Privacy Policy

for Film Tank — www.filmtank.co.uk

Effective date: 13 October 2025  |  Last updated: 13 October 2025

Summary: This policy explains what personal data we collect, how we use it, and your rights under UK GDPR and the Data Protection Act 2018. It applies to visitors and customers using this website and our related services.

Contents

  • 1. Who we are and how to contact us

  • 2. Personal data we collect

  • 3. How and why we use your data (lawful bases)

  • 4. Cookies and analytics

  • 5. Sharing your data

  • 6. International transfers

  • 7. How long we keep your data

  • 8. Security

  • 9. Your rights

  • 10. Children

  • 11. Changes to this policy

  • 12. Contact and complaints

1. Who we are and how to contact us

Film Tank (“we”, “us”, “our”) is the data controller for personal data collected via this website.

Registered/Trading address: Film Tank The Old Stables 1st Floor Market Street Highbridge TA9 3BP UK
Email: info@filmtank.co.uk

If you appoint a Data Protection Officer or privacy lead, add details here: [Name, contact email].

2. Personal data we collect

We collect and process the following categories of personal data, depending on how you use our site and services:

Category

Examples

How we collect it

Purpose

Identity & contact data

Name, email, phone, company, role, postal address

Contact forms, enquiries, project onboarding, newsletter sign‑ups

Respond to enquiries, provide quotes, deliver projects, send updates you request

Project data

Briefs, reference materials, schedules, contributor details, location info

Provided by you during pre‑production, production, and post‑production

To plan, produce, and deliver our video services and manage the relationship

Payment & billing data

Billing address, VAT number, transaction details (processed by our payment provider)

Invoices, contracts, or online checkout via a third‑party processor

Process payments, refunds, and comply with accounting and tax obligations

Usage & technical data

IP address, device and browser type, pages viewed, time on page, referrers

Automatically via cookies, logs, and analytics

Site operation, security, performance, and insights to improve our content

Marketing preferences

Newsletter opt‑ins, event RSVPs

Form checkboxes and email platforms

Send communications you have consented to; you can opt out anytime

We do not seek to collect special category data (such as health information) through the website. If a project requires handling such data, we will only do so with explicit consent and additional safeguards.

3. How and why we use your data (lawful bases)

We use your personal data on one or more of the following lawful bases under UK GDPR:

  • Consent — for example, when you subscribe to marketing.

  • Contract — to take steps at your request before entering a contract and to perform a contract with you.

  • Legal obligation — for tax, accounting, or compliance requirements.

  • Legitimate interests — to operate and improve our site and services, prevent fraud, and protect our rights, provided these interests are not overridden by your rights and freedoms.

Where we rely on legitimate interests, we balance them against your interests and keep a record of that assessment.

4. Cookies and analytics

We use essential cookies to make the site work and, with your consent, optional cookies for analytics and similar tools.

  • You will see a consent banner when you first visit. You can change your choices at any time via [link to cookie settings].

  • Analytics help us understand site performance and content engagement. These tools may collect anonymised or pseudonymised identifiers.

For details about specific cookies and their lifetimes, see our [link to Cookie Notice].

5. Sharing your data

We share personal data only when necessary and with appropriate safeguards:

  • Service providers (processors): hosting, analytics, email delivery, customer relationship tools, payment processing, and project management platforms.

  • Third‑party embeds: if we embed players or widgets (for example Vimeo or YouTube), those services may set their own cookies and collect usage data. Please review their privacy notices.

  • Legal or regulatory requests: where required by law, to enforce our terms, or to protect rights and safety.

  • Business transfers: if we restructure or sell part of the business, data may transfer under this policy.

We do not sell your personal data.

6. International transfers

Some providers may process data outside the UK. Where that happens, we ensure appropriate safeguards such as the UK International Data Transfer Agreement or standard contractual clauses, and additional measures where required.

7. How long we keep your data

  • Enquiries and routine correspondence: normally up to [e.g. 24 months] from last contact.

  • Project and contract records: for the life of the project and then as needed to exercise or defend legal claims.

  • Invoices and financial records: at least 6 years to meet tax and accounting laws.

  • Analytics data: kept in aggregate or anonymised form where possible, or for [e.g. 14 months] when identifiable.

  • Marketing lists: until you unsubscribe or withdraw consent.

8. Security

We use technical and organisational measures appropriate to the risk, including access controls, encryption in transit, secure hosting, regular updates, and staff confidentiality commitments. No system is perfectly secure, but we work to prevent unauthorised access, use, alteration, and loss.

If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office where required.

9. Your rights

Under UK GDPR you have the right to:

  • Access your personal data and receive a copy

  • Rectify inaccurate or incomplete data

  • Erase your data in certain circumstances

  • Restrict or object to processing

  • Data portability

  • Withdraw consent where processing is based on consent

  • Lodge a complaint with the ICO

To exercise your rights, email info@filmtank.co.uk. We may need to verify your identity. We aim to respond within one month.

10. Children

Our site is not intended for children under 16. We do not knowingly collect data from children via the website. If you believe a child has provided data, please contact us and we will delete it. If our services are likely to be used by under‑18s, we will follow the UK Age‑appropriate Design Code.

11. Changes to this policy

We may update this policy to reflect changes in law or our practices. We will post the new version with an updated date. If changes are significant, we may notify you by email or on the site.

12. Contact and complaints

If you have questions or concerns about privacy, contact us at info@filmtank.co.uk.

If you are not satisfied with our response, you can complain to the Information Commissioner's Office (ICO): ico.org.uk | Tel: +44 (0)303 123 1113.

Controller: Film Tank | Website: www.filmtank.co.uk

Tip: keep a record of cookie categories and vendors in a separate Cookie Notice and link it in section 4.