Last Updated: November 2026
We process personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This statement explains how we comply with data protection principles and respect your rights as a data subject.
We process personal data under the following legal bases:
Contractual Necessity: Processing is necessary to perform contracts for studio rental, production services, or equipment hire. This includes scheduling, invoicing, and service delivery.
Legitimate Interests: We process data for business operations, security, and improvement of services where such processing does not override your fundamental rights and freedoms.
Consent: For marketing communications and certain optional services, we obtain explicit consent before processing personal data.
Under GDPR, you have the following rights regarding your personal data:
Right of Access: You may request confirmation of whether we process your personal data and obtain a copy of such data.
Right to Rectification: You may request correction of inaccurate personal data or completion of incomplete data.
Right to Erasure: You may request deletion of personal data where there is no compelling reason for continued processing.
Right to Restriction: You may request limitation of processing under certain circumstances, such as when contesting data accuracy.
Right to Data Portability: You may request transfer of personal data to another service provider in a structured, commonly used format.
Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.
To exercise any of these rights, contact us at [email protected] with your request. We will respond within one month of receiving a valid request, though complex requests may require up to three months with prior notification.
We may request additional information to verify your identity before processing requests that involve access to or deletion of personal data.
For questions specifically related to data protection compliance, you may contact our designated data protection contact at the email address provided above.
Personal data is primarily processed within the United Kingdom and European Economic Area. Where transfers to third countries occur, we ensure adequate safeguards are in place through standard contractual clauses or other approved mechanisms.
We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts on data subjects.
In the event of a data breach likely to result in high risk to your rights and freedoms, we will notify you without undue delay in accordance with GDPR requirements. We maintain incident response procedures to detect, investigate, and respond to potential breaches.
If you believe we have not processed your personal data in accordance with GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.
ICO contact details are available at: www.ico.org.uk
We review this GDPR compliance statement regularly to ensure continued alignment with regulatory requirements and our processing activities. Material changes will be communicated through appropriate channels.