Privacy policy

This policy explains how Northstar Ridge Limited ("we", "us") collects and uses personal data when you use this website, contact us, or when we contact your business. It also explains your rights under UK data protection law, including the UK GDPR and the Data Protection Act 2018.

Each of our brands (for example Vitaltrack and Visiark) has its own privacy policy on its own website. That policy covers orders and customer accounts with that brand.

Who we are

Northstar Ridge Limited is the data controller for the personal data described in this policy. We are registered in England and Wales (company number 17274747), and our registered office is Hillfoot, Formby Lane, Aughton, Ormskirk, Lancashire, L39 7HG, United Kingdom. You can contact us about privacy at hello@northstarridge.co.uk.

The data we collect

Data	Where it comes from	Why we use it	Lawful basis
Your name, email address and anything you include in your message	You, when you email us	To reply to you and deal with your enquiry	Legitimate interests (responding to enquiries), or steps towards a contract
Business contact details: business name, business phone number, business email, website, town and public review information	Public sources, such as business listings on Google Maps and businesses' own websites	To contact businesses about work we need doing, or about our services	Legitimate interests (finding trades and growing our business)
Messages you send us by text or email, and records of messages we send you	You and our messaging systems	To keep track of conversations and honour your preferences	Legitimate interests
Technical data: IP address, browser type, pages requested and the date and time	Your browser, when you visit this website	To run the website securely and prevent abuse	Legitimate interests (security)

We don't use this website to collect special category data, and we don't knowingly collect data about children.

If we contacted your business

We may contact tradespeople and other businesses using contact details that they've made publicly available, for example to ask whether they're available for work or to tell them about our services. When we do:

• we only use business contact details that the business has published;
• we tell you who we are and how to reach us;
• if you ask us not to contact you again, we'll stop and keep a minimal record of your number or email address so that we don't contact you by mistake in future;
• when a message promotes our own products or services, we follow the Privacy and Electronic Communications Regulations (PECR), including any consent rules that apply to sole traders and partnerships.

You can object at any time by replying to our message or by emailing hello@northstarridge.co.uk.

Cookies

This website doesn't use advertising or analytics cookies. See our cookie policy for details.

Who we share data with

We don't sell personal data. We share it only with service providers who help us run our business. They act on our instructions and must keep the data secure. They are:

• Website hosting: our hosting provider, which runs this website and our systems;
• Email and messaging: the providers we use to send and receive email and text messages;
• Professional advisers: for example our accountants and lawyers, where needed.

We may also disclose data where the law requires it, or to protect our rights.

International transfers

Some of our service providers may store or process data outside the UK. Where they do, we make sure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement or Addendum approved by the ICO.

How long we keep data

• Enquiries and correspondence: up to 2 years after our last contact, unless we need them longer for a contract or a legal claim.
• Business contact details used for outreach: up to 2 years after we last used them, or until you ask us to stop. After that, we keep only the minimal record needed to avoid contacting you again.
• Website security logs: up to 30 days.
• Records we must keep by law (for example accounting records): for the period the law requires.

Your rights

You have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct inaccurate data;
• ask us to delete your data;
• ask us to restrict how we use your data;
• object to our use of your data, including for direct marketing (we'll always stop direct marketing when asked);
• ask us to transfer data you've given us to another organisation, where this applies.

To use any of these rights, email hello@northstarridge.co.uk with "Data request" in the subject. We'll respond within one month. We may need to confirm your identity first.

Complaints

If you're unhappy with how we've handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO): visit ico.org.uk/make-a-complaint or call 0303 123 1113.

Security

We use appropriate technical and organisational measures to protect personal data. These include encrypted connections (HTTPS), restricted access to our systems and two-factor authentication on administrative accounts.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.