Privacy Policy

Last Updated

This Privacy Policy was last updated on 18 September 2026.

Who We Are and Our Role as Data Controller

glitzflownu operates this website and acts as the data controller for personal data processed in connection with our online course on polished entertainment production. We are responsible for deciding how and why your personal data is used. Our registered address is Beaconsfield Studios, Station Road, Beaconsfield, Buckinghamshire, HP9 1LG.

Scope of This Notice

This notice applies to all visitors to our site, individuals who purchase or enquire about our course, and anyone who interacts with our services from the United Kingdom. It covers data collected through the contact form, course enrolment processes and any other interactions on the site.

Categories of Personal Data We Collect

We obtain personal data directly from you when you complete forms or make purchases. Categories include identity information such as your name, contact details including email address, transaction data such as payment information processed securely by our providers, technical data such as IP address and browser type, and usage data showing how you navigate the site.

Purposes of Processing and Legal Bases

We process your data to provide and deliver the course, which is based on performance of a contract. We use contact information to respond to enquiries under legitimate interest. Marketing communications are sent only with your consent. Analytics help us improve the site under legitimate interest. Each purpose is matched to a specific lawful basis under UK GDPR.

Whether Providing Data Is Mandatory

Supplying certain data is necessary to complete a course purchase or receive a response to your enquiry. If you do not provide required information, we may be unable to fulfil your request or process your order.

Cookies and Similar Technologies

We use cookies and similar technologies to enable essential site functions and gather analytics. Details are set out in our separate Cookie Policy which you can access via the site-wide cookie banner.

Processors, Recipients and Legal Disclosures

We share data with service providers such as payment processors, hosting companies and email delivery platforms that act as processors under contract. We may disclose information where required by law or to protect our legal rights.

International Transfers

Some processors may be located outside the UK. Where transfers occur we rely on UK adequacy regulations or standard contractual clauses approved by the Information Commissioner’s Office to ensure appropriate safeguards.

Retention Periods

We keep personal data only as long as necessary for the purposes described. Course purchase records are retained for seven years to meet tax and accounting obligations. Enquiry data is kept for two years unless you become a customer. You may request earlier deletion where legally permissible.

Security and Data Minimisation

We apply technical and organisational measures including encryption and access controls to protect your data. We collect only the data needed for each purpose and regularly review our practices to reduce unnecessary processing.

Your Data Subject Rights

Under UK GDPR you have rights to access, rectification, erasure, restriction, portability and objection. To exercise these rights please contact us using the form on our Contacts page or email [email protected].

Right to Withdraw Consent and Object to Marketing

Where processing relies on consent you may withdraw it at any time. You can also object to direct marketing and profiling by using the unsubscribe link in emails or contacting us directly.

Right to Complain

If you are dissatisfied you may lodge a complaint with the Information Commissioner’s Office, the UK supervisory authority, via their website or by post.

Children and Age Restrictions

Our course is intended for adults aged 18 and over. We do not knowingly collect personal data from children under 18. If we become aware that such data has been collected we will delete it promptly.

Automated Decision-Making and Profiling

We do not engage in automated decision-making or profiling that produces legal or significant effects on individuals.

Changes to This Policy

We may update this policy from time to time. The current version will always be available on this page with the last-updated date clearly displayed. Continued use of the site after changes constitutes acceptance of the revised policy.