1. Who we are (data controller)
For the purposes of the UK GDPR and the Data Protection Act 2018, the data controller is Northbridge Computers Ltd. We operate a computer retail and service business in London, providing product guidance, custom desktop builds, and after-sales support.
150 Bishopsgate
London, EC2M 4NQ
United Kingdom
This policy covers our website and related communications. It does not cover third-party websites that may be referenced from our pages. If you navigate away from our site, review the privacy information provided by that third party.
2. Personal data we collect
We collect only the information reasonably needed to answer your questions, provide quotes, deliver support, and improve our website. Depending on what you do on the site, we may collect the following categories of personal data:
- Identity and contact data: full name, email address, phone number (optional), and the content of messages you send.
- Technical data: IP address, approximate location derived from IP (city/region level), device type, operating system, browser type and version, language settings, and referring page.
- Usage data: pages visited, time spent on pages, clicks and navigation patterns, and interactions with site components (such as opening the mobile menu or cookie banner choice).
- Cookies and similar identifiers: small files and browser storage values used to remember preferences and measure site performance.
We do not ask for sensitive personal data such as health information, political opinions, or financial account numbers through our website forms. Please do not send such information to us by email or web form. If you do, we will handle it with care and may delete or redact it where appropriate.
3. How we collect personal data
We collect information in the following ways:
Web forms
When you submit a support request or a custom build request, we receive the data you type into the form. We use it to respond and to keep a record of the request.
Email and phone
If you contact us by email or phone, we process the contact details and the conversation content to provide support and follow up where needed.
Server logs
Our hosting infrastructure records basic logs for security and troubleshooting, such as IP address, request time, and requested page.
Analytics tools
If you consent to analytics cookies, we may measure how visitors use the site to improve content structure and performance. We currently reference Google Analytics 4 as an analytics option.
We do not use hidden redirects or content changes for different visitors. The content you see is the same content our systems provide to all users and crawlers.
4. Legal bases for processing (GDPR Article 6)
We process personal data only when we have a valid legal basis. The basis depends on the context:
| Data category | Typical purpose | Legal basis |
|---|---|---|
| Name, email, message content | Respond to requests, provide quotes, support | Contract necessity (Art. 6(1)(b)) or legitimate interests (Art. 6(1)(f)) |
| Phone number (optional) | Call-back support when you request it | Legitimate interests (Art. 6(1)(f)) or consent (Art. 6(1)(a)) depending on context |
| IP address, device and browser information | Security, fraud prevention, site stability | Legitimate interests (Art. 6(1)(f)) |
| Analytics cookies and usage data | Measure and improve site performance | Consent (Art. 6(1)(a)) |
| Records needed for compliance | Accounting and legal obligations | Legal obligation (Art. 6(1)(c)) |
Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect processing that took place before the withdrawal.
5. Purposes of processing
We use personal data for the following purposes:
- Service delivery and quotes: to answer questions about products, prepare custom build quotes, and explain options such as delivery and financing.
- Customer support: to troubleshoot issues, handle warranty queries, and keep continuity in communication across emails and calls.
- Website operation: to maintain and secure the site, monitor performance, and prevent misuse.
- Analytics (consent-based): to understand which pages are helpful and improve navigation and content quality.
- Legal compliance: to meet obligations related to accounting, dispute handling, and regulatory requirements.
Marketing: we do not send marketing emails by default when you contact us for support. If we introduce optional newsletters or promotions in the future, we will collect explicit opt-in consent and provide a clear unsubscribe option in every message.
6. Retention periods
We keep personal data only for as long as necessary for the purposes described above, then delete or anonymise it. Retention depends on the type of record:
If you ask us to delete personal data, we will evaluate your request and delete data where we can. Some records may need to be retained to comply with legal obligations or to establish, exercise, or defend legal claims. In those cases, we will restrict use of the data to those purposes.
8. International transfers
Our primary operations are in the United Kingdom. Some of our processors may store or access data outside the UK or the European Economic Area (EEA), for example when using cloud hosting or analytics services. When personal data is transferred internationally, we use appropriate safeguards to protect it.
Safeguards may include:
- Adequacy regulations where the destination country is recognised as providing an adequate level of protection.
- Standard Contractual Clauses (SCCs) or equivalent UK addendum terms with our processors where applicable.
- Additional contractual and technical measures such as access controls, encryption in transit, and minimisation.
You can contact us at [email protected] to request more information about the safeguards used for a specific processor.
9. Your rights (UK GDPR)
If the UK GDPR applies to you, you have rights regarding your personal data. These include:
Access and copies
You can request confirmation of whether we process your data and ask for a copy of the data we hold about you.
Rectification
You can request correction of inaccurate or incomplete information, such as an updated email address.
Erasure
You can ask us to delete personal data in certain circumstances. If legal obligations apply, we may retain limited records.
Restriction
You can ask us to limit processing if you contest accuracy or object to processing while we assess your request.
Data portability
Where processing is based on consent or contract and is automated, you can request your data in a structured, commonly used format.
Object and withdraw consent
You can object to processing based on legitimate interests and withdraw consent at any time for consent-based processing.
To exercise any right, email [email protected] with enough detail to identify your request. We may ask you to verify your identity before providing data or acting on a deletion request. We aim to respond within one month, or inform you if more time is required for complex requests.
Right to complain
You can lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO). Website: ico.org.uk. We encourage you to contact us first so we can try to resolve the issue quickly and transparently.
11. Children’s privacy
Our website and services are not directed to children under 16. We do not knowingly collect personal data from children under 16 through our web forms. If you believe a child has provided us with personal data, contact us at [email protected] and we will take steps to delete the information where appropriate.
If a minor contacts us for support, we will limit processing to what is necessary to respond, and we may request that a parent or guardian contact us for account-related matters where identity verification is needed.
12. Policy updates
We may update this Privacy Policy to reflect changes in our services, legal requirements, or how we operate the website. When we make changes, we will update the “Last Updated” date at the top of this page. For significant changes that affect your choices, we may also provide a clear notice on the website and, where appropriate, notify you by email if we have a working email address from an active support conversation.
Last Updated: January 15, 2026.
13. Contact and Data Protection Officer (DPO)
For privacy questions, requests to access or delete data, or concerns about how data is used, contact our privacy mailbox. Northbridge Computers Ltd does not appoint a formal DPO as a statutory requirement for this business type, but we do assign responsibility for privacy management to a designated privacy contact.
Attn: Privacy Contact
150 Bishopsgate
London, EC2M 4NQ
United Kingdom
For general questions about products and support, visit Support. For legal terms governing the use of this website, see Terms.