Privacy
What we hold about you, why, and how to get rid of it.
Written in plain English rather than in legal language, because a privacy notice you cannot read is not consent to anything.
The data controller is Futures in Film CIC, company number 14621615, the Ken Adam Building, Pinewood Studios.
What we collect
Four kinds of thing, and no more.
What you tell us on a form
Your name, email, phone if you give it, roughly where you live, what you are interested in, and anything you write in a free-text box. Registration, enquiry, concern and booking forms all feed the same place.
You give it
Access requirements
What you tell us you need, in your own words. We do not ask for a diagnosis or evidence. This is read by the person arranging the day, not by the person selecting the cohort.
You give it
Course and delivery records
Attendance, completion, and where you go afterwards if you tell us. Used for our own evaluation and, in anonymous aggregate form, for reporting to funders.
We create it
Photographs and film
Taken on courses, shoots and at events. Never used publicly without your specific consent, which is asked for separately and can be withdrawn.
With consent
Why, and on what basis
The lawful basis, in one line each.
| What we do with it | Why | Lawful basis |
|---|---|---|
| Answer your enquiry, or process a registration | You asked us to | Legitimate interests, and steps towards a contract where you go on to book |
| Run a course you are on | We cannot deliver it otherwise | Performance of a contract with you |
| Arrange access requirements | So the day works for you | Consent, and our legal duty to make reasonable adjustments |
| Tell you when something opens | You asked to be told | Consent, withdrawable in one click |
| Report on what we delivered | Funders and our own evaluation | Legitimate interests, reported in anonymous aggregate |
| Publish a photograph or film of you | Nothing requires it — we ask | Consent, specific and withdrawable |
How long
We delete things.
Enquiries and registrations that go nowhere are deleted once they are plainly dead. Course records are kept for as long as we may need to confirm to somebody that you did what you say you did, and for the period our funders require us to hold them. Financial records are kept for the six years HMRC requires.
Access information is kept only as long as it is being used to arrange something for you, unless you ask us to keep it so you do not have to write it out again.
Who else sees it
Nobody.
We do not sell your data, we do not share it with other organisations for their marketing, and we do not pass it to partners, sponsors or productions without asking you first. There is no exception to that hidden further down this page.
The unavoidable qualification: we use ordinary business software to send email and store files, so those suppliers process data on our behalf under contract. They are not allowed to use it for anything of their own. Where the law requires disclosure — a safeguarding duty, a court order — we comply, and we tell you unless telling you would defeat the purpose.
Your rights
What you can ask for, at any time.
You can ask what we hold about you and get a copy. You can have it corrected if it is wrong. You can have it deleted. You can object to us using it, withdraw a consent you gave, and ask for it in a portable format. Exercising any of these costs nothing and never affects your place on anything.
Ask us first — it is usually quicker. If we get it wrong, you can complain to the Information Commissioner’s Office, which is the UK regulator, at ico.org.uk.
