Privacy Policy.

PRIVACY POLICY

This Privacy Policy explains how STIWDIO FFOREST Ltd (“we”, “us”, “our”) collects, uses, stores, and shares personal data when you appear in our documentary, promotional, or branded video and photography productions, submit content to us, contact us via our website or email, or otherwise interact with us. We are committed to protecting your privacy and handling your personal data in accordance with UK GDPR, EU GDPR, and applicable international and US privacy laws.

Who we are
Company name: STIWDIO FFOREST Ltd
team @ fforest.cymru
Website: fforest.cymru

For the purposes of data protection law, we are the data controller.

Definitions
“Content” means any documentary, promotional, branded, editorial, or social media content intended for public or private distribution.
“Production” means any film, documentary, video, photo shoot, or creative project we produce or commission.
“Programme” means any TV programme, online series, or documentary, whether scripted or unscripted, including any versions or edits we create, in which you appear, take part, or have applied or been invited to take part.
“Personal Data” means information that identifies you directly or indirectly, including images, audio, and video recordings.
“Special Category Data” means sensitive personal data such as information about health, ethnicity, religious or philosophical beliefs, political opinions, biometric data, or sexual orientation.

Personal data we collect
If you appear in or contribute to a Production, we may collect and process your name, contact details, professional information, video and audio recordings, photographs, interviews, contributor agreements, consent and release forms, and payment or tax information where applicable.
If you contact us through our website or by email, we collect your name, email address, phone number (if provided), the content of your message, and basic technical data such as IP address and browser type.
In some cases, we may receive information from clients, commissioners, production partners, or publicly available sources such as professional websites or social media profiles.

How we use your personal data
We process personal data where necessary to perform a contract with you, including producing, editing, distributing, and promoting our Productions, managing contributor relationships, and making payments.
We process personal data where necessary for our legitimate interests, including operating our business, communicating with contributors and clients, creating and publishing factual, documentary, or promotional content, and protecting our legal rights.
We process personal data with your consent where required, including marketing communications and certain uses of images or footage.
We may also process personal data to comply with legal obligations such as tax, accounting, or regulatory requirements.
Where relevant, we rely on exemptions relating to freedom of expression, journalism, and artistic or documentary purposes as permitted under UK and EU data protection law.

Special category data
We only process Special Category Data where you have given explicit consent, where you have chosen to make the data public, where processing is necessary for journalistic, artistic, or documentary purposes, or where otherwise permitted by law. If we do not request such data, please do not provide it.

Sharing your information
We may share personal data with clients, commissioners, editors, post-production teams, creative collaborators, distributors, broadcasters, festivals, online platforms, website hosting providers, IT suppliers, and professional advisers such as legal, accounting, or insurance providers. We only share information that is necessary and ensure appropriate safeguards are in place.

International data transfers
We operate internationally and may transfer personal data outside the UK or European Economic Area, including to the United States. Where this occurs, we ensure appropriate safeguards are used, such as UK International Data Transfer Agreements, EU Standard Contractual Clauses, or other lawful transfer mechanisms.

Data retention
We retain personal data only for as long as necessary. Production footage may be retained for the lifetime of the Production and its distribution or exploitation. Contract, financial, and legal records are retained as required by law. Website contact enquiries are typically retained for up to twelve months. Data is securely deleted or anonymised when no longer required.

Your rights
Depending on your location and applicable law, you may have the right to access your personal data, request correction, request deletion, restrict or object to processing, withdraw consent, and request data portability. Some rights may be limited where data forms part of published or archived audiovisual content.

California residents have additional rights under the CCPA/CPRA, including the right to know and delete personal data. We do not sell personal data.

Cookies
This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. For information about viewing the cookies dropped on your device, visit The cookies Squarespace uses.
These necessary and required cookies are always used, which allow Squarespace, our hosting platform, to securely serve this website to you.These analytics and performance cookies are used on this website, as described below, only when you acknowledge our cookie banner. This website uses analytics and performance cookies to view site traffic, activity, and other data.

Analytics
This website collects personal information to power our site analytics, including:
Information about your browser, network, and device
Web pages you visited prior to coming to this website
Your IP address
This information may also include details about your use of this website, including:
Clicks
Internal links
Pages visited
Scrolling
Searches
Timestamps
We provide this information to Squarespace, our website analytics provider, to learn about site traffic and activity.

For proposals, estimates, and contracts
When you contact us or agree to a service, we collect information necessary to negotiate, draft, and execute the service agreement. This information may include your:
Business details (for example, project scope)
Email address
Name Phone number

For website visitors
This website is hosted by Squarespace. Squarespace collects personal information when you visit this website, including:
Information about your browser, network and device
Web pages you visited prior to coming to this website
Web pages you view while on this website
Your IP address
Squarespace needs the data to run this website, and to protect and improve its platform and services. You can read more about how Squarespace uses your data (site usage information of end users) for its own purposes in their Privacy Policy.

Changes to this policy
We may update this Privacy Policy from time to time. The most current version will always be available on our website.

Contact and complaints
If you have questions, concerns, or wish to exercise your rights, please contact us at team @ fforest.cymru