Privacy Policy

1. Introduction and company information

This Privacy Policy explains how Northshore Customer Experience Solutions Ltd collects, uses, stores, discloses, and protects personal data in connection with its customer-experience services and related business operations. It also explains the rights of individuals whose personal data we process.

For the purposes of applicable privacy laws, the data controller is:

This Privacy Policy applies to personal data processed through our websites, communications, service delivery activities, client support activities, marketing activities, and any other interaction where Northshore Customer Experience Solutions Ltd acts as a controller or, where applicable, as a processor on behalf of a client.

2. Data collection and processing

We may collect and process the following categories of personal data:

We collect personal data directly from you, from our clients where necessary for service delivery, from your organisation, from publicly available sources, and from third-party providers such as analytics, communications, and IT service providers. We may also generate data through our interactions with you, including notes, service records, and performance or quality assurance records.

We do not intentionally collect special category personal data unless it is necessary and lawful to do so, for example where you choose to provide such information in correspondence or feedback. If we process special category data, we will do so only where permitted by law and subject to appropriate safeguards.

3. Purpose of data processing

We process personal data for the following purposes:

Where personal data is processed on behalf of a client as a processor, we process that data only in accordance with the client’s instructions and applicable data processing agreements.

4. Legal basis for processing

We process personal data only where we have a lawful basis to do so. Depending on the context, our lawful bases may include:

Where we rely on legitimate interests, we consider the impact of the processing on your rights and freedoms and implement appropriate safeguards.

5. Data sharing and third parties

We may share personal data with the following categories of recipients where necessary and lawful:

We require third parties that process personal data on our behalf to protect the data, process it only for specified purposes, and implement appropriate technical and organisational safeguards. Where we disclose personal data to independent third parties, they are responsible for their own privacy practices.

6. Data transfer to third countries

Where personal data is transferred outside the United Kingdom or other applicable jurisdiction, we take steps to ensure that the transfer is lawful and that the data receives an appropriate level of protection. Such measures may include:

Further information about international transfers may be provided upon request where legally permitted.

7. Storage duration

We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, regulatory, accounting, or reporting requirements.

In determining retention periods, we consider:

When personal data is no longer required, we will delete it securely or anonymise it where appropriate. If we process data on behalf of a client, retention and deletion will generally follow the client’s instructions and the relevant contract.

8. User rights (access, rectification, erasure, restriction, data portability, objection)

Subject to applicable law, you may have the following rights in relation to your personal data:

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before responding. We will respond within the time period required by applicable law and may refuse or limit a request where permitted by law.

9. Withdrawal of consent

Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal, nor will it affect processing based on other lawful grounds.

You can withdraw consent by contacting us at [email protected] or by using any unsubscribe mechanism included in our communications, where available.

10. Right to complain

If you have concerns about how we process your personal data, we encourage you to contact us first so we can try to resolve the issue.

You also have the right to lodge a complaint with the relevant data protection supervisory authority. In the United Kingdom, this is the Information Commissioner’s Office (ICO). You can find more information on the ICO’s website.

11. Data security

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include:

While we take reasonable steps to protect personal data, no system can be guaranteed to be completely secure. You are responsible for keeping any credentials or passwords confidential where applicable.

12. Contact information

If you have any questions about this Privacy Policy or our handling of personal data, or if you wish to exercise your rights, please contact:

13. Changes to privacy policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, technology, or business operations. Any updated version will be posted on our website with a revised effective date where appropriate.

We encourage you to review this Privacy Policy periodically to stay informed about how Northshore Customer Experience Solutions Ltd processes personal data.

7/13/2026 Home