Privacy Policy

KINGSTREETIMAGES LTD

Data Protection & Privacy Policy

In accordance with the UK General Data Protection Regulation (UK GDPR)

and the Data Protection Act 2018

 

Company: Kingstreetimages Ltd

Registered Address: 79 The Maltings Business Centre, Stanstead Abbotts, Hertfordshire, SG12 8UU

Company Number: 08116742

Website: kingstreetimages.com

Telephone: 01920 449362

Policy Version: 1.0

Date of Issue: June 2026

Review Date: June 2027

 

1. Introduction

Kingstreetimages Ltd is committed to protecting the privacy and personal data of all individuals we work with, including clients, suppliers, contributors, and members of the public who appear in our productions.

This policy explains how we collect, use, store, and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We process personal data only where we have a lawful basis to do so, and we are committed to being transparent about how and why we use it.

2. Whom We Are

Kingstreetimages Ltd is the data controller for the personal data we collect and process. As a video and photography production company, we work with personal data in the course of producing films, photography, and digital content for arts, culture, heritage, and business clients.

Data Controller Contact:

Kingstreetimages Ltd

79 The Maltings Business Centre

Stanstead Abbotts

Hertfordshire

SG12 8UU

Email: mat@kingstreetimages.com

Tel: 01920 449362

3. Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Clients and Contacts

  • Name, job title and organisation
  • Contact details including email address, telephone number and postal address
  • Financial information for invoicing and payment purposes
  • Communications and correspondence

3.2 Individuals Appearing in Productions

  • Name and contact details (where consent is required)
  • Image, likeness, and voice as captured in video or photography
  • Biographical or personal information included in documentary or profile content

3.3 Website and Enquiry Data

  • Name and contact details submitted via enquiry forms or email
  • Technical data including IP address, browser type and usage data via cookies

4. Lawful Basis for Processing

We rely on the following lawful bases under UK GDPR:

  • Contract: to fulfil our contractual obligations to clients and suppliers
  • Legitimate interests: to manage our business operations, communications, and marketing
  • Consent: where individuals have given explicit consent, particularly for those appearing in productions
  • Legal obligation: where we are required to retain data for legal or tax purposes

Where we rely on consent, individuals have the right to withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. How We Use Personal Data

We use personal data for the following purposes:

  • To deliver video and photography production services to our clients
  • To communicate with clients, suppliers, and collaborators about projects
  • To manage contracts, invoicing, and payments
  • To obtain and manage release forms and consent for individuals appearing in productions
  • To send information about our services where we have a legitimate interest or consent to do so
  • To comply with legal and regulatory obligations

6. Sensitive Personal Data

Some of the content we produce may involve sensitive or special category personal data (for example, productions featuring individuals from vulnerable groups, or content touching on health, religion, or ethnicity).

Where we process special category data, we obtain explicit consent from the individuals concerned and apply additional safeguards including restricted access and secure storage.

7. Data Sharing

We do not sell personal data to third parties. We may share data in the following circumstances:

  • With clients where the data forms part of a deliverable (e.g. a commissioned film)
  • With trusted suppliers or contractors engaged to assist with specific productions (e.g. editors, sound engineers), under appropriate data sharing agreements
  • With professional advisers including accountants and legal advisers
  • With regulatory authorities or law enforcement where required by law

Any third parties with whom we share data are required to handle it in accordance with UK GDPR.

8. Data Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. Our standard retention periods are:

  • Client and financial records: 7 years (in line with HMRC requirements)
  • Signed consent and release forms: for the duration of the licence period of the production, plus 3 years
  • Enquiry and correspondence data: 2 years from last contact
  • Website analytics data: 26 months

When data is no longer required, it is securely deleted or destroyed.

9. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

  • Password protection and encryption on devices and storage systems
  • Secure cloud storage with access controls
  • Limiting access to personal data to those who need it for their role
  • Regular review of our data security practices

In the event of a personal data breach that poses a risk to individuals, we will notify the Information Commissioner’s Office (ICO) within 72 hours of becoming aware, and affected individuals where required.

10. International Transfers

We do not routinely transfer personal data outside the UK. Where any transfer is necessary, we ensure that appropriate safeguards are in place in accordance with UK GDPR.

11. Your Rights

Under UK GDPR, individuals have the following rights in relation to their personal data:

  • Right of access: to request a copy of the personal data we hold about you
  • Right to rectification: to request correction of inaccurate or incomplete data
  • Right to erasure: to request deletion of your data in certain circumstances
  • Right to restriction: to request that we limit how we use your data
  • Right to data portability: to receive your data in a structured, machine-readable format
  • Right to object: to object to processing based on legitimate interests or for direct marketing
  • Rights related to automated decision-making: we do not use automated decision-making or profiling

To exercise any of these rights, please contact us at mat@kingstreetimages.com. We will respond within one month.

12. Cookies

Our website uses cookies to improve user experience and analyse traffic. A cookie is a small text file placed on your device. We use:

  • Essential cookies: necessary for the website to function
  • Analytics cookies: to understand how visitors use our site (e.g. Google Analytics)

You can control cookies through your browser settings. Where consent is required, we will ask for it before placing non-essential cookies.

13. Complaints

If you have concerns about how we handle your personal data, please contact us in the first instance at mat@kingstreetimages.com.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

  • Website: ico.org.uk
  • Telephone: 0303 123 1113
  • Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

14. Changes to This Policy

We review this policy annually and following any significant change to our operations or to data protection law. The current version is always available on our website at kingstreetimages.com.

 

Kingstreetimages Ltd  |  79 The Maltings Business Centre, Stanstead Abbotts, Hertfordshire, SG12 8UU

kingstreetimages.com  |  01920 449362  |  Company No. 08116742