Privacy Policy

Last updated: 02 November 2026

Identity and Role of the Data Controller

shiftory acts as the data controller for the personal data processed through this website. We are responsible for determining the purposes and means of processing your personal data in connection with our professional hub for live television production courses. Our registered address is 15 Holland Park Gardens, London W14 8DZ, United Kingdom. For any queries regarding this policy please contact us at [email protected] or by telephone on +44 20 7605 4123.

Scope of This Notice

This privacy notice applies to all visitors to our website, individuals who enquire about or enrol in our courses on studio equipment integration, camera techniques, acoustic optimisation, lighting setups and production processes, as well as anyone who contacts us via the contact form or provides information through other means. It covers data processing carried out in the United Kingdom and explains how we comply with the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations.

Categories of Personal Data and Sources

We collect personal data directly from you when you complete forms, register for courses or communicate with us. This includes identity information such as your name, contact details including email address and telephone number, professional background, course preferences and any information you voluntarily provide in messages. We may also receive technical data such as IP address, browser type and device identifiers from your device when you browse the site. No data is obtained from third-party sources without your knowledge.

Purposes of Processing and Legal Bases

We process your data for several distinct purposes. To respond to enquiries and administer course bookings we rely on the legal basis of contract performance or steps taken at your request prior to entering a contract. For marketing communications about new courses and events we rely on your consent. Website analytics and improvement of our service are based on our legitimate interests in understanding user behaviour while ensuring those interests do not override your rights. Compliance with legal obligations such as tax and accounting requirements provides another basis for retaining certain records.

Whether Providing Data Is Required

Supplying certain personal data is necessary to use the contact form or enrol in a course. If you choose not to provide required information we may be unable to process your enquiry, confirm your booking or deliver the requested service. You can still browse most of the site without providing personal data, although some interactive features will be unavailable.

Cookies and Similar Technologies

We use cookies and similar technologies to enable essential site functions, remember your preferences and gather anonymised usage statistics. A separate Cookie Policy explains the types of cookies deployed, their purposes and how you can manage your preferences through your browser settings or the site-wide cookie banner.

Processors, Recipients and Disclosures

We engage carefully selected service providers to support our operations, including website hosting, email delivery, payment processing and course management platforms. These processors act only on our documented instructions and are bound by data-processing agreements. We may also disclose data to professional advisers, regulators or law-enforcement bodies where legally required.

International Transfers

Some of our service providers may be located outside the United Kingdom. In such cases we ensure appropriate safeguards are in place, such as UK-approved standard contractual clauses or binding corporate rules, to protect your personal data to a standard essentially equivalent to UK GDPR requirements.

Retention Periods

We retain personal data only for as long as necessary for the purposes for which it was collected. Enquiry records are kept for up to two years. Course enrolment and payment records are retained for six years to meet accounting and tax obligations. Marketing consent records are kept until you withdraw consent or for a maximum of three years after your last interaction. Technical logs are deleted after twelve months unless required for security investigations.

Security and Data-Minimisation Practices

We implement appropriate technical and organisational measures including encryption in transit, access controls and regular staff training to protect personal data against unauthorised access, loss or alteration. We collect only the minimum data necessary for each purpose and regularly review our data holdings to delete information that is no longer required.

Your Data-Subject Rights

Under UK GDPR you have the right to access the personal data we hold about you, request rectification of inaccurate data, request erasure in certain circumstances, restrict processing, data portability where technically feasible, and object to processing based on legitimate interests. You may exercise these rights by contacting us at [email protected] or +44 20 7605 4123. We will respond within one month, extendable by two further months for complex requests.

Right to Withdraw Consent and Object to Marketing

Where processing is based on consent you may withdraw that consent at any time by using the unsubscribe link in emails, adjusting your preferences via the contact form or writing to us. You also have an absolute right to object to direct marketing and to any profiling undertaken for that purpose.

Right to Complain

If you are not satisfied with our response you have the right to lodge a complaint with the Information Commissioner’s Office, the UK supervisory authority, via their website or by post to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

Children and Age Restrictions

Our courses are intended for adults aged eighteen and over. We do not knowingly collect personal data from children under eighteen. If we become aware that we have inadvertently collected such data we will delete it promptly.

Automated Decision-Making and Profiling

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects. Any analytics we perform are limited to aggregate usage statistics and do not involve individual profiling for decision-making purposes.

Policy Changes

We may update this policy from time to time to reflect changes in law, technology or our business practices. The current version will always be available on this page with the last-updated date clearly displayed. Significant changes will be notified via a prominent notice on the website or by email to registered users where appropriate.