This Privacy Policy explains how Northern Media ("we", "us", "our") collects, uses, and protects your personal information when you visit www.noorthernmedia.com/audit (the "Site") and submit information to us.
We are the data controller for the purposes of the General Data Protection Regulation (GDPR).
Data Controller: Northern Media [REGISTERED ADDRESS / COUNTRY] [ CONTACT EMAIL] [DPO CONTACT, IF APPLICABLE]
1. What Data We Collect
We collect two categories of personal data:
a) Information you give us directly, when you submit a form on this Site:
- Name
- Email address
- Phone number
b) Information collected automatically, via cookies and the Meta Pixel:
- IP address
- Browser and device type
- Pages viewed and time spent on the Site
- Referring URL (e.g. the Facebook or Instagram ad you clicked)
- Actions taken on the Site (clicks, scrolls, form starts/completions)
- Cookie identifiers linked to your Facebook/Instagram account, if you are logged in
2. Why We Collect It (Legal Basis)
| What | Legal basis | Purpose |
|---|---|---|
| Name, email, phone (form) | Consent / steps prior to a contract | To respond to your inquiry, deliver what you requested, and follow up by email, SMS, or phone |
| Cookies & Meta Pixel | Consent | To measure ad performance, build retargeting audiences, and understand Site usage |
The Pixel does not load and non-essential cookies are not set until you accept them through the cookie banner on this Site. You may withdraw consent at any time — see Section 8.
3. How We Use Your Information
- Responding to inquiries submitted through our forms
- Sending you marketing communications by email, SMS, or phone, where you've consented
- Measuring and optimizing our Facebook/Instagram advertising
- Building retargeting and lookalike audiences
- Improving the Site based on aggregate usage patterns
We do not sell your personal information.
4. Who We Share It With
- Email/SMS service providers — to send communications you've opted into: [ PROVIDER NAME, e.g. Klaviyo, ActiveCampaign]
- Hosting/infrastructure providers — to run the Site: [PROVIDER NAME]
- Payment processor — if you make a purchase: [PROVIDER NAME]
- Meta Platforms Ireland Ltd. — as a joint controller for Pixel data (see Section 6)
- Law enforcement or regulators — where required by law, or to protect our legal rights
We do not disclose your information to anyone else without your consent, except as described above.
5. Cookies
This Site uses cookies, including those placed by the Meta Pixel. A cookie banner is shown on your first visit; non-essential cookies are blocked until you consent. You can review or withdraw consent at any time via [COOKIE PREFERENCE LINK/TOOL].
6. Meta as a Joint Controller
Under EU case law (CJEU, Fashion ID), Meta Platforms Ireland Ltd. is a joint controller with us for the specific step of collecting and transmitting data via the Pixel. Meta has its own responsibilities for what happens to this data afterward.
- Meta's Data Policy: https://www.facebook.com/privacy/policy/
- Meta's Controller Addendum: https://www.facebook.com/legal/controller_addendum
7. International Data Transfers
Some of your data may be transferred to and processed in the United States (e.g. by Meta, or by US-based service providers). These transfers are covered by the European Commission's Standard Contractual Clauses (SCCs).
8. Your Rights Under GDPR
You have the right to:
- Access the personal data we hold about you
- Correct or update inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Data portability
- Withdraw consent at any time, without affecting processing that already occurred
- Lodge a complaint with your local data protection supervisory authority
To exercise these rights, contact [CONTACT EMAIL]. We will respond within the timeframe required by applicable law.
9. Data Retention
We retain form submissions (name, email, phone) for as long as needed to fulfill the purpose collected, or until you request deletion, and no longer than until deletion is requested. Pixel/cookie data retention is governed by Meta's own policies.
10. Children's Data
This Site is not directed at, and we do not knowingly collect data from, anyone under 16. If we learn we've collected data from a child without a valid legal basis, we will delete it.
11. Security
We use reasonable technical and organizational measures (encrypted storage, restricted access) to protect your data. No transmission or storage method is 100% secure, and we cannot guarantee absolute security.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date reflects the most recent revision. Material changes will be highlighted via the cookie banner or a Site notice.
13. Contact Us
Questions about this policy or your data:
[CONTACT EMAIL] Northern Media [REGISTERED ADDRESS]