Privacy Policy
Last updated: 30 October 2026
Who we are and our role as data controller
buzzkine operates this commercial website as the data controller under the UK GDPR and Data Protection Act 2018. We determine the purposes and means of processing personal data collected through the site and associated services focused on audiovisual production education.
Who this notice applies to
This policy covers all visitors to the site, individuals who submit enquiries via the contact form, and anyone who interacts with our commercial offerings in the United Kingdom. It does not apply to employment-related data or data processed outside the scope of this website.
Categories of personal data we collect and their sources
We obtain data directly from you when you use the contact form or browse the site. Categories include identification details such as name, contact information including email address and telephone number, and technical data such as IP address, browser type, and device identifiers collected automatically through server logs and cookies.
Purposes of processing and legal bases
We process data to respond to enquiries on the basis of legitimate interests and consent where applicable. We maintain records of interactions to improve site functionality under legitimate interests. Compliance with legal obligations forms the basis for any disclosures required by law. Each purpose is assessed individually to ensure the processing remains necessary and proportionate.
Whether providing data is obligatory
Supplying certain data through the contact form is voluntary yet required to receive a response. Failure to provide requested details may prevent us from processing your enquiry effectively. Browsing data is collected automatically and cannot be declined without disabling essential site features.
Cookies and similar technologies
We use cookies and similar tracking technologies to support site operation and analytics. A separate Cookie Policy explains the types deployed and how to manage preferences via the site-wide cookie banner. Refer to that document for detailed information on consent mechanisms under PECR.
Recipients and categories of processors
Personal data may be shared with service providers acting as processors for hosting, analytics, and email delivery. We also disclose information when required by law enforcement or regulatory bodies. All processors are bound by contractual safeguards ensuring data protection standards equivalent to our own.
International transfers of data
Some processors may be located outside the United Kingdom. In such cases we rely on appropriate safeguards including standard contractual clauses approved by the Information Commissioner’s Office to protect your data during transfer and subsequent processing.
Data retention periods
Contact form submissions are retained for two years to handle follow-up enquiries and then securely deleted. Log data is kept for twelve months for security monitoring. Retention criteria are based on legal requirements, operational necessity, and the time needed to defend against potential claims.
Security measures and data minimisation
We implement technical and organisational measures including encryption, access controls, and regular reviews to protect personal data. Processing is limited to what is strictly necessary for stated purposes, avoiding excessive collection wherever possible.
Your data protection rights
Under UK GDPR you may request access, rectification, erasure, restriction, portability, or objection to processing. To exercise these rights contact us using the details on our Contacts page. We will respond within one month, extendable by two further months for complex requests.
Withdrawing consent and objecting to marketing
Where processing relies on consent you may withdraw it at any time by notifying us. You can also object to direct marketing or profiling by using the contact form or any unsubscribe options provided. Withdrawal does not affect prior lawful processing.
Right to complain to the supervisory authority
If you believe we have mishandled your data you have the right to lodge a complaint with the Information Commissioner’s Office, the UK supervisory authority. Contact details are available on their official website.
Age restrictions and children’s data
The site is intended for individuals aged 18 and over. We do not knowingly collect personal data from children under 18. If we become aware that such data has been submitted we will delete it promptly.
Automated decision-making and profiling
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects. Any analytics performed are for internal improvement only and do not result in automated outcomes affecting individuals.
Changes to this policy
We may update this privacy policy to reflect changes in law or practice. The effective date will be revised accordingly and material changes will be highlighted on this page.
