Privacy Policy
Last updated: 23 September 2026
Identity and role of the data controller
headlinofy acts as the data controller for the purposes of this privacy policy. We are responsible for deciding how and why your personal data is processed when you interact with our professional resource dedicated to studio production in motion. This includes services covering studio equipment setup, dynamic camera operation, lighting and sound waves, and workflows for television news and live shows. Our registered address is Beaconsfield Studios, Station Road, Beaconsfield, Buckinghamshire, HP9 1LG and we can be contacted at [email protected] or 01494 671234.
Scope of the notice and the people it covers
This notice applies to all visitors to our website, including individuals who use our contact form, subscribe to updates, or otherwise engage with our commercial offerings. It covers personal data collected from users located in the United Kingdom and explains our practices under UK GDPR and the Data Protection Act 2018. The notice does not apply to third-party websites linked from our pages.
Categories of personal data and the sources from which they are obtained
We collect personal data directly from you when you complete our contact form or communicate with us. Categories include identification details such as name, contact information including email address and telephone number, and any additional information you choose to provide in messages. We may also obtain technical data such as IP address and browser type automatically through server logs. No data is obtained from third-party sources unless you explicitly authorise it.
Purpose-by-purpose explanation of processing and the legal basis for each purpose
We process your data to respond to enquiries submitted via the contact form under the legal basis of legitimate interests and, where applicable, consent. We maintain records of interactions to improve our resource on studio production under legitimate interests. Compliance with legal obligations requires processing for accounting and regulatory purposes. Each purpose is limited to what is necessary and explained clearly at the point of collection.
Whether providing data is required and the consequences of not providing it
Providing contact details through our form is voluntary. However, if you choose not to supply required fields such as email address, we may be unable to respond to your query. Failure to provide data will not affect your ability to browse the majority of our site content but may limit access to interactive features.
Cookies and similar technologies
We use cookies and similar technologies to ensure the site functions correctly and to remember your preferences. A separate Cookie Policy explains the types of cookies used, their purposes, and how you can manage them. Please refer to that document for full details, as it forms part of our overall approach to privacy under PECR.
Processors, service-provider categories, recipients, and disclosures required by law
We engage trusted processors such as hosting providers, email delivery services, and analytics platforms to support our operations. These entities process data only on our instructions and under appropriate contracts. We may disclose data to law enforcement or regulatory bodies when required by law or to protect our rights.
International transfers and the safeguards used when they apply
Some of our processors may be located outside the United Kingdom. In such cases we rely on adequacy regulations or standard contractual clauses approved by the UK government to ensure an adequate level of protection for your personal data during transfer.
Specific retention periods or defensible criteria for deciding them
Contact form data is retained for up to two years after the last interaction to allow follow-up and audit compliance. Technical logs are kept for twelve months. Data is deleted or anonymised once the retention period expires unless a longer period is required by law.
Security and data-minimisation practices
We implement appropriate technical and organisational measures including encryption, access controls, and regular reviews to protect personal data. We collect only the minimum data necessary for each purpose and train staff on data protection responsibilities. No security measure can be guaranteed as completely effective.
All applicable data-subject rights and a practical method for exercising them
You have the right to access, rectification, erasure, restriction, portability, and objection regarding your personal data. To exercise these rights please contact us at [email protected] or 01494 671234. We will respond within one month and may request identification to verify your request.
The right to withdraw consent and object to direct marketing or profiling
Where processing is based on consent you may withdraw it at any time by contacting us. You also have the right to object to direct marketing and any profiling activities. We do not conduct profiling for marketing purposes without explicit consent.
The right to complain to the competent supervisory authority
If you are dissatisfied with our handling of your data you may lodge a complaint with the Information Commissioner's Office at ico.org.uk. We encourage you to contact us first so we can address your concerns directly.
Children or age restrictions
Our website and resources are intended for professionals and individuals aged eighteen or over. We do not knowingly collect personal data from children under eighteen. If we become aware that such data has been collected we will delete it promptly.
Automated decision-making and profiling
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals. Any analytics we perform are for internal improvement only and do not result in automated decisions affecting you.
Policy changes and the effective or last-updated date
We may update this policy to reflect changes in law or our practices. The last updated date appears at the top of this page. Continued use of the site after changes constitutes acceptance of the revised policy. Previous versions are available on request by contacting [email protected].