PRIVACY POLICY

1. Data Controller

The data controller for 23xyz is 23XYZ Limited. Company type: Private Limited by Shares, located at Henty Close, Trimpington, Cambridge, CB2 9FL, United Kingdom. The company is responsible for the processing of your personal data.

​

2. Contact Information

If you have any questions or concerns regarding this Privacy Policy or our data practices, please contact our Data Protection Officer (DPO) at [info@23xyz.com]. Please put "GDPR" in the subject of the email, so that we can promptly act on your preferences.

​

3. Types of Personal Data Collected

We collect and process various types of personal data to provide our video production services effectively. The data we may collect includes:

​

Client Information: This may include your name, email address, phone number, and other contact details necessary for communication and project management.

Content Creator Data: In the course of our services, we may work with content creators, and we collect their information for contractual and operational purposes.

Visitor Data: We may collect data from visitors to our website, including IP addresses, browser type, and other information through cookies and similar technologies. For more details, please refer to our Cookie Policy.

​

4. Purpose of Data Processing

We process personal data for the following purposes:

​

To fulfill our contractual obligations to our clients and content creators.

To communicate with clients and content creators regarding projects, updates, and support.

To improve our website and services based on visitor data and feedback.

To comply with legal and regulatory requirements.

​

5. Legal Basis for Processing

The legal bases for processing personal data are as follows:

Contractual Necessity: We process data as necessary to fulfill our contractual obligations to clients and content creators.

Legitimate Interests: We may process data for legitimate business interests, such as improving our services, marketing, and analytics. We ensure that our legitimate interests do not outweigh your fundamental rights and freedoms.

Consent: Where required by law, we will obtain consent before processing personal data.

​

6. Data Retention

We will retain personal data only for as long as necessary to achieve the purposes for which it was collected or as required by law. Upon reaching the end of the retention period, data will be securely deleted or anonymized.

​

7. Data Security

​

We implement security measures to protect personal data from unauthorized access, disclosure, alteration, or destruction. These measures include encryption, restricted access, and regular security assessments.

​

8. Data Sharing

We may share personal data with third parties when necessary for the fulfillment of our services, such as service providers or subcontractors. We ensure that any third-party processing aligns with GDPR requirements and safeguards data privacy.

​

9. Your Rights

​

Under the GDPR and UK law, you have several rights regarding your personal data:

The right to access your data.

The right to rectify inaccurate data.

The right to erasure (the "right to be forgotten").

The right to restrict processing.

The right to data portability.

The right to object to processing.

The right not to be subject to automated decision-making, including profiling.

To exercise any of these rights, please contact our Data Protection Officer.

​

10. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our data processing practices or legal requirements. Any changes will be posted on our website, and we recommend reviewing this policy periodically.

​

Effective Date: [1 Jun 2024]

​

By using our services, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this policy, please do not use our services.