Privacy Policy

Last updated: 21 July 2026

This template policy should be reviewed against the organisation's actual data practices and approved by an appropriately qualified adviser before launch.

1. Who we are

Northstar Professional Services Ltd (company number 00000000) is responsible for the personal information described in this policy. Our registered office is Example House, Birmingham, B1 1AA, United Kingdom.

2. Information we collect

We may collect contact details, organisation details, enquiry content, correspondence, website usage information and any other information you choose to provide.

3. How we use information

To respond to enquiries and provide requested services.
To manage contracts, billing and client relationships.
To operate, secure and improve this website.
To meet legal, regulatory and accounting obligations.
To send marketing communications where permitted and with an available opt-out.

4. Lawful bases

Depending on the context, we rely on consent, contractual necessity, legal obligations and legitimate interests. Legitimate interests are balanced against the rights and expectations of individuals.

5. Sharing and international transfers

We may use vetted service providers for hosting, communications, analytics, professional advice and business administration. Where information is transferred outside the UK, appropriate safeguards should be documented and applied.

6. Retention

Personal information is retained only for as long as needed for the purpose collected, legal obligations, dispute resolution and legitimate business records. The final website should state or link to the organisation's actual retention schedule.

7. Your rights

Depending on applicable law, you may have rights to access, correct, erase, restrict or object to processing, and to receive a portable copy of certain information. You may also withdraw consent where consent is the lawful basis.

8. Cookies and analytics

See our Cookie Policy for information about cookies and similar technologies. Non-essential analytics or advertising technologies should not run before valid consent where consent is required.