spotlenko

Privacy Policy

Last updated: 5 October 2026

Identity and Role of the Data Controller

spotlenko acts as the data controller for the personal data processed through this website. We are responsible for determining the purposes and means of processing your personal data in connection with our professional resource dedicated to studio production in motion. Our operations are based in the United Kingdom, and we comply with the UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

Scope of This Notice

This privacy notice applies to all visitors to our website, including individuals who access our resources on studio equipment setup, dynamic camera operation, lighting and sound waves, and workflows for television news and live shows. It covers data collected from users in the United Kingdom and explains how we handle information when you interact with our commercial site, contact forms, or cookie banner.

Categories of Personal Data and Sources

We collect personal data such as your name, email address, and any details submitted via the contact form on our Contacts page. Additional information may include IP addresses, browser type, and usage data obtained automatically through cookies and similar technologies. Sources include direct input from you when using forms, as well as data gathered from your device during site visits. We do not collect data from third-party sources beyond standard analytics tools.

Purpose-by-Purpose Explanation of Processing and Legal Basis

We process data to respond to enquiries submitted through the contact form, which is based on legitimate interest or consent where required. Site functionality and security rely on legitimate interest to ensure smooth operation of resources on studio production topics. Marketing communications, if opted into, are processed under consent. Analytics for improving workflows content use legitimate interest. Each purpose is limited to what is necessary, with clear records maintained under UK GDPR accountability rules.

Whether Providing Data Is Required and Consequences

Providing personal data via the contact form is voluntary but necessary to receive responses to your queries about studio equipment or production techniques. Failure to provide required fields may prevent us from processing your request effectively. Automated data collection for site operation cannot be disabled without affecting functionality, though you can manage preferences through the cookie banner.

Cookies and Similar Technologies

We use cookies and similar technologies to enhance site performance and remember preferences. Details on types, purposes, and management options are explained in our separate Cookie Policy, which you can access via the site-wide cookie banner. PECR requirements for consent are followed for non-essential cookies.

Processors, Service-Provider Categories, Recipients, and Disclosures

We engage processors such as hosting providers, email service platforms, and analytics tools to support site operations. These providers process data only on our instructions and under contract. We may disclose data to law enforcement or regulators where legally required, such as under court orders or for fraud prevention. Categories of recipients include IT support services and compliance auditors.

International Transfers and Safeguards

Some processors may be located outside the United Kingdom, potentially involving transfers to countries without adequacy decisions. In such cases, we use appropriate safeguards like standard contractual clauses approved under UK GDPR to protect your data during transmission and processing.

Specific Retention Periods or Criteria

Contact form data is retained for up to two years after the last interaction to handle follow-ups and comply with legal obligations. Usage logs are kept for twelve months for security analysis. Retention criteria include legal requirements, business needs for resource improvement, and your rights to request deletion where applicable.

Security and Data-Minimisation Practices

We implement technical measures such as encryption for data in transit and access controls to protect personal data. Data minimisation is applied by collecting only what is essential for each purpose, with regular reviews to avoid unnecessary storage. While no system is infallible, these steps reduce risks of unauthorised access or loss.

Data-Subject Rights and Exercising Them

You have rights under UK GDPR to access, rectify, erase, restrict processing, and port your data. To exercise these, contact us using the details on our Contacts page or via [email protected]. We will respond within one month, subject to verification of your identity.

Right to Withdraw Consent and Object to Direct Marketing or Profiling

Where processing relies on consent, you may withdraw it at any time by updating preferences or contacting [email protected]. You can also object to direct marketing or any profiling activities by using the same contact methods. Objections will be actioned promptly without affecting prior lawful processing.

Right to Complain to the Competent Supervisory Authority

If you are unsatisfied with our handling of your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the United Kingdom. Contact details for the ICO are available on their official website, and we encourage raising concerns with us first via 01494 671234 or Beaconsfield Studios, Station Road, Beaconsfield, Buckinghamshire, HP9 1LG, United Kingdom.

Children or Age Restrictions

Our website and resources are intended for professionals and adults engaged in studio production work. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware of such collection, the data will be deleted promptly.

Automated Decision-Making and Profiling

We do not engage in automated decision-making or profiling that produces legal or significant effects on individuals. Any analytics used are for aggregate site improvement only and do not target personal decisions.

Policy Changes and Effective Date

We may update this policy to reflect changes in law or practices. The last updated date appears at the top of this page. Continued use of the site after updates constitutes acceptance of the revised terms. For questions, reach us at [email protected] or through the contact form.