Privacy Policy of Northstar Audience Research Limited

Effective date: 13 July 2026

1. Introduction and company information

This Privacy Policy explains how Northstar Audience Research Limited (“we”, “us”, “our”) collects, uses, stores, discloses, and otherwise processes personal data in connection with our audience-research services and related business operations.

Northstar Audience Research Limited is the data controller responsible for your personal data for the purposes described in this Privacy Policy.

Company details:

This Privacy Policy is intended to apply to individuals whose personal data we process, including research participants, clients, prospective clients, website visitors, suppliers, contractors, and other business contacts.

2. Data collection and processing

We may collect and process the following categories of personal data, depending on your relationship with us and the nature of our interaction:

We generally collect personal data directly from you, from your employer or organisation, from our clients, from publicly available sources, and from third parties such as service providers, research panels, and analytics providers where lawful and appropriate.

Where we conduct audience-research activities, we may ask participants to provide opinions, preferences, or demographic characteristics. We strive to minimise the collection of sensitive data. If such data is collected, it will only be processed where necessary and lawful, and with appropriate safeguards.

3. Purpose of data processing

We process personal data for the following purposes:

4. Legal basis for processing

We only process personal data where we have a lawful basis to do so. Depending on the context, our legal bases may include:

Where we process special category data or equivalent sensitive information, we will do so only where a lawful condition applies and where appropriate additional safeguards are in place.

5. Data sharing and third parties

We may share personal data with trusted third parties where necessary for the purposes described in this Privacy Policy. These may include:

We require third parties to handle personal data securely and only in accordance with our instructions and applicable law. We do not sell personal data.

6. Data transfer to third countries

Where personal data is transferred outside the United Kingdom or another applicable jurisdiction, we will take appropriate steps to ensure that an adequate level of protection is maintained. This may include reliance on adequacy regulations, standard contractual clauses, data transfer agreements, or other lawful transfer mechanisms.

We assess relevant transfer risks and implement additional safeguards where required.

7. Storage duration

We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, regulatory, and contractual requirements.

Retention periods depend on the type of data and the purpose of processing, and may include the following considerations:

When personal data is no longer required, we will delete, anonymise, or securely archive it in accordance with our retention practices.

8. User rights

Subject to applicable law, you may have the following rights in relation to your personal data:

To exercise your rights, please contact us using the details in the “Contact information” section below. We may need to verify your identity before responding. We will respond within the timeframe required by applicable law.

9. Withdrawal of consent

Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

If you withdraw consent, we may no longer be able to provide certain services or participation opportunities, where consent is necessary for those purposes.

10. Right to complain

If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue.

You also have the right to lodge a complaint with the relevant data protection supervisory authority. In the United Kingdom, this is the Information Commissioner’s Office (ICO).

11. Data security

We use appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include access controls, encryption where appropriate, secure storage, confidentiality obligations, staff training, and regular review of our security practices.

However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

12. Contact information

If you have questions about this Privacy Policy or our data processing practices, or if you wish to exercise your rights, please contact:

13. Changes to privacy policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updated version will be posted with a revised effective date where appropriate.

We encourage you to review this Privacy Policy periodically to stay informed about how Northstar Audience Research Limited processes personal data.

7/13/2026 Home