Effective date: 2 September 2026
1. Introduction and company information
This Privacy Policy explains how Northbridge Production Services Ltd collects, uses, discloses, stores, and protects personal data when operating its business as a production services company. This Policy applies to personal data collected through our website, email communications, telephone calls, written correspondence, in-person meetings, filming and production activities, supplier and client relationships, and any other interactions with us.
Data controller: Northbridge Production Services Ltd
Registered/business address: Northbridge Production, 24 Bridgewater Road, Wembley, London HA0 1EH, UK
Email: [email protected]
Phone: +44 20 7946 5831
For the purposes of applicable privacy laws, Northbridge Production Services Ltd is the controller of the personal data described in this Policy, unless we explicitly state otherwise.
2. Data collection and processing
We may collect and process the following categories of personal data:
- Identity data: name, title, job role, employer, and identification details where required for access control or compliance.
- Contact data: email address, postal address, telephone number, and other communication details.
- Professional and business data: company affiliation, project role, business correspondence, contractual details, and account information.
- Production-related data: call sheets, production schedules, location access details, crew lists, appearance releases, image and video recordings, and related logistical information.
- Technical data: IP address, device identifiers, browser type, operating system, and website usage information.
- Financial and transaction data: payment details, invoice information, and records necessary to administer contracts and payments.
- Special category data: only where strictly necessary and where permitted by law, for example where you voluntarily provide information relevant to health, accessibility, or safeguarding in connection with production activities.
We collect personal data directly from you, from your employer or organisation, from clients, suppliers, casting or talent intermediaries, from publicly available sources, and from third parties that support our production operations, website, IT, finance, and compliance functions.
We may also collect personal data through filming, photography, audio recording, CCTV, access control systems, and other recording technologies used at production locations, subject to applicable law and required notices or consents.
3. Purpose of data processing
We process personal data for the following purposes:
- to provide production services and manage projects;
- to communicate with clients, suppliers, talent, crew, and other business contacts;
- to plan, organise, and deliver filming, photography, and related production activities;
- to manage contracts, quotations, invoices, and payments;
- to administer access to sets, locations, studios, and other production sites;
- to verify identity, qualifications, insurance, or eligibility where needed;
- to comply with legal, regulatory, insurance, tax, accounting, health and safety, and safeguarding obligations;
- to maintain business records and resolve disputes;
- to operate and secure our website, systems, and premises;
- to improve our services, workflows, and operational efficiency;
- to send service-related communications and, where permitted, marketing communications;
- to protect our rights, property, staff, clients, and partners.
4. Legal basis for processing
We rely on one or more of the following legal bases, as applicable under the relevant privacy laws:
- Performance of a contract: where processing is necessary to enter into or perform a contract with you or your organisation.
- Legitimate interests: where processing is necessary for our legitimate business interests, such as managing and securing production operations, communicating with stakeholders, preventing fraud, and maintaining records, provided these interests are not overridden by your rights and freedoms.
- Consent: where you have given clear consent for a specific purpose, including certain marketing or optional uses of images, audio, or video where required by law.
- Legal obligation: where processing is necessary to comply with applicable law, regulation, court order, or official request.
- Vital interests: where processing is necessary to protect someone’s life or physical safety in an emergency.
- Public interest or official authority: where applicable and lawful in specific circumstances.
Where we rely on consent, you may withdraw it at any time as described below. This will not affect the lawfulness of processing carried out before withdrawal.
5. Data sharing and third parties
We may share personal data with third parties where necessary for the purposes described in this Policy, including:
- clients and production partners;
- crew members, freelancers, cast, talent representatives, and location contacts;
- suppliers and service providers such as IT hosting providers, cloud platforms, payroll providers, accountants, insurers, legal advisers, payment processors, and marketing or communications providers;
- location owners, venue operators, security providers, and transport or logistics providers;
- regulators, law enforcement agencies, courts, and other public authorities where required or permitted by law;
- any third party in connection with a corporate transaction, restructuring, merger, acquisition, or sale of assets, subject to appropriate confidentiality protections.
We require third parties who process personal data on our behalf to do so only on our instructions and to implement appropriate security and confidentiality measures.
6. Data transfer to third countries
Where it is necessary for our business operations, personal data may be transferred to and processed in countries outside the United Kingdom and, where applicable, outside the European Economic Area.
When such transfers occur, we will take appropriate safeguards to protect personal data in accordance with applicable law. These safeguards may include adequacy regulations, standard contractual clauses, international data transfer agreements, supplementary measures, or other lawful transfer mechanisms.
You may contact us using the details below if you want further information about the safeguards we use for international transfers.
7. Storage duration
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, tax, insurance, and reporting requirements.
Retention periods vary depending on the type of data and purpose of processing. In general:
- contractual and financial records are retained for the period required by law and business necessity;
- production records, including call sheets and release documentation, are retained for as long as necessary to evidence rights, permissions, and compliance;
- communications are retained for a reasonable period for operational and evidential purposes;
- website and technical logs are retained for security, troubleshooting, and analytics purposes for limited periods;
- where data is no longer required, we will delete, anonymise, or securely archive it as appropriate.
We may retain data longer where required to establish, exercise, or defend legal claims.
8. User rights
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: to request confirmation of whether we process your personal data and to obtain a copy of it.
- Rectification: to request correction of inaccurate or incomplete personal data.
- Erasure: to request deletion of your personal data in certain circumstances.
- Restriction: to request that we restrict processing in certain circumstances.
- Data portability: to request receipt of certain data in a structured, commonly used, machine-readable format, where technically feasible and legally applicable.
- Objection: to object to processing based on legitimate interests and to object to direct marketing at any time.
To exercise any of these rights, please contact us using the details in Section 12. We may ask for additional information to verify your identity before responding to your request.
We will respond within the timeframe required by applicable law. Some rights may be limited where processing is necessary for legal compliance, contractual obligations, the establishment or defence of legal claims, or other lawful reasons.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you may withdraw that consent at any time by contacting us at [email protected] or by using any unsubscribe or preference-management method we provide.
Withdrawal of consent will not affect processing that has already taken place. It may also not affect processing based on another lawful basis, such as contract, legal obligation, or legitimate interests.
10. Right to complain
If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue promptly and informally.
You may also have the right to lodge a complaint with the relevant data protection supervisory authority. If you are in the United Kingdom, this is typically the Information Commissioner’s Office (ICO).
We would appreciate the opportunity to address your concerns before you contact a supervisory authority.
11. Data security
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include:
- access controls and authentication procedures;
- role-based permissions and confidentiality obligations;
- secure storage and encrypted transmission where appropriate;
- backup, monitoring, and incident response procedures;
- staff training and internal privacy and security practices;
- supplier due diligence and contractual security requirements.
Although we work to protect personal data, no method of transmission or storage is completely secure. We cannot guarantee absolute security, but we take reasonable and proportionate steps to reduce risk.
12. Contact information
If you have any questions about this Privacy Policy or our data handling practices, please contact:
Northbridge Production Services Ltd
Northbridge Production, 24 Bridgewater Road, Wembley, London HA0 1EH, UK
Email: [email protected]
Phone: +44 20 7946 5831
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our business, legal obligations, or data handling practices. Any updated version will be posted on our website or otherwise made available to you.
The “Effective date” above indicates when this Policy was last revised. Your continued use of our services after changes are made may indicate your acceptance of the updated Policy, to the extent permitted by law.