Privacy notice.

Who handles your information

Northbridge Rights DMCC operates this website and is responsible for the personal information it collects for its own purposes.

Privacy and correspondence contact: enforcement@northbridgerights.com.

Information and purposes

• Enquiries and case requests: your name, email address, message, notice reference, relevant URLs and phone number. We use this information to locate matters, verify your connection to them and respond. Case details are reviewed and sent manually; submitting a request does not automatically grant access.
• Enforcement records: information supplied by rights holders and correspondents, publicly available material relevant to alleged infringement, URLs, dated evidence, notices and responses. We use relevant records to assess rights, handle disputes and pursue or defend legal claims.
• Technical and security information: our hosting service processes request information such as IP addresses, timestamps, browser information, requested paths and response outcomes to deliver and protect the website. For requests submitted to our contact and case forms, we record the IP address, a request reference, timestamp, endpoint and response status in restricted Vercel security logs. Form contents are not written to these security logs.
• Website analytics: after you accept, Microsoft Clarity processes page interactions, session replay, browser and device information, and technical request data such as IP addresses. We use this information to understand website usage and improve the website. Both forms and their response messages are marked for masking in Clarity; we do not send their fields as custom analytics identifiers.

Grounds for processing

For enquiries, service requests, security and case handling, we use the grounds available under applicable law, including responding to your requested service or taking steps towards an engagement, meeting legal obligations, and establishing, exercising or defending legal claims. Where legitimate interests is an available legal basis, our interests are handling correspondence, protecting the website and enforcing rights, balanced against individuals’ rights. We obtain consent where required.

The online case request asks for a phone number to help us verify your connection to a matter. You may contact us by email instead of using a form. We may need sufficient information to identify a matter and verify your entitlement before disclosing case details. We do not make automated decisions determining infringement, liability or enforcement consequences from website activity.

Providers and recipients

Vercel hosts the website and processes technical request data. Google Workspace handles our mailbox and correspondence. When you submit an online form, your browser sends the validated fields to FormSubmit to forward the request to our inbox. FormSubmit also receives technical request information, such as your IP address and browser headers. This includes names, email addresses, messages, notice references, relevant URLs and phone numbers where requested. FormSubmit states that it retains submissions for 30 days; see its privacy policy.

Microsoft provides Clarity. Microsoft also processes Clarity data for its own purposes, including improving services and advertising, as described in the Microsoft Privacy Statement and Clarity terms. Our integration sends an analytics-storage consent signal only after acceptance and keeps advertising-storage permission denied.

Where relevant and lawful, case information may be shared with the rights holder, instructed legal advisers, the platform or service provider handling a notice, and courts or public authorities. Information submitted about a disputed notice may therefore be included in the handling of that dispute. We limit disclosure to what is relevant to the purpose.

Website technologies and your choice

The website presents an access dialog requiring acceptance of analytics and session recording before continuing, with an option to leave. Clarity is not loaded before acceptance. The privacy notice remains accessible without accepting. If your browser sends Global Privacy Control, we keep Clarity off and allow access without analytics.

We store your acceptance in a first-party preference cookie for up to 180 days. After acceptance, Clarity may set its own analytics cookies, including _clck and _clsk, to recognise browser visits and sessions. We do not add a separate device fingerprint or custom identity-resolution identifier. See Microsoft’s cookie information.

You can withdraw using Cookie preferences in the website footer or withdraw analytics consent here. Withdrawal removes the site’s analytics preference and first-party Clarity cookies, reloads the website to stop recording, and returns you to the access dialog. It does not delete data Microsoft already holds. Technical request processing by the hosting and form-delivery services continues independently as described above.

Retention and international processing

We retain correspondence and case information for as long as needed to handle the matter and any relevant legal obligations, disputes or claims. The criteria include the type of record, whether a matter is still open, applicable limitation periods and any requirement to preserve evidence. You can ask about the retention applicable to your information.

Hosting logs follow the retention available under our Vercel service configuration; we have not configured an additional permanent log archive. Clarity data is subject to Microsoft’s retention periods: ordinary session playback for 30 days, and some recordings, heatmaps and interaction data for up to nine months. See Clarity retention information.

Our organisation is in the UAE. Providers and recipients may process information in other countries, including the United States. Where applicable law requires transfer safeguards, the relevant transfer must use an authorised mechanism or exception. Contact us for information about recipients and safeguards relevant to your matter.

Your rights and contact

Depending on the law that applies, you may have rights to access and correct information, request deletion or restriction, object to processing, receive portable information, withdraw consent and complain to the competent data-protection authority. Some requests may be limited by legal obligations, the rights of others or the need to establish, exercise or defend claims. Withdrawal does not affect processing that was lawful before withdrawal.

Write to enforcement@northbridgerights.com with your request. We may ask for proportionate information to verify identity or authority before disclosing personal information. Do not send identity documents unless specifically requested through an appropriate channel.

We will update this notice when the website’s processing changes and show the revision date above.