Privacy Policy

This Privacy Policy explains how Northstar Procurement Group Ltd ("we", "us", "our") collects, uses and protects personal data when you use our website nsprocurement.co.uk or engage our procurement services. We are committed to protecting your privacy in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Northstar Procurement Group Ltd is the data controller for the personal information described in this policy. We are a company registered in England & Wales under company number 16675624. You can contact us at hello@nsprocurement.co.uk or on +44 7346 004536.

2. Information we collect

Contact details you submit through our enquiry or quick order forms — name, company, email, phone number.
Enquiry details — the requirement, specifications, quantities and any files or notes you share.
Correspondence — emails, messages and call notes exchanged during a project.
Technical data — basic device, browser and usage information collected by our hosting platform for security and performance.

3. How we use your information

To respond to enquiries and prepare quotes.
To source suppliers, request quotations and manage purchase orders on your behalf.
To communicate with you about live projects and follow up on outstanding requirements.
To meet our legal, accounting and record-keeping obligations.
To improve our website and services.

4. Lawful bases

We rely on the following lawful bases under UK GDPR:

Contract — to take steps at your request before entering into a contract and to deliver services.
Legitimate interests — to respond to enquiries, run our business and keep our records.
Legal obligation — to comply with tax, accounting and regulatory requirements.
Consent — where required, for example if you opt in to marketing communications.

5. Sharing your information

We only share your information where necessary to deliver our services or meet legal obligations. This may include:

Suppliers we approach on your behalf, limited to what is needed to obtain a quote or place an order.
Trusted service providers who help us run the business (for example hosting, email and accounting).
Regulators, law enforcement or professional advisers where legally required.

We do not sell your personal data.

6. International transfers

Some of our service providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement.

7. How long we keep it

We keep enquiry and project records for as long as needed to deliver our services and to comply with legal, tax and accounting obligations — typically up to seven years after our last interaction.

8. Your rights

Under UK GDPR you have the right to:

Access the personal data we hold about you.
Ask us to correct inaccurate or incomplete data.
Ask us to delete your data where there is no ongoing legal reason to keep it.
Object to or restrict certain processing.
Withdraw consent at any time where processing is based on consent.
Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, email hello@nsprocurement.co.uk.

9. Cookies

Our website uses only essential cookies required for the site to function and basic analytics to help us understand usage. We do not use advertising or cross-site tracking cookies.

10. Security

We use appropriate technical and organisational measures to protect your data, including encrypted connections, access controls and vetted service providers. No system is completely secure, but we work to minimise risk and respond quickly to any incident.

11. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page with the "Last updated" date at the top.

12. Contact us

Questions about this policy or how we handle your data? Email hello@nsprocurement.co.uk or get in touch via our contact page.