Privacy & Data Protection

Everyone with access to company information: directors, employees, workers, placement students and contractors, wherever the data lives, from the studio to cloud services and location shoots.

We act as a data controller for things like staff records, business contacts, enquiries and CCTV, and as a processor when a client gives us personal data to use within a project they commission.

Client and supplier contacts, contracts and invoices, staff and placement records, contributor names, images, voices and credits within creative work, client-supplied project data, visitor information and CCTV, and the minimum website form information needed to reply.

People can appear in our work through footage, voices, credits and testimonials. Clients are normally responsible for the permissions behind material they give us. Requests to change finished work are assessed individually: a data protection right isn’t an unlimited right to re-edit historic work, but where a lawful request can reasonably be implemented in a recent project, we’ll work with the client to do it.

Nothing is kept indefinitely without a reason. Enquiries and unsuccessful applications are deleted promptly; financial and staff records follow statutory periods; project files are kept where there’s a genuine production, contractual or archival reason; CCTV follows its configured security period.

CCTV at our premises is used for security and to protect staff, visitors and property. Cameras avoid private areas, recordings are access-restricted and other people may be redacted when footage is released.

Staff with access to personal data receive proportionate guidance. The policy is reviewed every year, or sooner if the law, technology or our operations change.