Privacy Policy
Last updated: 23 September 2026
Identity and Role of the Data Controller
headlineko acts as the data controller for the personal data processed through this website. We are a company registered in the United Kingdom and operate a commercial website providing professional resources on studio production topics including equipment setup, camera operation, lighting, sound, and workflows for television and live shows. Our registered address is 126-128 New Kings Road, Fulham, London, SW6 4LZ, United Kingdom and we can be contacted via [email protected] or +44 20 8153 3260.
Scope of This Notice and the People It Covers
This privacy notice applies to all visitors and users of the website who are located in the United Kingdom. It covers individuals who interact with our site by submitting contact forms, browsing pages, or otherwise providing information. The notice explains how we collect, use, store, and share personal data in compliance with UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations.
Categories of Personal Data and Sources
We collect personal data directly from you when you use the contact form or interact with the site. This includes your name, email address, phone number if provided, and any message content. We may also collect technical data such as IP address, browser type, device information, and usage patterns through cookies and similar technologies. Data is obtained primarily from you as the data subject and secondarily from automated logs generated by your device and browser.
Purpose-by-Purpose Explanation of Processing and Legal Basis
We process personal data for several distinct purposes. To respond to enquiries submitted via the contact form we rely on legitimate interests and consent where appropriate. To maintain and improve website functionality and security we process technical data under legitimate interests. For compliance with legal obligations such as record keeping we process data under legal obligation. Each purpose has a specific lawful basis under UK GDPR Article 6, and we do not process data for purposes incompatible with those disclosed here.
Whether Providing Data Is Required and Consequences of Not Providing It
Providing personal data through the contact form is voluntary. However, if you choose not to provide required fields such as your email address we may be unable to respond to your enquiry. Technical data collected automatically cannot be opted out of entirely without disabling essential site features, which could affect your browsing experience. You are not obligated to provide additional information beyond what is necessary for the stated purposes.
Cookies and Similar Technologies
We use cookies and similar technologies to enable core site functions, analyse usage, and improve performance. Details of the specific cookies deployed, their purposes, and how to manage preferences are set out in our separate Cookie Policy, which is accessible via the site-wide cookie banner. You can adjust your browser settings to refuse cookies, although this may limit certain functionalities.
Processors, Service-Provider Categories, Recipients, and Disclosures Required by Law
We engage trusted service providers acting as processors to support website hosting, email delivery, analytics, and form processing. These providers are contractually bound to process data only on our instructions and to implement appropriate safeguards. We may disclose personal data to law enforcement or regulatory authorities when required by law or to protect our legal rights. No sale of personal data occurs.
International Transfers and Safeguards
Some of our service providers may be located outside the United Kingdom. Where personal data is transferred internationally we rely on appropriate safeguards such as UK-approved standard contractual clauses or adequacy decisions to ensure an equivalent level of protection. You may request further information about specific transfers by contacting us using the details above.
Specific Retention Periods or Criteria for Deciding Them
Contact form data is retained for up to two years after the last interaction to allow follow-up and record keeping. Technical logs are kept for a maximum of twelve months unless longer retention is required for security investigations or legal compliance. Retention periods are determined by the need to fulfil the original purpose, meet legal obligations, and resolve potential disputes.
Security and Data-Minimisation Practices
We implement technical and organisational measures including encryption in transit, access controls, and regular security reviews to protect personal data. We apply data minimisation by collecting only the information necessary for the stated purposes and by anonymising or deleting data when it is no longer required. While we take reasonable steps to safeguard information, no system can guarantee absolute security.
All Applicable Data-Subject Rights and Practical Method for Exercising Them
Under UK GDPR you have rights to access, rectification, erasure, restriction, portability, and objection. To exercise any of these rights please contact us at [email protected] or +44 20 8153 3260 with sufficient information to verify your identity. We will respond within one month, or inform you if an extension is necessary.
Right to Withdraw Consent and Object to Direct Marketing or Profiling
Where processing relies on consent you may withdraw it at any time by contacting us. You also have the right to object to processing for direct marketing purposes or to profiling. Such objections can be submitted via the contact details provided and will be actioned promptly without affecting the lawfulness of prior processing.
Right to Complain to the Competent Supervisory Authority
If you believe your data protection rights have been infringed you have the right to lodge a complaint with the Information Commissioner’s Office, the UK supervisory authority. Contact details for the ICO are available on their official website. We encourage you to contact us first so we can attempt to resolve any concerns directly.
Children or Age Restrictions
Our website and services are intended for professionals and adults. We do not knowingly collect personal data from children under the age of 18. If we become aware that data from a child has been collected we will delete it promptly. Parents or guardians who believe their child’s data has been submitted should contact us immediately using [email protected].
Automated Decision-Making and Profiling
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects. Any analytics or usage data is processed in aggregate form for service improvement only.
Policy Changes and Effective Date
We may update this privacy policy from time to time to reflect changes in law, technology, or our practices. The last updated date appears at the top of the page. Continued use of the website after changes constitutes acceptance of the revised policy. Previous versions are available upon request by contacting [email protected].