Effective date: 28 August 2026
1. Introduction and company information
This Privacy Policy explains how Northstar Post Production Ltd collects, uses, stores, shares, and protects personal data in connection with its post-production studio services, including editing, sound design, colour grading, visual effects, media asset handling, client communications, invoicing, and related business operations.
Northstar Post Production Ltd acts as the data controller in relation to personal data processed under this Privacy Policy, unless stated otherwise.
Company details:
- Company name: Northstar Post Production Ltd
- Address: Unit 4, The Axis Centre, Cleeve Road, Leatherhead, Surrey KT22 7ND, United Kingdom
- Email: [email protected]
- Phone: +44 1372 864 219
This Privacy Policy should be read together with any applicable contract, statement of work, client agreement, or website terms that may apply to your interaction with Northstar Post Production Ltd.
2. Data collection and processing
Northstar Post Production Ltd may collect and process the following categories of personal data:
- Identity data: name, job title, employer, and professional role.
- Contact data: email address, telephone number, business address, and correspondence details.
- Client and project data: project briefs, production notes, content submissions, footage, audio files, still images, metadata, creative instructions, and delivery specifications.
- Financial and transaction data: billing details, payment status, invoice records, and tax-related information.
- Technical data: IP address, device information, browser type, operating system, usage logs, and website interaction data.
- Communications data: emails, calls, messages, meeting notes, and support enquiries.
- Security and access data: access logs, authentication details, and records relating to studio or system access where applicable.
We may collect personal data directly from you, from your employer or client organisation, from our website, from production partners, or from third-party service providers involved in a project.
Where Northstar Post Production Ltd receives content materials containing personal data, such data may be processed as part of our post-production services in accordance with client instructions and applicable law.
3. Purpose of data processing
Northstar Post Production Ltd processes personal data for the following purposes:
- to provide post-production studio services and manage client projects;
- to communicate with clients, suppliers, contractors, and other business contacts;
- to manage quotations, contracts, invoices, and payments;
- to deliver, review, edit, and archive project materials;
- to administer our business operations, including record keeping and quality control;
- to maintain security, prevent fraud, and protect systems and data;
- to comply with legal, regulatory, accounting, and tax obligations;
- to improve our services, systems, workflows, and customer experience;
- to respond to enquiries, complaints, and support requests;
- to exercise or defend legal claims.
4. Legal basis for processing
Northstar Post Production Ltd processes personal data on one or more of the following legal bases, as applicable:
- Performance of a contract: where processing is necessary to provide services, manage projects, or fulfil contractual obligations.
- Legitimate interests: where processing is necessary for our legitimate business interests, such as operating and improving our studio services, maintaining security, managing client relationships, and enforcing our rights, provided those interests do not override your rights and freedoms.
- Consent: where we rely on your consent, for example for certain marketing communications or optional uses of personal data.
- Legal obligation: where processing is required to comply with applicable laws, regulations, tax rules, court orders, or lawful requests from authorities.
Where we process special category data or other sensitive information, we will only do so where a valid legal basis and, where required, an additional condition for processing applies under applicable law.
5. Data sharing and third parties
Northstar Post Production Ltd may share personal data with the following categories of recipients where necessary and lawful:
- clients, production companies, agencies, and other project stakeholders;
- IT, cloud storage, cybersecurity, collaboration, and communications service providers;
- accountants, auditors, legal advisers, insurers, and professional consultants;
- payment processors, banks, and financial institutions;
- subcontractors, freelancers, editors, engineers, and other technical specialists engaged in project delivery;
- government bodies, regulators, law enforcement, courts, and other authorities where required by law;
- website hosting, analytics, and maintenance providers, where applicable.
We require third parties to process personal data only in accordance with our instructions, appropriate confidentiality obligations, and applicable data protection requirements.
6. Data transfer to third countries
Where personal data is transferred outside the United Kingdom and/or the European Economic Area, Northstar Post Production Ltd will take appropriate safeguards to protect that data. These safeguards may include adequacy regulations, standard contractual clauses, transfer risk assessments, or other legally recognised transfer mechanisms.
Cross-border transfers may occur where we use international cloud services, remote collaboration tools, or overseas contractors to support post-production workflows. In such cases, we ensure appropriate protections are in place to the extent required by applicable law.
7. Storage duration
Northstar Post Production Ltd retains personal data only for as long as necessary for the purposes for which it was collected, including for legal, accounting, contractual, and operational requirements.
- Client and project records: retained for the duration of the business relationship and for a reasonable period thereafter.
- Financial and tax records: retained for the period required by applicable accounting and tax laws.
- Communications: retained as long as needed to manage the enquiry, project, or relationship, unless deletion is requested and legally permissible.
- Technical logs and security records: retained for a limited period unless needed for investigations, compliance, or legal claims.
When personal data is no longer required, it will be securely deleted, anonymised, or otherwise disposed of in accordance with our retention procedures.
8. User rights
Subject to applicable law, you may have the following rights regarding your personal data processed by Northstar Post Production Ltd:
- Access: to request confirmation of whether we process your personal data and to obtain a copy of that data.
- Rectification: to request correction of inaccurate or incomplete personal data.
- Erasure: to request deletion of your personal data in certain circumstances.
- Restriction: to request limitation of processing in certain situations.
- Data portability: to request receipt of personal data you provided to us in a structured, commonly used, machine-readable format, where applicable.
- Objection: to object to processing based on legitimate interests or to direct marketing, where applicable.
To exercise your rights, please contact us using the details in the Contact Information section. We may need to verify your identity before responding. We will respond within the time limits required by applicable law.
9. Withdrawal of consent
Where Northstar Post Production Ltd relies on your consent to process personal data, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
If you withdraw consent, we may no longer be able to provide certain optional services or communications that depend on it.
10. Right to complain
If you have concerns about how Northstar Post Production Ltd handles your personal data, please contact us first so that we can try to resolve the issue.
You also have the right to lodge a complaint with the relevant data protection supervisory authority in the United Kingdom. In the UK, this is the Information Commissioner's Office (ICO), or any other authority that may have jurisdiction depending on your location and circumstances.
11. Data security
Northstar Post Production Ltd uses appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures may include:
- access controls and role-based permissions;
- password protection and authentication measures;
- encryption where appropriate;
- secure backup and recovery procedures;
- staff confidentiality obligations and training;
- physical security controls for studio and office environments;
- monitoring, logging, and incident response procedures.
Although we take reasonable steps to protect personal data, no method of transmission or storage is completely secure. We therefore cannot guarantee absolute security.
12. Contact information
If you have questions about this Privacy Policy or wish to exercise your rights, please contact Northstar Post Production Ltd using the details below:
- Northstar Post Production Ltd
- Address: Unit 4, The Axis Centre, Cleeve Road, Leatherhead, Surrey KT22 7ND, United Kingdom
- Email: [email protected]
- Phone: +44 1372 864 219
13. Changes to privacy policy
Northstar Post Production Ltd may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, services, or operational needs. Any updated version will be effective when posted or otherwise communicated, unless a different effective date is stated.
We encourage you to review this Privacy Policy periodically to stay informed about how Northstar Post Production Ltd processes personal data.