Privacy & Cookie Policy
Effective: July 6, 2026
This Privacy & Cookie Policy explains how Northell collects, uses and protects your personal data across the MediaMagic Verify / iClear website and platform.
1. Introduction
Northell respects your privacy and is committed to protecting your personal data. This privacy notice will inform you as to how we look after your personal data and tell you about your privacy rights and how the law protects you.
2. Important information and who we are
Purpose of this privacy notice
This privacy notice aims to give you information on how Northell collects and processes your personal data through your use of the MediaMagic Verify / iClear website, your use of the MediaMagic Verify / iClear platform, your account, and your other interactions with Northell.
This policy does not apply to personal data processed in the context of employment, recruitment or similar workforce relationships, which are covered by separate privacy notices. Where this website is used to collect personal data for recruitment purposes (e.g., browsing or applying for roles), please refer to our Recruitment Privacy Notice.
This website is not intended for children, and we do not knowingly collect data relating to children.
For the purposes of this policy, 'children' refers to individuals under the age of 18, in line with the UK GDPR and the UN Convention on the Rights of the Child.
It is important that you read this privacy notice together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy notice supplements the other notices and is not intended to override them.
Northell applies the UK GDPR as a global privacy standard together with global data protection law in the countries where it operates. In countries where the UK GDPR conflicts with local law, local law that meets internationally accepted privacy principles will take precedence.
Data Controller
Northell Partners Ltd is the data controller for the MediaMagic Verify / iClear website, platform and associated services.
If you have any questions about this Privacy Notice, or if you wish to exercise your data protection rights, please contact us using the details set out below.
In certain circumstances, Northell Partners Ltd may process personal data on behalf of its customers when providing MediaMagic Verify / iClear services. In those cases, Northell Partners Ltd acts as a data processor, and the customer remains the data controller.
Contact details
Our full details are:
Northell Partners Ltd
Heron Tower, 110 Bishopsgate, London, EC2N 4AY
You have the right to make a complaint to us at any time in relation to our processing of your personal data. You may do so by contacting us via the email address above. If you are unhappy about the way we have handled your complaint you may also complain to your supervisory authority – e.g. the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (https://ico.org.uk).
Changes to the privacy notice and your duty to inform us of changes
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
Third-party links
This website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.
3. The data we collect about you
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We may collect, use, store and transfer different kinds of personal data about you such as:
- Identity and Contact data – such as name, job title, business contact details and organisation.
- Business relationship data – such as records relating to our relationship with customer or prospective customer organisations, account administration details, and related correspondence.
- Transactional and financial data – such as information relating to orders, services provided, invoices, payments and other commercial interactions.
- User and access data – such as user credentials, access permissions and usage information relating to customer-facing platforms or portals where relevant.
- Communications data – including emails, messages and other communications exchanged with us in a business context.
- Technical and Website Usage Data – including IP address, browser information, device identifiers, operating system, authentication records, log data, diagnostic information, platform activity and usage information collected through cookies and similar technologies.
- Content and Verification Data – information submitted to MediaMagic Verify / iClear by authorised users, including documents, images, video, audio and other media files, associated metadata, verification requests, AI-generated outputs, reports, audit logs and platform activity.
AI-assisted processing
MediaMagic Verify / iClear uses artificial intelligence to analyse content submitted by authorised users and generate verification results, risk indicators and explanatory reports.
Where personal data forms part of submitted content, we process that information in accordance with this Privacy and Cookie Policy and applicable data protection laws.
We apply appropriate technical and organisational measures to protect submitted content throughout the verification process.
Further information about our use of artificial intelligence, including the intended use of AI-generated outputs and customer responsibilities, is available in our AI Terms and Responsible AI Policy.
4. How is your personal data collected?
Direct interactions. You may give us your personal Data by filling in forms or by corresponding with us by post, phone, email or otherwise.
Business interactions. We may collect personal data through our dealings with customer and prospective customer organisations, including through account setup, service delivery, meetings, correspondence and contractual arrangements.
Use of the MediaMagic Verify / iClear platform. We collect personal data and Content and Verification Data that you or authorised users submit when using MediaMagic Verify / iClear, including uploaded content, account activity and verification requests.
Automated technologies or interactions. As you interact with our website, we may automatically collect technical data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies.
Contact, Financial and Transaction Data from providers of technical, payment and delivery services.
Identity and Contact Data from publicly available sources, including Companies House and other publicly available business directories where permitted by law.
5. How we use your personal data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- Where we need to perform the contract, we are about to enter or have entered into with you.
- Where it is necessary for our legitimate interests (or those of a third party) and it is not disproportionate to your interests and fundamental rights.
- Where we need to comply with a legal or regulatory obligation.
Purposes for which we will use your personal data
We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.
Not all purposes will apply to every individual. The personal data used will depend on the nature of the interaction with us.
| Purpose/Activity | Type of data | Lawful basis for processing including basis of legitimate interest |
|---|---|---|
| To register you as a new customer and manage our relationship with you as a customer or prospective customer | (a) Identity and contact; (b) Communications | (a) Performance of a contract; (b) Necessary for our legitimate interests (to maintain and develop customer/prospect relationships; to respond to enquiries and manage communications; to keep records of interactions and account administration) |
| To provide access to MediaMagic Verify / iClear, manage user accounts and subscriptions, authenticate users, process payments, provide customer support, maintain the security and availability of the platform, and collect fees and charges due to us | (a) Identity and contact; (b) Transactional and financial; (c) User and access; (d) Communications; (e) Content and verification data | (a) Performance of a contract with you; (b) Necessary for our legitimate interests (to administer user accounts and subscriptions; provide and secure the platform; maintain service continuity and quality; manage payments and financial operations; and prevent fraud and unauthorised access); (c) Compliance with legal obligations (including accounting, tax and regulatory requirements) |
| To manage our relationship with you, including responding to enquiries and day-to-day communications, notifying you about changes to our terms or privacy policy, and asking you to leave a review or take a survey | (a) Identity and contact; (b) Business relationship; (c) Communications | (a) Performance of a contract with you; (b) Necessary to comply with a legal obligation; (c) Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services) |
| To operate, maintain and improve our websites and to administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) | (a) Identity; (b) Contact; (c) Technical | (a) Necessary for our legitimate interests (to operate, maintain and improve our websites; to understand how our websites are used and improve user experience; for running our business, provision of administration and IT services, network security, to prevent fraud); (b) consent where required under applicable e-privacy laws |
| To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you | (a) Identity; (b) Contact; (c) Profile; (d) Usage; (e) Marketing and Communications; (f) Technical | (a) Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy), subject to applicable marketing and e-privacy laws and the right to object; (b) consent where required |
| To use data analytics to improve our website, products/services, marketing, customer relationships and experiences | (a) Technical; (b) Usage | Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy) |
| To make suggestions and recommendations to you about goods or services that may be of interest to you | (a) Identity; (b) Contact; (c) Technical; (d) Usage; (e) Profile | (a) Necessary for our legitimate interests (to develop our products/services and grow our business), subject to applicable marketing and e-privacy laws and the right to object; (b) consent where required |
| To operate our business effectively and lawfully, including corporate administration, compliance with legal and regulatory requirements, and managing or defending legal claims | (a) Identity and contact; (b) Business relationship; (c) Communications | (a) Necessary to comply with a legal obligation; (b) Necessary for our legitimate interests (to run our business efficiently, including corporate governance and administration; in the context of a business reorganisation or group restructuring exercise; to manage legal and regulatory risk; to prevent and detect wrongdoing; and to establish, exercise or defend legal claims) |
| To process content submitted to MediaMagic Verify / iClear, analyse and verify that content, generate AI-assisted outputs and reports, maintain audit logs, and improve the security, reliability and performance of the platform | (a) Identity and contact; (b) User & Access; (c) Content & Verification Data; (d) Technical | (a) Performance of a contract; (b) Legitimate interests (to provide, secure and improve the platform); (c) Compliance with legal obligations where applicable |
6. Cookies
Cookies are small text files that can be used by websites to make a user’s experience more efficient. The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies, we need your permission.
This website uses OneTrust to manage cookie consent preferences. You can review the cookies currently in use, manage your consent preferences, or withdraw your consent at any time using the Cookie Preferences link available on the website. Some cookies are placed by trusted third-party service providers to support the operation, performance and functionality of the MediaMagic Verify / iClear website and platform.
Types of cookies we use
Strictly Necessary Cookies – These cookies are essential for the operation of the website and platform. They enable core functionality such as security, authentication, page navigation and access to secure areas. These cookies cannot be switched off.
Performance Cookies – These cookies help us understand how visitors use our website and platform by collecting information anonymously. They enable us to monitor performance and improve the user experience.
Functional Cookies – These cookies allow the website to remember your preferences, such as language or region, and provide enhanced functionality and personalisation.
Targeting Cookies – These cookies may be used to deliver content and advertising that is more relevant to your interests and to measure the effectiveness of marketing campaigns. These cookies are only used with your consent.
7. Change of purpose
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.
If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
8. Disclosures of your personal data
We may engage carefully selected third-party service providers where this is necessary for the purposes described in this privacy notice, including the following categories of recipients:
Group companies – where appropriate for internal administration, service delivery, reporting and business operations.
Service providers – including providers of IT systems, cloud hosting, authentication services, payment providers, analytics providers, customer relationship management systems, communications platforms and other professional support services, who process personal data on our behalf and in accordance with our instructions.
Professional advisers and auditors – such as legal, financial, insurance and audit advisers, where this is necessary to obtain advice or meet our professional obligations.
Public authorities and regulators – where we are required to do so by law, regulation or a valid legal request.
Third parties relevant to a corporate transaction – such as a merger, acquisition, restructuring or sale of assets, where personal data is shared subject to appropriate safeguards.
A current list of our key sub-processors is available on request or as otherwise made available to customers.
9. International transfers
Northell operates globally and, in some circumstances, personal data may be transferred to or accessed from countries outside the United Kingdom or European Economic Area (EEA).
Where we transfer personal data internationally, we ensure appropriate safeguards are in place in accordance with applicable data protection laws. These safeguards may include adequacy regulations, Standard Contractual Clauses or other approved transfer mechanisms.
An Adequacy Decision
The European Commission can and does assess third countries, and territories and/or specific sectors within third countries to assess whether there is an appropriate level of protection for the rights and freedoms of natural persons. In these instances, no authorisation is required.
Countries that are members of the EEA but not of the EU are accepted as having met the conditions for an adequacy decision.
A list of countries that currently satisfy the adequacy requirements of the Commission is published in the Official Journal of the European Union.
Where an adequacy decision is not in place, we will put adequate safeguards in place to ensure that your personal information remains protected in a manner that is consistent with how it would be protected under UK and EU data protection laws, for example, by agreeing standard contractual clauses adopted by the European Commission/UK Government and undertaking a risk assessment in relation to the importing country.
10. Data retention
How long will you use my personal data?
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
How long we retain personal data will depend on several factors, including:
- the nature of the data and the purpose for which it is processed;
- the nature and duration of our relationship with the relevant organisation;
- whether the data is required to comply with legal or regulatory obligations; and
- whether the data is required in connection with the establishment, exercise or defence of legal claims.
Where you are one of our customers, we will generally retain personal data for the duration of our relationship with the relevant organisation and for a period of up to six years thereafter, unless a longer retention period is required to comply with legal or regulatory obligations, or in connection with the establishment, exercise or defence of legal claims. In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
How we protect your information
We maintain appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
These measures are proportionate to the nature of the information we process and are reviewed regularly to help ensure the ongoing confidentiality, integrity and availability of our systems and services.
11. Your legal rights
Depending on your location and the manner in which we process your personal data, you may have rights regarding your personal data under various data protection laws applicable in your jurisdiction. These rights may include, but are not limited to:
- Request access to your personal data
- Request correction of your personal data
- Request erasure of your personal data
- Object to processing of your personal data
- Request restriction of processing your personal data
- Request transfer of your personal data
- Right to withdraw consent
- Right to Nominate
- Right of Grievance Redressal
- Right not to be subjected to Automated Decision Making
Additional rights may apply depending on your jurisdiction. If you wish to exercise any of the rights set out above, please contact us at info@northell.com.
If you have any questions or concerns about how we handle your personal data, please contact us at info@northell.com. We will do our best to address your concerns. Depending on your location, you may also have the right to contact your local data protection authority or regulator.
Please note that certain rights may be subject to limitations under applicable law.
No fee usually required
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
12. Policy Review
This policy shall be reviewed:
- annually;
- following significant changes to the MediaMagic Verify / iClear website, platform or the way personal data is collected, processed or shared;
- following significant changes to applicable data protection, privacy or e-privacy laws and regulations;
- following a significant information security or personal data breach, or other incident affecting the processing of personal data;
- where changes to our third-party service providers or processing activities materially affect this Privacy & Cookie Policy.
