Privacy Policy

Northbridge Inclusive Partners

Last updated: 28 September 2026

Northbridge Inclusive Partners is a culture and people risk strategy consultancy. It is a trading division of Northbridge Vantage Ltd, a company registered in England and Wales, company number 17367061, registered office 40 Endymion Mews, Hatfield, United Kingdom, AL10 0EW.

Northbridge Vantage Ltd is the data controller for the personal data described in this notice. We are registered with the Information Commissioner's Office (ICO), registration reference ZC258239.

If you have any questions about this notice or how we use your personal data, please contact Roger Thompson, Founder, at roger@northbridgeinclusive.co.uk.

We only collect the personal data we need for the purposes set out below. Depending on how you deal with us, this may include:

• Contact details: your name, job title, organisation, work email address and work phone number.
• Benchmark and assessment data: if you complete one of our online benchmarks or scorecards, your first name, work email address and your answers to the questions, together with the score and report generated from them.
• Correspondence: the content of emails, messages and call notes when you contact us or we contact you.
• Meeting bookings: the details you give when you book a call with us, such as your name, email address and preferred time.
• Client information: if your organisation works with us, the information needed to deliver and invoice our services.
• Website data: information collected through cookies when you visit our website, such as pages viewed and device type, in aggregated form.

Our benchmarks ask about your organisation's policies and practices, not about individual people. Please do not include personal information about colleagues or other individuals in any free text answers.

• Directly from you, when you complete a benchmark, book a call, email us or work with us.
• From publicly available professional sources, such as your organisation's website and LinkedIn.
• From business contact data providers, which supply professional contact details for people in relevant roles at UK organisations.
• From partners, such as professional bodies or law firms, where they introduce you to us.

Under UK data protection law we must have a lawful basis for using your personal data. We rely on the following:

• To provide your benchmark results and report, and to follow up on them with you. Lawful basis: legitimate interests, in providing the service you asked for and discussing your results.
• To produce our research and cohort reports. Benchmark answers are combined and published in aggregate only. No individual or organisation is named without its written permission. Lawful basis: legitimate interests, in producing research on employer readiness.
• To contact people in relevant professional roles about our services, briefings and research by email or LinkedIn. We only contact people at their work address and in connection with their professional role. Every email tells you how to opt out. Lawful basis: legitimate interests, in promoting our services to organisations that may benefit from them.
• To send updates and newsletters where you have asked to receive them or have given us your details through a benchmark and not opted out. Lawful basis: legitimate interests, or consent where the law requires it. You can unsubscribe at any time.
• To deliver services to clients, manage our relationship and issue invoices. Lawful basis: performance of a contract, and legitimate interests where our contract is with your organisation rather than you personally.
• To keep business, tax and accounting records. Lawful basis: legal obligation.
• To run and improve our website. Lawful basis: consent for non essential cookies, and legitimate interests for essential site operation.

Where we rely on legitimate interests, we have considered your rights and expectations and are satisfied that our use is proportionate. You can object at any time (see section 8).

We do not sell your personal data. We share it only with trusted service providers who process it on our behalf and under our instructions, including:

• ScoreApp (Hyper Targeted Marketing Limited), which hosts our online benchmarks.
• Microsoft and Google, for email, documents and file storage.
• Calendly, for booking calls.
• Brevo, for sending email updates.
• GoDaddy, which hosts our website.
• LinkedIn, where we contact you or publish newsletters there. LinkedIn is responsible for data you share on its platform under its own privacy policy.
• Our professional advisers, such as accountants and insurers, where needed.

We may also share personal data where the law requires it.

If a partner organisation shares a link to our benchmark, it does not receive your answers or results. Your results belong to your organisation, and we will not share them with the partner or anyone else unless you ask us to.

Some of our service providers are based outside the UK, including in the United States and the European Economic Area. Where your personal data is transferred outside the UK, we make sure it is protected by appropriate safeguards, such as UK adequacy regulations, the UK Extension to the EU US Data Privacy Framework, or the UK International Data Transfer Agreement or Addendum.

• Benchmark results: up to 24 months after the relevant cohort report is published, then deleted or fully anonymised.
• Prospective client contact details: up to 24 months from our last contact with you, unless you become a client or ask us to stop sooner.
• Client and financial records: six years after the end of the financial year in which our work ended, to meet legal and tax requirements.
• General enquiries: up to 12 months after the enquiry is closed.

If you ask us not to contact you, we keep a minimal record of your email address on a suppression list so that we can respect that request.

You have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data;
• ask us to restrict how we use your data;
• object to our use of your data, including for direct marketing, which we will always stop on request;
• ask us to transfer your data to another organisation, where applicable;
• withdraw your consent at any time, where we rely on consent.

To exercise any of these rights, email roger@northbridgeinclusive.co.uk. We will respond within one month.

We use appropriate technical and organisational measures to protect your personal data, including secure, access controlled business accounts and reputable service providers. We also hold cyber and data insurance.

Our website uses cookies to analyse traffic and improve your experience. Non essential cookies are only used if you accept them through the cookie banner. You can change your browser settings to refuse or delete cookies at any time.

If you have a concern about how we use your personal data, please contact us first at roger@northbridgeinclusive.co.uk so we can try to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

We may update this notice from time to time. The latest version will always be on this page, with the date it was last updated at the top.