North Star Documentary Studio Ltd respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how North Star Documentary Studio Ltd collects, uses, stores, shares, and protects personal data when you interact with us, including when you visit our website, contact us, engage our services, participate in documentary projects, or otherwise communicate with us.
1. Introduction and company information
This Privacy Policy applies to the processing of personal data by North Star Documentary Studio Ltd, the data controller responsible for your personal data.
Company name: North Star Documentary Studio Ltd
Address: North Star Doc Studio, 14-16 Leather Lane, London EC1N 7SU, UK
Email: [email protected]
Phone: +44 20 7846 3927
As a documentary-studio business, we may process personal data in the context of production development, research, filming, editing, distribution, marketing, business administration, and communications with clients, contributors, crew, suppliers, and website visitors.
2. Data collection and processing
We may collect and process the following categories of personal data, depending on your relationship with us:
- Identity data: name, title, role, organization, likeness, voice, image, and other identifiers.
- Contact data: email address, postal address, telephone number, and social media or professional contact details.
- Professional data: job title, employer, qualifications, expertise, portfolio, credits, and experience.
- Project and production data: interview notes, production schedules, casting or contributor information, release forms, call sheets, location details, and project-related correspondence.
- Website and technical data: IP address, browser type, device identifiers, log data, cookies, and usage information.
- Financial and transactional data: billing details, payment records, invoices, and bank or payment information where necessary.
- Communications data: messages, emails, call notes, meeting records, and any information you choose to provide to us.
- Special category data: in limited circumstances, we may process data revealing racial or ethnic origin, religious or philosophical beliefs, health data, sexual orientation, or political opinions, where such data is relevant to documentary production, contributor consent, legal obligations, or other lawful grounds.
- Criminal offence data: where legally permitted and necessary for compliance, safeguarding, or production-related due diligence.
We may collect personal data directly from you, from public sources, from our clients or business partners, from third-party service providers, or from publicly available professional and social platforms where relevant and lawful.
3. Purpose of data processing
We process personal data for the following purposes:
- to provide documentary production and related creative services;
- to develop, research, produce, edit, market, distribute, and archive documentary content;
- to identify, contact, and manage contributors, interviewees, clients, suppliers, and collaborators;
- to obtain and manage releases, permissions, and consents;
- to administer contracts, invoices, payments, and business operations;
- to communicate with you and respond to enquiries;
- to manage our website, security, and technical performance;
- to improve our services, workflows, and audience engagement;
- to comply with legal, regulatory, accounting, insurance, and record-keeping obligations;
- to protect our rights, safety, property, staff, contributors, and business interests;
- to establish, exercise, or defend legal claims;
- to carry out internal administration, quality control, and business analysis.
4. Legal basis for processing
We only process personal data where we have a lawful basis to do so. Depending on the specific activity, the legal bases may include:
- Consent: where you have given clear consent, including for certain production uses, marketing communications, cookies where required, or special category data processing.
- Contract: where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
- Legal obligation: where processing is necessary to comply with applicable laws, regulations, court orders, or other legal requirements.
- Legitimate interests: where processing is necessary for our legitimate interests or those of a third party, and your interests and fundamental rights do not override those interests. Our legitimate interests may include operating and developing our documentary business, safeguarding contributors and staff, managing communications, preventing fraud, maintaining security, and protecting legal rights.
- Vital interests: in rare cases, where processing is necessary to protect someone’s life or physical safety.
- Public interest or other applicable grounds: where permitted by law and relevant to documentary journalism, artistic expression, archiving, or similar lawful purposes.
Where we process special category data, we will do so only where an appropriate condition under applicable law applies, such as explicit consent, substantial public interest, legal claims, vital interests, or processing necessary for journalistic, artistic, or similar purposes where applicable.
5. Data sharing and third parties
We may share personal data with third parties where necessary and lawful, including:
- clients, broadcasters, commissioners, distributors, and production partners;
- contributors, interviewees, performers, crew members, and suppliers involved in a project;
- professional advisers, including lawyers, accountants, auditors, insurers, and consultants;
- service providers who support our business, such as hosting providers, email and communication platforms, IT support, cloud storage providers, payment processors, transcription services, and project management tools;
- regulators, law enforcement agencies, courts, or public authorities where required by law or to protect rights and safety;
- potential buyers or investors in connection with a business sale, merger, restructuring, or similar transaction, subject to confidentiality obligations.
We require third parties who process personal data on our behalf to use appropriate safeguards and to act only in accordance with our instructions and applicable law.
6. Data transfer to third countries
Where personal data is transferred outside the UK or, where applicable, outside the European Economic Area, we will take steps to ensure an adequate level of protection. These steps may include:
- transferring data to countries recognized as providing adequate protection;
- using appropriate contractual safeguards, such as standard contractual clauses or equivalent approved mechanisms;
- implementing supplementary technical and organizational measures where necessary;
- obtaining your consent where legally required.
By using our services or communicating with us, you acknowledge that some service providers or project partners may be located in countries with different data protection laws, and that we will use reasonable measures to safeguard your personal data in such cases.
7. Storage duration
We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, contractual, insurance, and regulatory requirements.
- Project and production records are generally retained for the duration of the project and for a period afterward as needed for business, legal, and archival purposes.
- Financial and tax records are retained for the period required by applicable law.
- Marketing data is retained until you unsubscribe, object, or we determine it is no longer needed.
- Website and technical logs are retained for a limited period unless longer retention is required for security, investigation, or legal reasons.
When personal data is no longer required, we will securely delete, anonymize, or archive it where appropriate.
8. User rights
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: to request confirmation of whether we process your data and obtain a copy of it.
- Rectification: to request correction of inaccurate or incomplete data.
- Erasure: to request deletion of your data where legally permitted.
- Restriction: to request limitation of processing in certain circumstances.
- Data portability: to request your data in a structured, commonly used, machine-readable format where applicable.
- Objection: to object to processing based on legitimate interests or for direct marketing.
You may also have the right to challenge certain decisions, request information about international transfers, and exercise additional rights provided under applicable privacy laws. Please note that these rights may be limited where necessary to protect the rights of others, comply with legal obligations, or preserve documentary, journalistic, artistic, or archival purposes where relevant and lawful.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.
If you withdraw consent, we may no longer be able to provide certain services or use your data for the relevant purpose. To withdraw consent, please contact us using the details below.
10. Right to complain
If you have concerns about how we handle your personal data, we encourage you to contact us first so we can try to resolve the matter.
You also have the right to lodge a complaint with the relevant data protection authority, including, where applicable, the Information Commissioner's Office (ICO) in the United Kingdom. You may wish to seek independent legal advice regarding your rights.
11. Data security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures may include:
- access controls and role-based permissions;
- password protection and multi-factor authentication where appropriate;
- secure storage and encrypted transfers where appropriate;
- staff confidentiality obligations and training;
- regular review of security procedures and service providers;
- backup, recovery, and incident response measures.
While we take reasonable steps to protect personal data, no system can be guaranteed to be completely secure. You should also take care when sending information to us electronically.
12. Contact information
If you have any questions about this Privacy Policy or our data practices, or if you wish to exercise your rights, please contact:
North Star Documentary Studio Ltd
North Star Doc Studio, 14-16 Leather Lane, London EC1N 7SU, UK
Email: [email protected]
Phone: +44 20 7846 3927
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, technologies, or business operations. Any updated version will be posted on our website or otherwise made available to you where appropriate.
We encourage you to review this Privacy Policy periodically. Your continued use of our services after any changes become effective indicates your acceptance of the updated Privacy Policy, to the extent permitted by law.
Effective date: This Privacy Policy is effective as of the date it is published or last updated.