Privacy Policy
Last updated: 2026-08-02 · Version: legal-content/v1
This Privacy Policy explains how Northgate Physio (demo, not a real company) (trading as “Northgate Physio”, “we”, “us”), registered at Ermou 44, Nicosia 1010, Cyprus, collects, uses and protects your personal data when you visit https://northgate-physio.dev.450labs.net, in accordance with the EU General Data Protection Regulation (EU) 2016/679 (GDPR) and the Protection of Natural Persons with regard to the Processing of Personal Data Law of 2018 (Cyprus, Law 125(I)/2018).
1. Data Controller
The controller of your data is Northgate Physio (demo, not a real company). For any matter relating to your personal data you can contact Northgate Physio (demo, not a real company), Ermou 44, Nicosia 1010, Cyprus — hello@450labs.net or email hello@450labs.net.
2. What data we collect
- Information you give us: your email address and any details you submit through forms (e.g. newsletter signup, contact form, order/booking).
- Technical data: IP address, browser type, pages visited — strictly to the extent necessary to operate and secure the site.
- Cookie/analytics data: only where you have given consent (see the Cookie Policy).
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Sending the newsletter / answering enquiries | Consent — Art. 6(1)(a) |
| Fulfilling an order / booking / contract | Performance of a contract — Art. 6(1)(b) |
| Security & correct operation of the site | Legitimate interest — Art. 6(1)(f) |
| Audience statistics | Consent — Art. 6(1)(a) |
4. Recipients & processors
We do not sell your data. We share it only with third-party providers acting as processors on our behalf, under a data-processing agreement (DPA): 450labs, which hosts this website and the self-hosted analytics instance on our behalf. Where a provider is located outside the EEA, the transfer is covered by Standard Contractual Clauses (SCCs).
5. Retention
We keep your data only for as long as needed for the purposes above or as required by law. Newsletter signup data is kept until you unsubscribe.
6. Your rights (GDPR)
As a data subject you have the following rights, which you can exercise free of charge at hello@450labs.net:
- Access to your data (Art. 15).
- Rectification of inaccurate data (Art. 16).
- Erasure (“right to be forgotten”, Art. 17).
- Restriction of processing (Art. 18).
- Portability of your data (Art. 20).
- Objection to processing (Art. 21).
- Withdrawal of consent at any time, without affecting the lawfulness of prior processing.
You also have the right to lodge a complaint with the competent supervisory authority: the Office of the Commissioner for Personal Data Protection (Cyprus), Iasonos 1, 1082 Nicosia, www.dataprotection.gov.cy.
7. Security
We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure.
8. Changes to this Policy
We may update this Policy. The version in force carries the date and version number at the top of the page.