Privacy Policy
1. Introduction and company information
This Privacy Policy explains how Northbridge Office Supplies Ltd collects, uses, discloses, transfers, and protects personal data when you visit our website, contact us, place an order, make an enquiry, or otherwise interact with us. We are committed to handling personal data responsibly and in accordance with applicable privacy laws.
Data controller: Northbridge Office Supplies Ltd
Registered/business address: Northbridge Office Supplies, 24 Victoria Road, Romford, RM1 2JH, UK
Email: [email protected]
Telephone: +44 20 8471 9632
2. Data collection and processing
We may collect and process the following categories of personal data:
- Identity data: name, title, business name, job title.
- Contact data: billing address, delivery address, email address, telephone number.
- Account and transaction data: order history, invoice details, payment status, returns, and correspondence relating to purchases.
- Technical data: IP address, browser type and version, device identifiers, operating system, and website usage information.
- Usage data: pages visited, interaction with content, referring URLs, and time spent on our website.
- Communication data: information included in emails, contact forms, calls, and support requests.
- Marketing data: preferences for receiving marketing communications and responses to promotions.
We collect personal data directly from you, automatically through our website and systems, and in some cases from third parties such as payment providers, delivery partners, and business directories.
3. Purpose of data processing
We process personal data for the following purposes:
- to provide and manage our products and services;
- to process orders, payments, deliveries, returns, and refunds;
- to communicate with you regarding enquiries, support requests, and customer service matters;
- to maintain business records and manage our contractual relationships;
- to improve our website, products, operations, and customer experience;
- to send service messages and administrative communications;
- to send marketing communications where permitted and, where required, with your consent;
- to detect, prevent, and investigate fraud, security incidents, and misuse;
- to comply with legal and regulatory obligations;
- to establish, exercise, or defend legal claims.
4. Legal basis for processing
Where applicable law requires a legal basis for processing, we rely on one or more of the following:
- Contract: where processing is necessary to enter into or perform a contract with you.
- Legal obligation: where we must process personal data to comply with a legal or regulatory requirement.
- Legitimate interests: where processing is necessary for our legitimate business interests, such as operating our business, improving services, securing our systems, and managing customer relationships, provided these interests are not overridden by your rights and freedoms.
- Consent: where you have given clear consent for specific processing, such as receiving certain marketing communications where required by law.
Where we rely on consent, you may withdraw it at any time using the contact details below or by following the unsubscribe instructions in our communications.
5. Data sharing and third parties
We may share personal data with selected third parties where necessary and lawful, including:
- Payment processors for the processing of card or other payments;
- Delivery and logistics providers for order fulfilment and shipping;
- IT and hosting providers for website, email, cloud storage, and system support;
- Professional advisers such as accountants, auditors, insurers, and legal advisers;
- Analytics and marketing service providers that help us understand website performance or manage communications;
- Regulators, law enforcement, courts, and other public authorities where required by law or necessary to protect our rights.
We require third parties that process personal data on our behalf to do so under appropriate contractual and security safeguards and only in accordance with our instructions where applicable.
6. Data transfer to third countries
Some of our service providers or systems may be located outside the United Kingdom or may process data in countries that do not provide the same level of data protection as the UK. Where such transfers occur, we will take appropriate steps to protect personal data, which may include reliance on adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms where available.
7. Storage duration
We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, and reporting requirements. Retention periods may vary depending on the type of data and purpose of processing. In general:
- customer and transaction records are retained for the period required for legal and accounting purposes;
- enquiry and correspondence records are retained for as long as needed to handle your request and for a reasonable period thereafter;
- marketing data is retained until you unsubscribe, object, or the data is no longer needed;
- technical and website logs are retained for a limited period unless needed longer for security or investigation purposes.
When personal data is no longer required, we will delete or anonymise it securely.
8. User rights
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: to request confirmation of whether we process your personal data and obtain a copy of it;
- Rectification: to request correction of inaccurate or incomplete data;
- Erasure: to request deletion of your personal data in certain circumstances;
- Restriction: to request that we limit processing in certain circumstances;
- Data portability: to request receipt of personal data you have provided to us in a structured, commonly used, machine-readable format, where applicable;
- Objection: to object to processing based on legitimate interests and to object at any time to direct marketing;
- Automated decision-making: where applicable, to request information about decisions made solely by automated means and to ask for human review where required by law.
To exercise any of these rights, please contact us using the details in the Contact Information section. We may need to verify your identity before responding to your request.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal. If you withdraw consent, we may still process your personal data where another lawful basis applies.
10. Right to complain
If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the matter.
You may also have the right to lodge a complaint with the relevant data protection supervisory authority in your country or region. In the UK, this is the Information Commissioner’s Office (ICO).
11. Data security
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures may include access controls, staff confidentiality obligations, secure systems, encryption where appropriate, and regular review of our processes.
However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.
12. Contact information
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:
Northbridge Office Supplies Ltd
Northbridge Office Supplies, 24 Victoria Road, Romford, RM1 2JH, UK
Email: [email protected]
Telephone: +44 20 8471 9632
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updated version will be posted on this page with a revised effective date where appropriate. We encourage you to review this Privacy Policy periodically to stay informed about how we handle personal data.