Privacy Policy

Last updated: 26 October 2026

Identity and Role of the Data Controller

theatry acts as the data controller for the purposes of this privacy policy. We are responsible for determining the purposes and means of processing personal data collected through our website. Our operations are based in the United Kingdom and we comply with the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

Scope of This Notice and Who It Covers

This notice applies to all visitors to our website, including prospective and existing users of our professional resources on studio production, equipment setup, camera operation, lighting, sound and live broadcast workflows. It covers data collected when you browse, submit forms via our Contacts page, or otherwise interact with the site. It does not cover third-party websites linked from our pages.

Categories of Personal Data and Sources

We collect contact details such as name and email address when you use the contact form. Usage data including IP address, browser type, pages visited and referring URLs are gathered automatically. No data is obtained from public sources or third-party brokers. All information comes directly from you or from your device during normal site interaction.

Purposes of Processing and Legal Bases

Personal data is processed to respond to enquiries submitted through the contact form under the legal basis of legitimate interests. Site analytics and performance monitoring are conducted under legitimate interests to improve service quality. Cookies are used for essential functionality under the basis of consent where required by PECR. Marketing communications are never sent without explicit consent.

Requirement to Provide Data and Consequences

Providing contact details via the form is voluntary. If you choose not to supply required fields, we will be unable to respond to your enquiry. Browsing data is collected automatically and you may prevent collection by adjusting browser settings or refusing non-essential cookies via the site-wide banner.

Cookies and Similar Technologies

Our site uses cookies and similar technologies for essential operation and performance measurement. A site-wide cookie banner allows you to manage preferences. Please refer to our separate Cookie Policy for full details on types of cookies, durations and how to control them.

Processors, Recipients and Legal Disclosures

We engage service providers such as hosting companies, email delivery platforms and analytics providers who act as processors under contract. Personal data may be disclosed when required by law, regulation or court order, or to protect our rights and the safety of users.

International Transfers of Data

Some processors may be located outside the United Kingdom. Where transfers occur we rely on UK adequacy regulations or standard contractual clauses approved by the Information Commissioner’s Office to ensure appropriate safeguards.

Data Retention Periods

Contact form submissions are retained for twelve months after the last communication to allow follow-up and record keeping. Usage logs are kept for a maximum of twenty-six months for security and analytics purposes. Cookie data is deleted in accordance with the durations stated in the Cookie Policy.

Security and Data Minimisation

We implement appropriate technical and organisational measures including encryption in transit, access controls and regular security reviews. Data collection is limited to what is necessary for the stated purposes. While we take reasonable steps, no system can guarantee absolute security.

Your Data Subject Rights

Under UK GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and objection. You may exercise these rights by contacting us using the details on our Contacts page or by emailing info@nfts.co.uk. We will respond within one month.

Withdrawing Consent and Objecting to Marketing

Where processing relies on consent you may withdraw it at any time by using the unsubscribe link in any communication or by contacting info@nfts.co.uk. You have an absolute right to object to direct marketing and profiling for marketing purposes.

Right to Complain to the Supervisory Authority

If you believe your data protection rights have been infringed you may lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk. We encourage you to contact us first so we can attempt to resolve any concerns.

Children and Age Restrictions

Our website and resources are intended for professionals aged eighteen and over. We do not knowingly collect personal data from individuals under eighteen. If we become aware that such data has been collected we will delete it promptly.

Automated Decision-Making and Profiling

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects. Basic analytics are used solely to understand aggregate site usage.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in law or our practices. The date of the most recent revision appears at the top of the page. Continued use of the site after changes constitutes acceptance of the updated policy.