This Privacy Policy explains how Northbridge Sound Studios Ltd collects, uses, stores, shares, and protects personal data when you visit our website, contact us, use our services, attend our studio, make bookings, or otherwise interact with us. We are committed to handling personal data responsibly and in accordance with applicable privacy and data protection laws.
1. Introduction and company information
The data controller responsible for your personal data is:
Northbridge Sound Studios Ltd
Northbridge Sound Studios, 14a Theed Street, London SE11 4PX, United Kingdom
Email: [email protected]
Phone: +44 20 7340 9186
Northbridge Sound Studios Ltd is a music-studio business providing recording, rehearsal, production, engineering, and related studio services. This policy applies to personal data collected in connection with enquiries, bookings, client projects, invoicing, communications, website usage, and studio operations.
2. Data collection and processing
We may collect and process the following categories of personal data:
- Identification details: name, professional name, company name, and job title.
- Contact details: email address, telephone number, postal address, and preferred contact method.
- Booking and service details: session dates, project information, equipment preferences, attendance records, and service history.
- Payment and billing information: invoicing details, transaction references, and payment status. We do not ordinarily store full card details unless processed through a secure payment provider.
- Communications: emails, messages, call notes, enquiry forms, and other correspondence.
- Technical data: IP address, browser type, device identifiers, log data, and website usage information.
- Media and studio content: recordings, voice, audio files, images, and other materials created, uploaded, or shared during studio work, where applicable.
- Access and security data: visitor logs, CCTV footage where used, and access control records.
We collect data directly from you, from your organisation, from our website, through booking systems, from payment processors, and from other lawful sources where necessary. Where we handle audio recordings or related project content, we do so only as required to provide studio services and to fulfil the relevant agreement with you.
3. Purpose of data processing
We process personal data for the following purposes:
- to respond to enquiries and provide quotations;
- to manage bookings, studio sessions, and client accounts;
- to deliver recording, production, rehearsal, and related music-studio services;
- to communicate about projects, scheduling, technical requirements, and support;
- to prepare invoices, process payments, and maintain accounting records;
- to manage business administration and internal operations;
- to maintain security, prevent fraud, and protect our premises, systems, and assets;
- to improve our services, website, and customer experience;
- to comply with legal, regulatory, tax, and contractual obligations;
- to establish, exercise, or defend legal claims;
- to send marketing communications where permitted and, where required, where you have consented or have a right to object.
4. Legal basis for processing
We process personal data only where we have a valid legal basis to do so. Depending on the context, our legal bases may include:
- Contract: where processing is necessary to enter into or perform a contract with you, such as booking studio time or providing production services.
- Legal obligation: where processing is necessary to comply with legal and tax obligations.
- Legitimate interests: where processing is necessary for our legitimate business interests, such as managing operations, improving services, protecting security, and handling ordinary business communications, provided that your rights do not override those interests.
- Consent: where we rely on your freely given consent, for example for certain marketing activities or optional uses of media, and you may withdraw that consent at any time.
Where we process special category data or other sensitive information, we will do so only where permitted by law and subject to additional safeguards.
5. Data sharing and third parties
We may share personal data with trusted third parties where necessary for the purposes described in this policy. These may include:
- payment service providers and banks;
- accountants, auditors, and professional advisers;
- IT, cloud storage, website hosting, communications, and software service providers;
- booking, scheduling, and customer relationship management providers;
- legal, regulatory, or law enforcement authorities where required;
- insurance providers and claims handlers;
- subcontractors or session personnel engaged in delivering studio services, where appropriate and subject to confidentiality obligations.
We require third parties to handle personal data lawfully, securely, and only in accordance with our instructions or their own independent legal obligations where applicable.
6. Data transfer to third countries
Where personal data is transferred outside the United Kingdom and/or the European Economic Area, we will take appropriate steps to ensure an adequate level of protection. This may include using standard contractual clauses, relying on adequacy regulations, or applying other lawful transfer mechanisms. Where feasible, we seek to store and process data within the United Kingdom or jurisdictions with comparable data protection safeguards.
7. Storage duration
We retain personal data only for as long as necessary for the purposes for which it was collected, including for the fulfilment of contractual obligations, legal compliance, tax/accounting requirements, and the resolution of disputes.
- Enquiry records: typically retained for a reasonable period after the enquiry has concluded.
- Client and booking records: retained for the duration of the business relationship and for a period thereafter as required for legal or accounting purposes.
- Financial and tax records: retained for the period required by applicable law.
- Security records: retained for a limited period unless needed for investigation or legal claims.
- Audio/project files: retained according to the agreed project terms, archival needs, or until deletion is requested where we are not required to keep them.
When personal data is no longer required, we will delete, anonymise, or securely archive it in accordance with our retention practices.
8. User rights
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: to request confirmation of whether we process your personal data and obtain a copy of that data;
- Rectification: to request correction of inaccurate or incomplete data;
- Erasure: to request deletion of your data in certain circumstances;
- Restriction: to request that we limit the processing of your data in certain cases;
- Data portability: to receive certain data in a structured, commonly used, machine-readable format and, where technically feasible, have it transferred to another controller;
- Objection: to object to processing based on legitimate interests and to object at any time to direct marketing.
To exercise any of these rights, please contact us using the details in this policy. We may need to verify your identity before responding. We will respond within the time limits required by applicable law.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before the withdrawal. If you withdraw consent, we may not be able to provide certain optional services or features where consent is necessary.
10. Right to complain
If you have concerns about how we handle your personal data, please contact us first so we can try to resolve the issue. You also have the right to lodge a complaint with the relevant data protection authority. In the United Kingdom, this is the Information Commissioner's Office (ICO). We encourage you to contact us before escalating a complaint, so we can address your concerns promptly and transparently.
11. Data security
We implement appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, misuse, alteration, or disclosure. These measures may include access controls, password protection, secure storage, staff confidentiality obligations, backups, and physical security measures at our premises.
While we take reasonable steps to safeguard personal data, no system can be guaranteed to be completely secure. You should also take care when sending information by email or over the internet.
12. Contact information
If you have questions about this Privacy Policy or how Northbridge Sound Studios Ltd handles personal data, please contact us at:
Northbridge Sound Studios Ltd
Northbridge Sound Studios, 14a Theed Street, London SE11 4PX, United Kingdom
Email: [email protected]
Phone: +44 20 7340 9186
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updated version will be posted on our website with an amended effective date where appropriate. We encourage you to review this policy periodically to stay informed about how we process personal data.
Last updated: 2026-08-28