where appropriate;
- ensuring that transfers are made only where necessary for the purposes set out in this Privacy Policy.
Where required, you may request further information about the safeguards used for international transfers by contacting us using the details below.
7. Storage duration
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the satisfaction of legal, accounting, reporting, and contractual requirements.
The retention period depends on factors such as:
- the nature of the data and the purpose of processing;
- the duration of our relationship with you or your organisation;
- legal limitation periods and statutory retention obligations;
- applicable tax, accounting, and commercial record-keeping requirements;
- whether a longer period is necessary for dispute resolution or enforcement of rights.
When data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you, unless retention is required or permitted by law.
8. User rights
Depending on your location and applicable law, you may have the following rights in relation to your personal data:
- Right of access: to request confirmation of whether we process your personal data and obtain a copy of that data;
- Right to rectification: to request correction of inaccurate or incomplete personal data;
- Right to erasure: to request deletion of your personal data in certain circumstances;
- Right to restriction: to request that we limit processing in certain circumstances;
- Right to data portability: to receive personal data you provided to us in a structured, commonly used, machine-readable format and, where technically feasible, to have it transmitted to another controller;
- Right to object: to object to processing based on legitimate interests or direct marketing;
- Right to object to automated decision-making: where applicable, to avoid decisions made solely by automated means that produce legal or similarly significant effects.
To exercise any of these rights, please contact us using the details in Section 12. We may ask you to verify your identity before responding. We may also refuse requests where permitted by law, for example if a request is manifestly unfounded, repetitive, or adversely affects the rights of others.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
You can withdraw consent by contacting us at [email protected] or by using any unsubscribe mechanism included in our communications, where applicable.
10. Right to complain
If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue.
You may also have the right to lodge a complaint with the relevant data protection supervisory authority in your country or region. If you are in the United Kingdom, this is the Information Commissioner’s Office (ICO).
11. Data security
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include:
- access controls and role-based permissions;
- password protection and, where appropriate, multi-factor authentication;
- secure storage and encryption measures where appropriate;
- staff confidentiality obligations and security awareness;
- regular review of internal procedures and vendor arrangements;
- back-up and business continuity practices;
- monitoring for malicious activity and security incidents.
However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.
12. Contact information
If you have any questions about this Privacy Policy or our handling of your personal data, please contact:
Northstar Motion Studio Ltd
Northstar Motion Studio, 2nd Floor, 14 St John Street, Manchester, M3 4DY, United Kingdom
Email: [email protected]
Phone: +44 161 924 7583
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updated version will be posted on our website with a revised effective date.
We encourage you to review this Privacy Policy periodically. Your continued use of our services after any update constitutes your acknowledgment of the revised policy, to the extent permitted by law.