Privacy Policy

Last updated: 18 September 2026

Data Controller Identity and Role

glitstoryx acts as the data controller for the purposes of UK GDPR and the Data Protection Act 2018. We determine the purposes and means of processing personal data collected through our website and services. Our registered address is 24 Shelton Street, London WC2H 9UB, United Kingdom and we can be contacted at [email protected]. We are responsible for ensuring that all processing activities comply with applicable data protection legislation including the Privacy and Electronic Communications Regulations.

Scope of This Privacy Notice

This notice applies to all visitors to our website, individuals who enquire about or purchase our visual storytelling resources, and anyone who otherwise interacts with glitstoryx online. It covers personal data processed in the United Kingdom and explains how we collect, use, store and share information when you access course materials on stage presentation, lighting design, camera framing and workflow optimisation for entertainment media.

Categories of Personal Data and Sources

We collect identification data such as name and email address when you use the contact form. Usage data including IP address, browser type and pages visited is obtained automatically via server logs. Account information is gathered if you register for resources. We may also receive data from third-party analytics providers and payment processors. No data is obtained from public sources or third-party marketing lists.

Purposes of Processing and Legal Bases

We process contact details to respond to enquiries on the basis of legitimate interest and contract performance. Usage data supports website improvement and security under legitimate interest. Order and payment information is processed to fulfil contracts. Marketing preferences are handled only with consent. Each purpose is documented with a corresponding lawful basis and we maintain records of processing activities as required by UK GDPR.

Requirement to Provide Data and Consequences

Providing contact information via the form is voluntary yet necessary to receive replies. Failing to supply required details for purchases prevents contract completion. You may browse publicly available pages without supplying personal data although some interactive features will be unavailable.

Cookies and Similar Technologies

Our site uses cookies and similar tracking technologies to enable essential functions, analyse traffic and remember preferences. Details of the specific cookies deployed, their purposes and duration are set out in our separate Cookie Policy which is accessible via the site-wide cookie banner. You can manage preferences through browser settings or the banner controls at any time.

Processors, Recipients and Legal Disclosures

We engage service providers such as hosting companies, email delivery platforms and payment processors who act under our instructions. These processors are bound by contractual safeguards. Personal data may be disclosed where required by law, court order or regulatory authority. We do not sell personal data to third parties for their own marketing purposes.

International Transfers and Safeguards

Some processors may be located outside the United Kingdom. In such cases we rely on UK adequacy regulations where available or implement appropriate safeguards including standard contractual clauses approved by the Information Commissioner’s Office to ensure an adequate level of protection.

Data Retention Periods and Criteria

Contact form submissions are retained for twelve months after the last correspondence. Account data is kept for the duration of the relationship plus six years to meet tax and contract obligations. Usage logs are stored for twenty-four months for security analysis. Retention periods are reviewed regularly against business needs and legal requirements.

Security and Data Minimisation Practices

We apply technical and organisational measures including encryption in transit, access controls and regular security reviews. Data collection is limited to what is necessary for each stated purpose. While we take reasonable steps to protect information we cannot guarantee absolute security against all threats.

Your Data Subject Rights

Under UK GDPR you have the right to access, rectification, erasure, restriction, portability and objection. Requests should be sent to [email protected]. We will respond within one month and may request identity verification to protect your data. You may also contact us via the form on our Contacts page.

Withdrawing Consent and Objecting to Marketing

Where processing relies on consent you may withdraw it at any time by emailing [email protected] or using unsubscribe links. You have an absolute right to object to direct marketing and profiling for marketing purposes. Withdrawal does not affect processing that occurred before the withdrawal.

Right to Complain to the Supervisory Authority

If you are dissatisfied with our response you may lodge a complaint with the Information Commissioner’s Office at ico.org.uk or by writing to their office. We encourage you to contact us first so we can address concerns directly.

Children and Age Restrictions

Our resources are intended for adults engaged in professional entertainment media production. We do not knowingly collect personal data from individuals under eighteen. If we become aware that data from a child has been collected we will delete it promptly.

Automated Decision-Making and Profiling

We do not engage in automated decision-making that produces legal or similarly significant effects. Basic analytics profiling may occur for service improvement but does not result in automated decisions affecting individuals.

Changes to This Policy

We review this notice periodically and update it to reflect changes in law or practice. The effective date appears at the top of the page. Continued use of the site after updates constitutes acceptance of the revised policy. Previous versions are available upon request to [email protected].