Privacy Policy

Last updated: 23 September 2026

Who we are and our role as data controller

spotlymedia operates the Course A spotlight media production platform. We act as the data controller for personal data processed in connection with the services described on this website. Our registered address is Top Floor, 11 Blackheath Village, London, SE3 9LA, United Kingdom. We are responsible for deciding how and why your personal data is processed when you use our platform or contact us.

Scope of this notice

This privacy notice applies to all visitors to our website, users of the Course A platform, and anyone who provides personal data to us in the United Kingdom. It covers data collected through the contact form, cookie banner interactions, platform workflows for stage interviews, visual coverage, camera framing, lighting setups and organised entertainment content production.

Categories of personal data we collect

We collect identification data such as your name and email address when you use the contact form. Usage data includes information about how you navigate the site and interact with platform features. Technical data such as IP address, browser type and device information is gathered via cookies. Content-related data may include details you provide about production requirements for interviews or visual coverage projects. We obtain this information directly from you or through automated means when you visit the site.

Purposes of processing and legal bases

We process your data to respond to enquiries submitted via the contact form under the legal basis of legitimate interests. Platform functionality for managing workflows, camera framing and lighting instructions relies on contract performance. Analytics and service improvement use legitimate interests while respecting your choices. Cookie-based tracking for essential site operation is based on consent under PECR. Marketing communications, if you opt in, are processed with your consent.

Whether providing data is mandatory

Supplying contact details through the form is voluntary, but without them we cannot reply to your message. Using the platform requires certain technical data for functionality; refusing cookies may limit some features such as workflow organisation tools. You can manage preferences via the cookie banner at any time.

Cookies and similar technologies

We use cookies and similar technologies to enable core site functions, remember preferences and analyse traffic. Full details, including how to control these technologies, are set out in our separate Cookie Policy which is accessible from the site footer.

Processors, recipients and legal disclosures

We share data with service providers who host the website, provide analytics, support media production tools and handle email delivery. These processors act under our instructions and appropriate contracts. We may disclose information where required by law, court order or to protect legal rights.

International transfers

Some processors may be located outside the United Kingdom. In such cases we use UK-approved safeguards such as standard contractual clauses or adequacy decisions to protect your data during transfer.

Retention periods

Contact form data is retained for up to two years after the last interaction. Platform usage logs are kept for twelve months for security and improvement purposes. Cookie consent records are stored for the duration specified in the Cookie Policy. We apply these periods unless a longer retention is required by law.

Security and data minimisation

We implement appropriate technical and organisational measures including encryption, access controls and regular reviews to protect personal data. We collect only the data necessary for the stated purposes and encourage users to provide the minimum information required when submitting enquiries.

Your data subject rights

Under UK GDPR and the Data Protection Act you have the right to access, rectify, erase, restrict processing, port your data and object to certain processing. To exercise these rights please contact us at [email protected]. We will respond within one month.

Withdrawing consent and objecting to marketing

Where processing relies on consent you may withdraw it at any time by contacting [email protected] or adjusting cookie settings. You can also object to direct marketing or profiling by using the same contact method; we will cease such processing promptly.

Right to complain

If you are dissatisfied with how we handle your data you may lodge a complaint with the Information Commissioner’s Office, the UK supervisory authority, via their website or by post.

Children and age restrictions

Our services are intended for users aged 18 and over. We do not knowingly collect personal data from children under 18. If we become aware that such data has been collected we will delete it without delay.

Automated decision-making and profiling

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects. Any analytics are used only to improve platform features such as workflow organisation for entertainment content.

Changes to this policy

We may update this notice to reflect changes in law or our practices. The current version will always be available on this page with the last updated date clearly shown. Significant changes will be highlighted for a reasonable period after they take effect.