top of page

Our Privacy Policy

Last updated: 12 Jan 2026

This Privacy Policy explains how Brighthorn Communications Ltd ("we", "us", "our") collects, uses, stores and protects personal data when you interact with our video production services, website and communications. We are committed to protecting your privacy and handling your personal data in a transparent and lawful way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are (Data Controller)

Business name: Brighthorn Communications
Business type: Limited company
Registered address: 128 City Rd, London EC1V 2NX
Email: david@brighthorn.com

For the purposes of data protection law, we are the data controller of the personal data we collect.

2. The personal data we collect

We may collect and process the following types of personal data:

a) Contact and business information

  • Name

  • Job title

  • Company name

  • Email address

  • Telephone number

  • Postal address

b) Project-related information

  • Briefs, scripts, schedules and creative notes

  • Feedback and approvals

  • Communications by email, phone or messaging platforms

c) Video, audio and photographic data

  • Video and audio recordings of contributors

  • Photographs and still images

  • Voice recordings

d) Website and technical data (if applicable)

  • IP address

  • Browser type and version

  • Pages visited and time spent on the website

3. How we collect personal data

We collect personal data when you:

  • Contact us by email, phone or through our website

  • Commission or discuss a video production project

  • Appear in or contribute to a filmed production

  • Sign contracts, release forms or agreements

  • Visit our website (via cookies or analytics, if used)

4. Lawful basis for processing

Under UK GDPR, we rely on the following lawful bases to process personal data:

  • Contract – where processing is necessary to deliver video production services

  • Legitimate interests – to run and grow our business, communicate with clients and showcase our work

  • Consent – where required, for example contributor consent for filming or marketing use

  • Legal obligation – for accounting, tax or regulatory requirements

5. How we use personal data

We use personal data to:

  • Provide video production and related services

  • Communicate with clients and contributors

  • Manage projects, schedules and deliveries

  • Invoice and maintain financial records

  • Promote our work (where permission has been granted)

  • Maintain website functionality and security

6. Video content, contributors and consent

Where individuals appear in our productions, we may collect video, audio and image data. We will normally obtain consent via:

  • Contributor release forms

  • Client contracts or written agreements

Footage will only be used for the purposes agreed, such as internal communications, broadcast, online or marketing use.

7. Data sharing

We may share personal data only where necessary with:

  • Clients commissioning the work

  • Editors, sound designers or freelancers working under our instruction

  • Secure cloud storage and file transfer providers

  • Accountants or professional advisers

All third parties are required to respect confidentiality and comply with data protection laws.

We do not sell personal data to third parties.

8. International data transfers

Where data is stored or transferred outside the UK, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses.

9. Data security

We take appropriate technical and organisational measures to protect personal data, including:

  • Password-protected devices and accounts

  • Encrypted storage and secure file transfer

  • Limited access to data on a need-to-know basis

10. Data retention

We retain personal data only for as long as necessary:

  • Client and project data: typically up to 2 years after project completion

  • Financial records: as required by law (usually 6 years)

  • Video footage: as agreed with clients or contributors

Data is securely deleted when no longer required.

11. Your data protection rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request erasure of your data

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent at any time (where applicable)

To exercise your rights, contact us using the details above.

12. Complaints

If you have concerns about how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO):

Website: https://ico.org.uk
Helpline: 0303 123 1113

13. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website or on request.

If you have any questions about this Privacy Policy or how we handle personal data, please contact us.

bottom of page