top of page

Data Protection Policy

VFXLive CIC

Last updated: February 2026

1. Policy Statement

VFXLive CIC is committed to protecting the privacy and security of personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains how we handle, store, and protect personal information belonging to our clients, freelance crew, employees, and other contacts.


We collect and process personal data only for legitimate business purposes related to our video production services.

2. Scope

This policy applies to all personal data handled by Bubble Production Ltd, including information processed by:
• Employees and freelance operators
• Contractors, suppliers, and partners acting on our behalf
• Any systems or devices used to store or transmit personal data

3. Our Data Protection Principles

We adhere to the following principles when processing personal data:
• Lawfulness, fairness, and transparency – We process data lawfully and transparently.
• Purpose limitation – Data is collected only for clear, legitimate business purposes.
• Data minimisation – We collect only the information necessary for our operations.
• Accuracy – Personal data is kept accurate and up to date.
• Storage limitation – Data is kept only as long as necessary for the purpose collected.
• Integrity and confidentiality – Data is kept secure through appropriate technical and organisational measures.

4. Data We Collect

Depending on the relationship, we may collect:
• Contact details (name, address, email, phone number)
• Business and payment information
• Project details and correspondence
• Freelance or employment documentation (e.g., right-to-work proof, insurance details)

5. How We Use Personal Data

We process data to:
• Manage client relationships and project delivery
• Contract and pay freelance operators
• Comply with legal and regulatory obligations
• Communicate with clients, suppliers, and stakeholders
• Send legitimate business communications
We do not sell or share personal data for marketing purposes with third parties.

6. Data Security

• Personal data is stored securely using password-protected systems and encrypted cloud storage.
• Access is restricted to authorised personnel only.
• All devices used for production, storage, or transmission of data are regularly updated and protected by security software.

7. Data Sharing

We may share data only when necessary with:
• Freelance crew or suppliers directly involved in client projects
• Legal, regulatory, or insurance bodies where required by law
All third parties are expected to comply with UK GDPR requirements.

8. Data Retention

Data is retained only for as long as necessary for the purpose collected, or as required by law or professional obligations. When no longer needed, data will be securely deleted or anonymised.

9. Individual Rights

Under UK GDPR, individuals have the right to:
• Access their personal data
• Request correction or deletion
• Object to processing or request data portability
• Withdraw consent at any time (where applicable)
Requests can be made by email to the Company Directors at VFXLive CIC. We will respond within one month of receipt.

10. Responsibility and Review

The Directors of VFXLive CIC are responsible for ensuring compliance with this policy. This policy will be reviewed annually or as required by changes in data protection law.

bottom of page