Privacy Policy

Last updated: 23 September 2026

Identity and Role of the Data Controller

showcasenu acts as the data controller for the purposes of this privacy notice. We are responsible for determining the purposes and means of processing personal data collected through our website and related services focused on professional studio production resources. Our operations are based in the United Kingdom and we comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Scope of This Notice and Individuals Covered

This privacy policy applies to all visitors to our website, users who access our professional resources on studio equipment setup, camera operation, lighting, sound, and workflow creation for television and live shows, as well as any individuals who submit information via our contact form. It covers data processing activities undertaken by showcasenu within the United Kingdom and does not extend to third-party websites linked from our pages.

Categories of Personal Data and Sources

We collect personal data directly from you when you use our contact form or interact with site features. This includes identification details such as name, contact information including email address and telephone number, and any additional information you provide in messages. We may also collect technical data such as IP address, browser type, and device information automatically through server logs. No data is obtained from third-party sources without your knowledge.

Purpose-by-Purpose Explanation of Processing and Legal Basis

We process personal data for several distinct purposes. First, to respond to enquiries submitted through the contact form, the legal basis is legitimate interests in maintaining business communications. Second, to provide access to our professional resources on studio production, the basis is performance of a contract or steps prior to entering a contract. Third, for website analytics and improvement, the basis is legitimate interests. Fourth, to comply with legal obligations such as record keeping, the basis is legal obligation. Each purpose is pursued only where necessary and proportionate.

Whether Providing Data Is Required and Consequences

Providing personal data through the contact form is voluntary. However, if you choose not to supply certain information such as your email address, we may be unable to respond to your enquiry or deliver requested resources. Failure to provide technical data occurs automatically but does not prevent site access, though it may limit our ability to diagnose technical issues.

Cookies and Similar Technologies

Our website uses cookies and similar technologies to enhance functionality and gather usage statistics. Details of the specific cookies employed, their purposes, and how to manage preferences are set out in our separate Cookie Policy, which is accessible via the site-wide cookie banner and should be read in conjunction with this notice.

Processors, Recipients and Disclosures Required by Law

We engage trusted service providers acting as processors to support website hosting, email delivery, and analytics. These processors are contractually bound to process data only on our instructions and to implement appropriate safeguards. Personal data may be disclosed where required by law, such as in response to valid court orders or regulatory requests from UK authorities.

International Transfers and Safeguards

Some processors may be located outside the United Kingdom. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including the use of UK-approved standard contractual clauses or reliance on adequacy regulations where applicable, to protect your data to UK standards.

Retention Periods or Criteria

Personal data is retained only for as long as necessary to fulfil the purposes outlined. Enquiry-related data is kept for up to two years after the last contact. Technical logs are retained for twelve months. Data required for legal compliance may be kept for the minimum period mandated by applicable UK legislation, after which it is securely deleted or anonymised.

Security and Data-Minimisation Practices

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, or loss. These include encryption in transit, access controls, and regular reviews of data handling practices. We collect only the minimum data necessary for each purpose and avoid retaining information beyond what is required.

Data Subject Rights and Exercising Them

Under UK GDPR you have rights to access, rectification, erasure, restriction of processing, data portability, and objection. To exercise these rights, please contact us using the details on our Contacts page or by writing to Suite 18, 2nd Floor, Building 6, Hercules Way, Warner Bros Studios Leavesden, Watford, WD25 7GS. We will respond within one month, extendable by two further months for complex requests. Verification of identity may be required before action is taken.

Right to Withdraw Consent and Object to Marketing or Profiling

Where processing relies on consent, you may withdraw that consent at any time by contacting [email protected] or using the unsubscribe mechanism if applicable. You also have the right to object to processing for direct marketing purposes or profiling at any time. Such objections will be actioned promptly without affecting the lawfulness of prior processing.

Right to Complain to the Competent Supervisory Authority

If you are dissatisfied with our handling of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority. Contact details and guidance are available on the ICO website. We encourage you to contact us first at [email protected] to seek resolution.

Children or Age Restrictions

Our website and resources are intended for professionals and individuals aged 18 and over. We do not knowingly collect personal data from children under 18. If we become aware that data from a child has been collected, it will be deleted promptly.

Automated Decision-Making and Profiling

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals. Any analytics performed are for internal improvement purposes only and do not result in automated decisions affecting you.

Policy Changes and Effective Date

We may update this privacy policy periodically to reflect changes in law, practice, or our services. The current version is effective from 23 September 2026. Continued use of the website after updates constitutes acceptance of the revised notice. Previous versions are not archived publicly but can be requested by contacting [email protected].