Privacy Policy

Northbridge BI respects your privacy and is committed to protecting any personal data you share with us. This policy explains what information we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR).

1. Who we are

Northbridge BI is an independent advisory practice operated by Patrick Bodner. For any privacy-related questions, you can reach us at patrick.bodner@northbridgebi.com.

2. What data we collect

We may collect and process the following types of personal data:

• Contact details — name, email address, phone number, and company name when you fill out our contact form or book a call.
• Communication records — emails, messages, and notes from our conversations and consultations.
• Usage data — pages visited, time spent on site, and referring source, collected via analytics for the purpose of improving our website.

We do not collect sensitive personal data (e.g., health, political opinions, religion).

3. How we use your data

We use your personal data for the following purposes:

• To respond to your enquiries and book discovery calls.
• To provide advisory services if we enter into a professional engagement.
• To improve our website and content based on aggregated, non-identifiable usage patterns.
• To comply with legal obligations (e.g., tax and accounting requirements).

We do not sell, rent, or trade your personal data. We do not use your data for automated decision-making or profiling.

4. Legal basis for processing

Under GDPR, we process your personal data on the following lawful bases:

• Consent — when you submit a contact form or explicitly agree to receive communications.
• Contractual necessity — when processing is required to deliver advisory services you have requested.
• Legitimate interests — for analytics and website improvement, provided your rights and freedoms are not overridden.
• Legal obligation — where required by applicable law.

5. Data sharing and third parties

We use a small number of third-party services to operate our business and website. These may process your data on our behalf under strict data processing agreements:

• Calendly — for scheduling discovery calls.
• Supabase / Lovable Cloud — for secure backend data storage and form submissions.
• Vercel — for website hosting and analytics.

6. Data retention

• Enquiry data — up to 2 years from last contact, unless you request earlier deletion.
• Client data — duration of engagement plus applicable legal retention periods (typically 6–10 years).
• Analytics data — retained in aggregated, non-identifiable form.

7. Your rights

Under GDPR, you have rights of access, rectification, erasure, restriction, data portability, and objection. To exercise any of these rights, contact us at patrick.bodner@northbridgebi.com.

8. Cookies and tracking

Our website uses essential cookies for functionality and may use analytics cookies. You can control cookie preferences through your browser settings.

9. Data security

We implement appropriate technical and organisational measures to protect your data from unauthorised access, loss, or disclosure.

10. International transfers

Where data is processed by third parties outside the EEA, we ensure adequate safeguards are in place, such as Standard Contractual Clauses (SCCs).

11. Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.

12. Contact us

Patrick Bodner
patrick.bodner@northbridgebi.com
+49 152 5725 6385