Privacy Policy  

1. Introduction 

At 52 Stone CIC, we are committed to protecting your privacy and ensuring that your personal data is handled securely and lawfully. This Privacy Policy explains how we collect, use, store, and protect your personal information when you interact with us, including through our website, filmmaking projects, events, and services.  

We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR)  

2. What Information We Collect 

We may collect and process the following types of personal data:  

- Personal Identifiers – Name, email address, phone number, postal address.  

- Employment and Professional Information – CVs, job applications, and work history if you apply to work with us.  

- Financial Data – Payment details for services or funding applications.  

- Media Content – Photos, videos, and audio recordings from our film productions or events.  

- Technical Data – IP addresses, browser type, and website usage analytics.  

- Special Category Data – Information on race, ethnicity, disability, or health (only where necessary and with explicit consent).  

3. How We Use Your Information

We use personal data for the following purposes:  

- To communicate with you regarding our projects, events, or services.  

- To process job applications, freelance contracts, and volunteer roles.  

- To manage and promote our filmmaking activities, including the use of images or footage (with consent).  

- To comply with legal, regulatory, and safeguarding obligations.  

- To improve our website, services, and community engagement.  

- To send marketing and promotional materials (only with your consent).  

4. Legal Basis for Processing  

We only process personal data where we have a lawful basis under UK GDPR, including:  

- Consent – When you agree to receive marketing or allow us to use your image.  

- Contractual Obligation – When we process your data to fulfil an agreement (e.g., employment or freelance work).  

- Legal Compliance – When required by law, such as safeguarding responsibilities.  

- Legitimate Interests – When processing is necessary for our work as a community interest company, provided it does not override your rights.  

5. How We Share Your Data*  

We will not sell or trade your personal data. However, we may share it with:  

- Service providers – For IT, web hosting, or payment processing.  

- Funding bodies or regulators – Where necessary for grant applications or compliance.  

- Filmmaking collaborators and project partners – When relevant to joint projects (with appropriate safeguards).  

Legal authorities – If required by law or for safeguarding purposes.  

Where data is shared, we ensure appropriate contracts and protections are in place.  

6. How We Protect Your Data  

We take appropriate technical and organisational measures to protect your data from unauthorised access, loss, or misuse. These include:  

- Secure digital storage and encrypted communications.  

- Access controls to limit data exposure.  

- Regular policy reviews and staff training on data protection.  

7. How Long We Keep Your Data 

We retain personal data only for as long as necessary for its intended purpose, in line with legal requirements:  

- General enquiries and communications – Up to 2 years.  

- Employment and freelancer records – Up to 6 years after engagement ends.  

- Financial transactions – Up to 7 years for accounting compliance.  

- Media content – Retained indefinitely unless consent is withdrawn.  

When data is no longer needed, it is securely deleted or anonymised.  

8. Your Data Protection Rights 

Under UK GDPR, you have the right to:  

- Access – Request a copy of the data we hold about you.  

- Rectification – Correct inaccurate or incomplete data.  

- Erasure ("Right to be Forgotten") – Request deletion of your data where legally applicable.  

- Restriction – Limit processing of your data under certain conditions.  

- Objection– Opt out of certain processing, such as direct marketing.  

- Data Portability – Request a transfer of your data to another service provider.  

To exercise any of these rights, please contact us at hello@52stone.co.uk  

9. Cookies and Website Tracking  

Our website uses cookies to enhance user experience and collect analytics data. For more details, see our Cookies Policy.  

10. Third-Party Links  

Our website and communications may contain links to third-party websites. We are not responsible for their privacy practices and recommend reviewing their policies separately.  

11. Updates to This Policy  

We may update this policy periodically to reflect legal changes or improvements in our data practices. The latest version will always be available on our website.  

12. Contact Us  

If you have any questions about this Privacy Policy or your data rights, please contact:  

52 Stone CIC 

hello@52stone.co.uk 

If you are dissatisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) www.ico.org.uk