1. Data Controller
The data controller for the personal data processed through this website is:
Legal name: Northbridge Market Research LLC
Registered address: 350 Fifth Avenue, New York, NY 10118, United States
General contact: [email protected]
Privacy contact: [email protected]
Phone: +1 (212) 555-0193
If you are located in the European Economic Area (EEA) or the United Kingdom, we will handle your personal data in line with applicable data protection laws, including the GDPR (and UK GDPR, where relevant). When this policy references the GDPR, it should be read to include equivalent UK GDPR principles for UK users.
2. Personal Data We Collect
We collect only the information that is needed to operate the site, respond to requests, and provide updates when you choose to receive them. Depending on how you interact with us, the categories of personal data we may process include:
- Identity and contact data: full name, email address, and (optional) phone number when you submit a form or subscribe.
- Message content: any information you include in a contact form message.
- Technical data: IP address, device type, operating system, browser type/version, and approximate location derived from IP (city/region level).
- Usage data: pages visited, time on page, referral source, and interactions with site features (collected via cookies or similar technologies where enabled).
- Cookie and preference data: your cookie consent choice and settings stored in your browser (for example, whether you accepted or rejected analytics cookies).
We do not request sensitive personal data through our standard forms (such as government identifiers, bank account numbers, or special category data under GDPR). Please do not include sensitive information in your messages. If you send it anyway, we will treat it carefully and may delete it when it is not necessary for the purpose you contacted us about.
3. How We Collect Personal Data
We collect personal data through the following methods:
Web forms
When you submit the contact form or subscribe to updates, you provide your name and email (and optionally a phone number) so we can respond.
Cookies and similar technologies
We store your cookie choice locally. If you accept analytics cookies, we may collect usage metrics to understand how the site is used.
Analytics tools
We may use Google Analytics 4 to measure aggregated site usage. Analytics will only run when you accept analytics cookies in the banner.
Server logs
Our hosting provider processes technical logs to keep the site secure and stable, including IP address and request metadata.
At this time, we do not embed Meta Pixel by default on this website. If we add marketing pixels in the future, we will update this policy and the cookie banner so you can consent to marketing cookies separately.
4. Legal Bases for Processing (GDPR Art. 6)
If you are in the EEA or UK, we rely on the following legal bases under GDPR Article 6 to process personal data. The legal basis can vary depending on the specific context:
Data category
Purpose
Legal basis
Name, email, phone (optional)
Respond to inquiries; provide requested information
Contract (Art. 6(1)(b)) or Legitimate Interests (Art. 6(1)(f))
Newsletter subscription data
Send updates you opt in to receive
Consent (Art. 6(1)(a))
IP address; server request logs
Security, fraud prevention, service integrity
Legitimate Interests (Art. 6(1)(f))
Analytics identifiers and usage data
Site measurement and improvement
Consent (Art. 6(1)(a))
Legal compliance records
Respond to lawful requests; maintain required records
Legal Obligation (Art. 6(1)(c))
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing based on consent before it was withdrawn. See the section titled “Your Rights” below for details.
5. Purposes of Processing
We process personal data for the following purposes:
- Service delivery: operate the website, provide access to content, and display pages correctly on your device.
- Customer support: respond to messages submitted via the contact page and address requests.
- Marketing communications (consent-based): send newsletters and product updates only when you opt in; include unsubscribe mechanisms in communications.
- Security and fraud prevention: detect abuse, protect against automated attacks, and maintain integrity of our services.
- Legal compliance: comply with applicable laws, respond to lawful requests, and enforce our Terms of Service.
- Analytics and site improvement: understand aggregated usage patterns to improve navigation, content structure, and performance, only when analytics cookies are accepted.
We do not use your personal data to make automated decisions that produce legal or similarly significant effects about you. If this changes, we will update this policy with a clear explanation and, where required, provide additional choices.
6. Retention Periods
We keep personal data only as long as necessary for the purposes described in this policy, unless a longer retention period is required or permitted by law. Our typical retention approach is:
Form submissions
Contact messages and related correspondence are retained for 2 years to support ongoing communication and to keep a record of prior requests. If a message becomes part of a longer business relationship, it may be retained longer as needed.
Newsletter list
Subscription data is retained until you unsubscribe. After you unsubscribe, we keep a minimal suppression record for 30 days to reduce the chance of accidental re-subscription or delivery errors.
Analytics data
If analytics cookies are accepted, aggregated analytics data is retained for 14 months, after which it is deleted or anonymized according to the analytics provider’s available settings.
Server and security logs
Technical logs are retained for 90 days for security monitoring and troubleshooting. Longer retention may apply when investigating security incidents or responding to lawful requests.
If you request deletion of your data, we will act within a reasonable timeframe and in line with legal requirements. Some records may be retained if we must keep them to comply with law or to establish, exercise, or defend legal claims.
8. International Data Transfers
Northbridge Market Research LLC is based in the United States. If you access our site from the EEA/UK, your personal data may be transferred to and processed in the United States and other countries where our service providers operate.
Where required by GDPR, we use appropriate safeguards for international transfers. Depending on the provider and the circumstances, these safeguards may include:
- Standard Contractual Clauses (SCCs): EU Commission-approved contractual clauses for transfers to processors outside the EEA.
- Adequacy decisions: where the European Commission has decided that a country provides an adequate level of protection for personal data.
- Additional measures: where appropriate, technical and organizational steps to reduce transfer risk.
You can request more information about transfer safeguards by contacting us at [email protected].
9. Your Rights (GDPR)
If you are located in the EEA/UK, you have rights under the GDPR. We also extend similar controls to users in other regions where practical. Your rights include:
Right of access
You can request confirmation of whether we process your personal data and receive a copy of the data we hold about you.
Right to rectification
You can ask us to correct inaccurate personal data or complete incomplete data, such as updating an email address.
Right to erasure
You can request deletion of personal data where there is no good reason for us to continue processing it, subject to legal exceptions.
Right to restrict processing
You can request that we suspend processing in certain situations, for example while a dispute about accuracy is resolved.
Right to data portability
Where processing is based on consent or contract and carried out by automated means, you can request to receive your data in a structured, commonly used format and have it transmitted to another controller where technically feasible.
Right to object
You can object to processing based on legitimate interests. If you object, we will stop processing unless we have compelling legitimate grounds, or the processing is needed for legal claims.
Right to withdraw consent
If we process data based on your consent, you can withdraw it at any time. For cookies, you can reject cookies via the banner and clear stored data in your browser to remove previously stored consent.
To exercise your rights, email [email protected] with your request. To help us protect you, we may ask for information to verify your identity before fulfilling the request. We aim to respond within one month, and sooner where feasible.
Right to complain to a supervisory authority
If you are in the EEA, you have the right to lodge a complaint with your local data protection authority. If you are in the UK, you can lodge a complaint with the Information Commissioner’s Office (ICO). If you are in the United States, you may have additional state-level privacy rights. We encourage you to contact us first so we can address your concerns promptly.
11. Children’s Privacy
This website is not directed to children under 16, and we do not knowingly collect personal data from children. If you believe that a child has provided personal data to us, please contact [email protected]. If we become aware that we have collected personal data from a child, we will take steps to delete it and to prevent further collection.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or the services we offer. When we update the policy, we will revise the “Last Updated” date at the top of this page.
If we make a material change that affects how we use your personal data, we will provide a visible notice on the site and, where appropriate, notify subscribers by email. Continued use of the site after the effective date means you have had the opportunity to review the updated policy.
13. Contact and Data Protection Contact
For privacy questions, requests to exercise your rights, or data deletion requests, contact our privacy team:
Email: [email protected]
Mailing address: Northbridge Market Research LLC, 350 Fifth Avenue, New York, NY 10118, United States
Phone: +1 (212) 555-0193
If you prefer not to email, you can also reach us through the Contact page. Please do not send sensitive personal data through web forms.
Summary for visitors
We built this site to be usable even when you reject analytics cookies. If you contact us, we use your details to respond and keep a record for a limited period. If you subscribe, we send updates until you unsubscribe. We do not sell your data. You can request access, deletion, or correction by emailing our privacy address.
