How we handle your information.

I · What this covers

Scope.

This policy describes how Northgate™ (legal entity: Northgate Industries, Inc.) collects, uses, and protects personal information through northgatetalent.com and any related services. It applies to every visitor and to the physicians, executives, scientists, sports leaders, and entertainment principals the firm represents.

It is written to comply with the California Consumer Privacy Act and California Privacy Rights Act (collectively, CCPA/CPRA), and to provide equivalent protections to residents of other U.S. states with comprehensive privacy laws. Visitors from the European Union or United Kingdom should also read Section X below.

Last updated: . We update this page when our practices change and indicate the revision date here.

II · What we collect

A short list.

Northgate™ collects only what it needs to operate the site and respond to inquiries. There are three categories:

Information you give us directly. When you submit the contact form or write to us, we receive your name, email address, telephone number, your stated reason for contacting the firm, and the contents of your message. If you correspond with us by email, we retain that correspondence.

Information collected automatically. Like most websites, ours uses analytics to understand visitor behavior in aggregate. Google Analytics, the LinkedIn Insight Tag, and Apollo.io collect IP address, approximate location, device type, browser, referring URL, pages viewed, and time on each page. These services set cookies. None of this is linked to your name unless you also submit the contact form.

Information from third parties. If you are referred to us by an existing relationship, that party may share your name and a sentence about why you should be in conversation with the firm. We collect nothing from data brokers, list providers, or scraped public profiles.

III · Why we collect it

Three uses, no others.

To respond to you. Anything you submit is read by the partner whose practice fits the brief, and used to continue the conversation you started.

To operate the site. Aggregate analytics help us understand which pages serve readers well and which do not, so we can write better.

To meet legal obligations. Where we are required to retain records for tax, regulatory, or anti-fraud purposes, we do.

We do not use your information for behavioral advertising. We do not sell it. We do not share it for any cross-context advertising purpose.

IV · Who we share it with

Service providers, never advertisers.

Personal information you submit through the site is shared in three narrow circumstances:

With the partner handling your inquiry. Internal use only. The partner does not share your information with other clients or candidates without your written sign-off.

With service providers under contract. Google (for Analytics and Workspace email), LinkedIn (for the Insight Tag), Apollo.io (for visitor analytics), and our hosting and email infrastructure providers. Each is bound by contract to use information only to provide their service to us, not for their own purposes.

When required by law. If a court order, subpoena, or regulatory request compels disclosure, we comply. We will tell you we received such a request unless legally prohibited from doing so.

We do not sell personal information. Under the CCPA/CPRA definitions of “sale” and “share,” Northgate™ does not engage in either. If that ever changes, this page will be revised and prior visitors will be notified.

V · How long we keep it

Only as long as needed.

Contact form submissions and direct correspondence: retained for the duration of any active engagement, plus seven years for record-keeping. Earlier deletion is available on request unless retention is required by law.

Analytics data: Google Analytics retains visitor-level data for fourteen months by default. We do not extend that retention.

Aggregated and de-identified data: Retained indefinitely, because it can no longer identify any individual.

VI · Your rights

What you can ask of us.

Under California law and the equivalent laws of most U.S. states, you have the following rights regarding your personal information:

Right to know. You may request a copy of the personal information we hold about you, the sources we collected it from, the purposes we collected it for, and any third parties we shared it with.

Right to delete. You may request that we delete personal information we have collected from you, subject to legal retention requirements.

Right to correct. You may request that we correct inaccurate personal information we hold about you.

Right to opt out of sale or sharing. Northgate™ does not sell or share personal information for cross-context behavioral advertising. There is nothing to opt out of, but if our practices change, an opt-out mechanism will be added here.

Right to limit use of sensitive personal information. Northgate™ does not collect sensitive personal information as defined under CCPA/CPRA (which includes Social Security numbers, financial account credentials, precise geolocation, racial or ethnic origin, religious beliefs, biometric data, and similar). There is nothing to limit.

Right of non-discrimination. We will not discriminate against you for exercising any of these rights.

How to exercise these rights: Write to [email protected] with the subject line “Privacy Request” and tell us which right you wish to exercise. We will respond within forty-five days, with a one-time extension of up to ninety days if needed and we will tell you why.

We may need to verify your identity before fulfilling certain requests. You may also authorize an agent to make a request on your behalf, in which case we will verify both your identity and the agent’s authorization.

VII · Cookies and tracking

The technical layer.

Northgate™ uses three categories of cookies and equivalent technologies:

Strictly necessary. Required for the site to function. These are not optional and do not collect personal information for analytics or advertising purposes.

Analytics. Google Analytics (cookies prefixed _ga, _gid) and Apollo.io (visitor identification). Used to understand aggregate site usage.

Marketing measurement. The LinkedIn Insight Tag (cookies prefixed li_) is used to measure the effectiveness of any LinkedIn campaigns we may run. We do not currently run paid campaigns; the tag is in place to measure organic traffic from the LinkedIn page.

To opt out of analytics tracking, you may install the Google Analytics Opt-Out Browser Add-on, configure your browser to block third-party cookies, or use a privacy-focused browser. Global Privacy Control (GPC) signals are honored automatically: if your browser sends a GPC signal, we treat it as an opt-out of sale and sharing under CCPA/CPRA.

VIII · How we keep it safe

Reasonable measures, no perfect guarantees.

We use industry-standard technical and organizational measures to protect personal information from unauthorized access, disclosure, alteration, and destruction. These include TLS encryption for data in transit, access controls on data at rest, and limited internal access to a need-to-know basis.

No method of transmission over the internet or method of electronic storage is one hundred percent secure. If we become aware of a breach of personal information, affected individuals will be notified in accordance with applicable law.

IX · Children

Not directed to anyone under eighteen.

Northgate™’s services are intended for licensed physicians, hospital and group representatives, and other adult professionals. We do not knowingly collect personal information from anyone under the age of eighteen. If you believe we have inadvertently collected information from a minor, please contact us and we will delete it.

X · Visitors from outside the United States

GDPR, UK GDPR, and equivalent.

Northgate™ is based in New York and operates primarily within the United States. If you are visiting from the European Union, United Kingdom, or another jurisdiction with comprehensive data-protection law, the same principles outlined above apply, and you may additionally have:

The right to data portability: to receive your personal data in a structured, commonly used format.

The right to object to certain processing activities, including direct marketing.

The right to lodge a complaint with your local supervisory authority.

If we transfer your data outside your jurisdiction, we do so under Standard Contractual Clauses or an equivalent transfer mechanism approved by your local regulator. The legal basis for our processing is either your consent (which you may withdraw at any time) or our legitimate interest in operating the firm and corresponding with you.

XI · Changes to this policy

When and how.

We update this policy when our data practices change, when the law changes, or when we add a new service that affects how information is handled. The revision date at the top of the page is the canonical timestamp.

If a change is material (meaning it expands what we collect, who we share it with, or what we do with it) we will give notice of the change before it takes effect, either by an in-line banner on the site or by email to anyone who has subscribed to firm communications.

XII · Contact

For privacy questions.

Privacy questions, requests to exercise your rights, or complaints about our handling of your information should be sent to:

Email: [email protected] (subject line: “Privacy Request”)

Your information stays with the partner whose engagement it would belong to.