Privacy Policy
Last updated: 08 October 2026.
Identity and Role of the Data Controller
filmcresty acts as the data controller for the purposes of this privacy policy. We are a company based in the United Kingdom specialising in professional courses on live production decks and control rooms, including multi-camera switching, live broadcasting techniques, real-time video operation, and management of television and streaming productions. Our registered address is Beaconsfield Studios, Station Road, Beaconsfield, Buckinghamshire, HP9 1LG, United Kingdom. For any questions regarding this policy or our data practices, please contact us at [email protected] or 01494 671234.
Scope of This Notice and the People It Covers
This privacy policy applies to all visitors to our website, individuals who enquire about or enrol in our courses, participants in training sessions, and anyone who interacts with our services. It covers personal data collected through our contact form, course registration processes, and any other interactions with our commercial website. The notice explains how we handle data in compliance with the UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations.
Categories of Personal Data and Sources
We collect personal data directly from you when you use our contact form, register for courses, or communicate with us. Categories include identity information such as name, contact details including email address and telephone number, professional background details relevant to course enrolment, and technical data such as IP address and browser type obtained automatically. We may also receive information from third-party payment processors when you complete a transaction for our specialised training programmes.
Purpose-by-Purpose Explanation of Processing and Legal Basis
We process your data to respond to enquiries and manage course registrations under the legal basis of contract performance. Marketing communications are sent only with your consent. Website analytics and service improvement rely on legitimate interests. Compliance with legal obligations, such as financial record-keeping for our commercial activities, forms another basis. Each purpose is assessed to ensure the processing is necessary and proportionate.
Whether Providing Data Is Required and Consequences
Providing certain personal data is necessary to access our courses and respond to your requests. If you do not supply required information such as contact details for enrolment, we may be unable to process your registration or deliver the training. Optional data, such as additional professional details, enhances your experience but is not mandatory.
Cookies and Similar Technologies
Our website uses cookies and similar technologies to ensure functionality and analyse usage. Please refer to our Cookie Policy for detailed information on the types of cookies employed and how to manage your preferences through the site-wide cookie banner.
Processors, Service-Provider Categories, Recipients and Disclosures Required by Law
We engage service providers such as hosting companies, payment processors, and email delivery platforms to support our course operations. These processors are bound by contractual safeguards. We may disclose data to authorities when required by law, including for tax or regulatory compliance related to our UK-based business.
International Transfers and Safeguards
Some of our service providers may be located outside the United Kingdom. In such cases, we ensure appropriate safeguards such as standard contractual clauses are in place to protect your personal data during transfers.
Specific Retention Periods or Criteria
We retain personal data for as long as necessary to fulfil the purposes outlined. Course enrolment records are kept for seven years to meet accounting and legal requirements. Enquiry data is retained for up to two years unless you request deletion earlier. Technical logs are deleted after twelve months.
Security and Data-Minimisation Practices
We implement appropriate technical and organisational measures to protect personal data against unauthorised access or loss. Data minimisation principles are applied so that only information necessary for the stated purposes is collected and processed.
All Applicable Data-Subject Rights and Exercising Them
You have rights to access, rectification, erasure, restriction, portability, and objection under UK GDPR. To exercise these rights, contact us using the details provided at the start of this policy. We will respond within one month of receiving a verified request.
Right to Withdraw Consent and Object to Direct Marketing or Profiling
Where processing is based on consent, you may withdraw it at any time by contacting [email protected]. You can also object to direct marketing or any profiling activities by using the same contact method or opting out via communications we send.
Right to Complain to the Competent Supervisory Authority
If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office, the UK supervisory authority for data protection matters.
Children or Age Restrictions
Our courses are intended for adults aged eighteen and over. We do not knowingly collect personal data from children under eighteen. If we become aware that such data has been collected, it will be deleted promptly.
Automated Decision-Making and Profiling
We do not engage in automated decision-making or profiling that produces legal or significant effects on individuals. Any analytics performed are for internal service improvement only.
Policy Changes and Effective Date
We may update this privacy policy to reflect changes in law or our practices. The last updated date is 08 October 2026. Continued use of the website after updates constitutes acceptance of the revised terms.