Privacy Policy

Last updated: 13 September 2026

Identity and role of the data controller

spotlumix acts as the data controller for personal data processed through this website. We determine the purposes and means of processing in line with UK GDPR and the Data Protection Act 2018. Our registered office is at Beaconsfield Studios, Station Road, Beaconsfield, Buckinghamshire, HP9 1LG and you may contact us using [email protected] or 01494 671234.

Scope of the notice and the people it covers

This notice applies to all visitors to the site, including prospective students, professionals in television production, and any individual who interacts with our forms or services. It covers data collected in the United Kingdom and explains how we handle information when you access our resources on studio equipment, camera operation, lighting, sound, and live production workflows.

Categories of personal data and sources

We collect identification details such as name and job title, contact information including email address and telephone number, technical data such as IP address and browser type, and usage information from your interactions with course descriptions. Data is obtained directly from you via contact forms, indirectly through analytics tools, and from third-party service providers where permitted.

Purpose-by-purpose explanation of processing and legal basis

We process data to respond to enquiries under the legal basis of legitimate interests or consent. For delivering course materials and managing enrolments we rely on contract performance. Marketing communications occur only with consent. Analytics and site improvement rest on legitimate interests. Compliance with legal obligations forms an additional basis where required by PECR or other statutes.

Whether providing data is required and consequences

Supplying contact details is necessary to receive responses to queries or access certain resources. Failure to provide this information may prevent us from fulfilling your request or delivering services. Technical data is collected automatically and you cannot opt out without disabling essential site functions.

Cookies and similar technologies

We use cookies and similar tracking technologies to remember preferences and analyse traffic. A separate Cookie Policy explains the types in use and how to manage them. Please refer to that document for full details on consent mechanisms and browser settings.

Processors, recipients and disclosures required by law

Categories of processors include hosting providers, email delivery services, analytics platforms and payment processors. We may disclose data to regulators or law enforcement when legally compelled. All processors operate under contractual safeguards aligned with UK GDPR.

International transfers and safeguards

Some processors may transfer data outside the United Kingdom. Where this occurs we rely on adequacy regulations, standard contractual clauses or other approved safeguards to protect your information at a level equivalent to UK standards.

Retention periods and criteria

Enquiry data is retained for up to two years after the last contact. Course enrolment records are kept for six years to meet accounting and legal requirements. Technical logs are deleted after twelve months unless needed for security investigations. Criteria include legal obligations, legitimate business needs and the exercise of data subject rights.

Security and data-minimisation practices

We apply technical measures such as encryption in transit, access controls and regular vulnerability assessments. Data collection is limited to what is necessary for each purpose. While we strive to protect information, no system can guarantee absolute security against all threats.

Data subject rights and how to exercise them

You may request access, rectification, erasure, restriction, portability or objection to processing. Submit requests to [email protected]. We will respond within one month and may request identity verification to protect your data.

Right to withdraw consent and object to direct marketing

Where processing relies on consent you can withdraw it at any time by contacting us or using unsubscribe links. You may object to direct marketing at any point and we will cease such processing without undue delay.

Right to complain to the supervisory authority

If you are dissatisfied with our response you may lodge a complaint with the Information Commissioner’s Office at ico.org.uk or via their helpline. We encourage you to contact us first to resolve concerns.

Children and age restrictions

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we become aware that such data has been provided we will delete it promptly.

Automated decision-making and profiling

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects. Any analytics are used solely for service improvement and do not result in automated outcomes affecting individuals.

Policy changes and effective date

We may update this policy to reflect legal or operational changes. The date at the top indicates the latest version. Continued use of the site after updates constitutes acceptance of the revised terms.