Privacy Policy
1. Introduction and company information
This Privacy Policy explains how Northstar Audio Productions Ltd collects, uses, stores, shares, and protects personal data when operating its podcast-related services, including recording, production, editing, hosting support, distribution, communications, websites, contact forms, newsletters, and any related services (together, the “Services”).
Northstar Audio Productions Ltd is the data controller for the personal data described in this Privacy Policy, unless otherwise stated.
Company name: Northstar Audio Productions Ltd
Business type: Podcast production and related services
Address: Northstar Podcast Studio, 28 Willow Bank Road, Manchester, M12 6BQ, United Kingdom
Email: [email protected]
Phone: +44 161 924 7583
This Privacy Policy should be read together with any other privacy notices or fair processing notices we may provide in connection with specific services, projects, or client engagements.
2. Data collection and processing
We may collect and process the following categories of personal data:
- Identity data: name, job title, social media handle, and similar identifiers.
- Contact data: email address, telephone number, postal address, and other communication details.
- Professional data: organisation name, role, industry, business correspondence, and project-related information.
- Technical data: IP address, browser type, device identifiers, operating system, approximate location, and website usage data.
- Audio, visual, and likeness data: voice recordings, interview recordings, photographs, video recordings, transcriptions, and related production materials.
- Communications data: messages sent to us, enquiries, feedback, support requests, and correspondence history.
- Contract and billing data: invoicing details, payment-related information, service agreements, and transaction records.
- Marketing preferences: subscription choices, consent records, and communication preferences.
- Usage and analytics data: interactions with our website, podcast platforms, email campaigns, and related services.
We may collect personal data directly from you, from clients or business partners, from public sources, from website or platform analytics, from third-party service providers, or when you appear in or interact with podcast content produced by us.
Where we record interviews, discussions, live sessions, or other podcast content, participants may be informed separately about the recording and intended publication. In some circumstances, your voice, image, opinions, and other personal data may be included in published audio or video content.
We do not intentionally collect special category data unless it is relevant to a specific production, you voluntarily provide it, or it is otherwise permitted by law. If special category data is processed, we will do so only where a lawful basis and, where required, an additional legal condition applies.
3. Purpose of data processing
We process personal data for the following purposes:
- to provide and manage podcast production and related Services;
- to communicate with clients, guests, contractors, and website users;
- to arrange recording sessions, editing, scheduling, and publication of content;
- to manage contracts, invoices, accounts, and payments;
- to administer our business operations and internal record-keeping;
- to operate, maintain, secure, and improve our website and services;
- to conduct analytics, audience insights, and service performance monitoring;
- to send marketing communications where permitted and, where required, where you have consented;
- to comply with legal obligations, regulatory requirements, and lawful requests;
- to establish, exercise, or defend legal claims;
- to protect our rights, property, staff, clients, guests, and users;
- to prevent fraud, abuse, and misuse of our Services;
- to produce, edit, archive, distribute, and repurpose podcast content as agreed.
4. Legal basis for processing
We only process personal data where we have a lawful basis to do so. Depending on the context, the legal bases may include:
- Contract: processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
- Legitimate interests: processing is necessary for our legitimate business interests, such as providing and improving Services, managing operations, preventing fraud, and protecting our legal rights, provided those interests are not overridden by your rights and freedoms.
- Consent: where you have given clear consent, for example for certain marketing communications or where required for specific uses of your personal data.
- Legal obligation: processing is necessary to comply with legal or regulatory obligations.
- Vital interests: in rare cases, processing may be necessary to protect someone’s vital interests.
Where we rely on legitimate interests, we will assess and balance our interests against your rights and interests. Where consent is the lawful basis, you may withdraw consent at any time as described below.
5. Data sharing and third parties
We may share personal data with trusted third parties where necessary for the purposes described in this Privacy Policy. These may include:
- hosting, cloud storage, and content delivery providers;
- audio and video editing software providers;
- website, analytics, and marketing service providers;
- email and communication platform providers;
- payment processors, accountants, and financial service providers;
- professional advisers, including lawyers, insurers, and auditors;
- contractors, producers, editors, engineers, and other service providers engaged in delivering our Services;
- platforms used for podcast distribution, streaming, transcription, or audience engagement;
- regulators, courts, law enforcement, or other authorities where required by law;
- business partners or clients, where necessary for agreed production or publishing arrangements.
We require third parties to handle personal data securely and in accordance with applicable legal requirements. Some third parties may act as processors on our behalf, while others may act as independent controllers.
6. Data transfer to third countries
Some of the third parties we use may store or process personal data outside the United Kingdom, including in countries that may not offer the same level of data protection as the UK.
Where we transfer personal data internationally, we will take appropriate steps to ensure that your data remains protected. These steps may include:
- using UK adequacy regulations where applicable;
- entering into standard contractual clauses or other approved transfer mechanisms;
- implementing supplementary technical and organisational safeguards where appropriate;
- assessing the risks associated with the transfer and the receiving country.
By using our Services or interacting with us, you acknowledge that certain processing may take place outside the UK where necessary for business operations and service delivery.
7. Storage duration
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, tax, regulatory, or reporting purposes.
The retention period depends on the type of data and the purpose of processing. In general:
- client and contract records are kept for the duration of the relationship and for a period afterwards as required for legal, tax, or contractual purposes;
- communications and enquiry records are retained for as long as reasonably necessary to manage correspondence and follow-up;
- marketing records are retained until you unsubscribe, withdraw consent, or object where applicable;
- audio, video, and production materials may be retained for the period necessary to complete the production, maintain archives, support re-use rights, or comply with legal and contractual obligations;
- technical and analytics data are retained for a limited period consistent with our operational needs and security practices.
When personal data is no longer required, we will delete it, anonymise it, or securely archive it in accordance with our retention practices.
8. User rights
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: request confirmation of whether we process your data and obtain a copy of it.
- Rectification: request correction of inaccurate or incomplete data.
- Erasure: request deletion of your data in certain circumstances.
- Restriction: request limitation of processing in certain circumstances.
- Data portability: request that certain data be provided to you or another controller in a structured, commonly used, machine-readable format, where applicable.
- Objection: object to processing based on legitimate interests and object to direct marketing at any time.
These rights may be subject to conditions and exceptions under applicable law. For example, we may retain certain data where we have a legal obligation to do so or where it is necessary to establish, exercise, or defend legal claims.
To exercise your rights, please contact us using the details below. We may need to verify your identity before responding to your request.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.
You can withdraw consent by using any unsubscribe link provided in our communications or by contacting us directly at [email protected].
If you withdraw consent, we may no longer be able to provide certain features or services, where consent is necessary for those activities.
10. Right to complain
If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue.
You also have the right to lodge a complaint with the relevant data protection supervisory authority. In the United Kingdom, this is the Information Commissioner’s Office (ICO).
Website: https://ico.org.uk
11. Data security
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
These measures may include access controls, authentication procedures, secure storage, encryption where appropriate, staff confidentiality obligations, regular backups, and internal policies designed to protect data throughout its lifecycle.
Although we take reasonable steps to safeguard personal data, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security, but we will act promptly and in accordance with applicable law if a security incident occurs.
12. Contact information
If you have any questions about this Privacy Policy, our data practices, or your rights, please contact:
Northstar Audio Productions Ltd
Northstar Podcast Studio, 28 Willow Bank Road, Manchester, M12 6BQ, United Kingdom
Email: [email protected]
Phone: +44 161 924 7583
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, technology, or business operations.
When we make material changes, we will take reasonable steps to notify you, which may include posting the updated policy on our website or contacting you directly where appropriate. The “last updated” date, if provided, will indicate when the policy was most recently revised.
We encourage you to review this Privacy Policy periodically to stay informed about how Northstar Audio Productions Ltd processes personal data.