Privacy Policy of Northstar Audience Research Limited
Effective date: 13 July 2026
1. Introduction and company information
This Privacy Policy explains how Northstar Audience Research Limited (“we”, “us”, “our”) collects, uses, stores, discloses, and otherwise processes personal data in connection with our audience-research services and related business operations.
Northstar Audience Research Limited is the data controller responsible for your personal data for the purposes described in this Privacy Policy.
Company details:
- Company name: Northstar Audience Research Limited
- Address: Northstar Audience Research, 42 Farringdon Road, London EC1M 3HB, UK
- Email: [email protected]
- Phone: +44 20 7632 4895
This Privacy Policy is intended to apply to individuals whose personal data we process, including research participants, clients, prospective clients, website visitors, suppliers, contractors, and other business contacts.
2. Data collection and processing
We may collect and process the following categories of personal data, depending on your relationship with us and the nature of our interaction:
- Identity data: name, title, role, employer, and similar identifiers.
- Contact data: email address, telephone number, postal address, and other communication details.
- Professional data: job title, organisation, industry, professional interests, and business-related communications.
- Research data: survey responses, interview notes, focus group feedback, opinions, preferences, demographic information, and other information voluntarily provided in connection with audience research.
- Technical data: IP address, device information, browser type, operating system, log data, cookie identifiers, and website usage information.
- Transactional data: contract details, invoices, payment-related records, and service correspondence.
- Marketing and communications data: preferences for receiving marketing communications and responses to our communications.
We generally collect personal data directly from you, from your employer or organisation, from our clients, from publicly available sources, and from third parties such as service providers, research panels, and analytics providers where lawful and appropriate.
Where we conduct audience-research activities, we may ask participants to provide opinions, preferences, or demographic characteristics. We strive to minimise the collection of sensitive data. If such data is collected, it will only be processed where necessary and lawful, and with appropriate safeguards.
3. Purpose of data processing
We process personal data for the following purposes:
- to provide audience-research services, including surveys, interviews, focus groups, analysis, and reporting;
- to recruit and manage research participants and maintain research panels where applicable;
- to communicate with clients, participants, suppliers, and other business contacts;
- to administer contracts, invoices, and payments;
- to operate, maintain, and improve our website, systems, and business operations;
- to send service-related updates, administrative notices, and, where permitted, marketing communications;
- to analyse trends, measure engagement, and improve the quality of our research services;
- to comply with legal, regulatory, accounting, and tax obligations;
- to establish, exercise, or defend legal claims;
- to prevent fraud, unauthorised access, and misuse of our systems or services.
4. Legal basis for processing
We only process personal data where we have a lawful basis to do so. Depending on the context, our legal bases may include:
- Consent: where you have given clear consent for us to process your personal data for a specific purpose, such as certain research participation or marketing activities.
- Contract: where processing is necessary to enter into or perform a contract with you or your organisation.
- Legal obligation: where processing is necessary to comply with applicable legal or regulatory requirements.
- Legitimate interests: where processing is necessary for our legitimate business interests, such as operating our services, improving our research methodologies, securing our systems, and communicating with clients and business contacts, provided that such interests are not overridden by your rights and interests.
Where we process special category data or equivalent sensitive information, we will do so only where a lawful condition applies and where appropriate additional safeguards are in place.
5. Data sharing and third parties
We may share personal data with trusted third parties where necessary for the purposes described in this Privacy Policy. These may include:
- IT and cloud service providers;
- survey, research, and analytics platform providers;
- payment processors, accountants, auditors, and professional advisers;
- communication and email service providers;
- client organisations where we are conducting research on their behalf and only to the extent required for that engagement;
- contractors and consultants who support our operations under confidentiality obligations;
- law enforcement, regulators, courts, or other authorities where required by law or necessary to protect legal rights.
We require third parties to handle personal data securely and only in accordance with our instructions and applicable law. We do not sell personal data.
6. Data transfer to third countries
Where personal data is transferred outside the United Kingdom or another applicable jurisdiction, we will take appropriate steps to ensure that an adequate level of protection is maintained. This may include reliance on adequacy regulations, standard contractual clauses, data transfer agreements, or other lawful transfer mechanisms.
We assess relevant transfer risks and implement additional safeguards where required.
7. Storage duration
We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, regulatory, and contractual requirements.
Retention periods depend on the type of data and the purpose of processing, and may include the following considerations:
- the duration of our relationship with you or your organisation;
- legal and regulatory retention obligations;
- the need to resolve disputes and enforce agreements;
- the nature and sensitivity of the data;
- our legitimate business requirements.
When personal data is no longer required, we will delete, anonymise, or securely archive it in accordance with our retention practices.
8. User rights
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: to request confirmation of whether we process your personal data and to obtain a copy of that data.
- Rectification: to request correction of inaccurate or incomplete personal data.
- Erasure: to request deletion of your personal data in certain circumstances.
- Restriction: to request limitation of processing in certain circumstances.
- Data portability: to request a copy of certain personal data in a structured, commonly used, machine-readable format where applicable.
- Objection: to object to processing based on legitimate interests or to direct marketing at any time.
To exercise your rights, please contact us using the details in the “Contact information” section below. We may need to verify your identity before responding. We will respond within the timeframe required by applicable law.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
If you withdraw consent, we may no longer be able to provide certain services or participation opportunities, where consent is necessary for those purposes.
10. Right to complain
If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue.
You also have the right to lodge a complaint with the relevant data protection supervisory authority. In the United Kingdom, this is the Information Commissioner’s Office (ICO).
11. Data security
We use appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include access controls, encryption where appropriate, secure storage, confidentiality obligations, staff training, and regular review of our security practices.
However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.
12. Contact information
If you have questions about this Privacy Policy or our data processing practices, or if you wish to exercise your rights, please contact:
- Northstar Audience Research Limited
- Address: Northstar Audience Research, 42 Farringdon Road, London EC1M 3HB, UK
- Email: [email protected]
- Phone: +44 20 7632 4895
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updated version will be posted with a revised effective date where appropriate.
We encourage you to review this Privacy Policy periodically to stay informed about how Northstar Audience Research Limited processes personal data.