Last updated [INSERT DATE]. This policy explains what personal information Northlight TV collects, why we collect it, and what rights you have over it.
Who we are
Northlight TV is a trading name of [INSERT COMPANY NAME], a company registered in England and Wales under number [INSERT], with its registered office at [INSERT ADDRESS]. We are the data controller for the information described here.
We are registered with the Information Commissioner’s Office under registration number [INSERT ICO NUMBER]. You can contact us about anything in this policy at [INSERT PRIVACY EMAIL].
What we collect
- Account details — your name, email address, postal address and phone number.
- Payment details — handled by our payment provider, [INSERT PAYMENT PROVIDER]. We receive confirmation of payment and the last four digits of the card. We do not store full card numbers.
- Service data — which devices you sign in from, IP address, approximate location derived from it, and records of when the service is used. We need this to apply your screen limit and to keep accounts secure.
- Support correspondence — emails, form submissions and notes from calls.
- Website data — information collected through cookies and similar technologies. See the cookies section below.
Why we use it, and our lawful basis
- To provide the service you have paid for, including sign-in, billing and support. Lawful basis: performance of a contract.
- To keep accounts secure and prevent misuse, such as sharing credentials beyond your plan. Lawful basis: our legitimate interests in protecting the service.
- To meet our legal duties, including tax and accounting records. Lawful basis: legal obligation.
- To send marketing emails, where you have asked to receive them. Lawful basis: consent. You can withdraw it at any time using the unsubscribe link.
Who we share it with
We do not sell your personal information. We share it only with suppliers who help us run the service, and only as far as they need it:
- Our payment provider, [INSERT PAYMENT PROVIDER]
- Our hosting provider, [INSERT HOSTING PROVIDER]
- Our email provider, [INSERT EMAIL PROVIDER]
- Our analytics provider, [INSERT ANALYTICS PROVIDER, OR DELETE THIS LINE]
- Professional advisers, and law enforcement or regulators where we are legally required to do so
Where your information is held
[INSERT WHERE DATA IS STORED.] Where a supplier processes information outside the UK, we rely on the UK International Data Transfer Agreement, the UK Addendum to the EU standard contractual clauses, or UK adequacy regulations. [CONFIRM WHICH APPLIES]
How long we keep it
- Account and billing records — for the life of your account and then six years, to meet HMRC requirements.
- Support correspondence — [INSERT PERIOD] after your query is closed.
- Service and sign-in logs — [INSERT PERIOD].
- Marketing consent records — until you withdraw consent, and then a record of the withdrawal itself.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the information we hold about you
- have inaccurate information corrected
- ask us to delete information where there is no good reason for us to keep it
- ask us to restrict how we use it while a concern is resolved
- receive certain information in a portable format, or have it sent to another provider
- object to us using your information on the basis of legitimate interests
- withdraw consent at any time where consent is the basis we rely on
Email [INSERT PRIVACY EMAIL] to use any of these rights. We will respond within one month. There is no charge in normal circumstances.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk, or by calling 0303 123 1113. We would rather hear from you first so we can put things right.
Cookies
Our website uses cookies that are strictly necessary for it to work, and [INSERT WHETHER ANALYTICS OR MARKETING COOKIES ARE USED]. Non-essential cookies are only set once you agree to them, and you can change your choice at any time. [INSERT COOKIE BANNER DETAILS ONCE INSTALLED]
Children
Our service is sold to adults aged 18 and over. We do not knowingly collect information from children. If you believe a child has given us personal information, contact us and we will delete it.
Changes to this policy
If we change this policy we will update the date at the top, and tell account holders by email where the change is significant.