Privacy Policy
Last updated: 19 September 2026
Identity and Role of the Data Controller
redfloornu acts as the data controller for the personal data processed in connection with our commercial website offering specialised courses in live production decks, control rooms, multi-camera switching, live broadcasting techniques, real-time video operation and professional management of television and streaming productions. We are responsible for determining the purposes and means of processing personal data collected through the site.
Scope of the Notice and the People It Covers
This privacy notice applies to all visitors to our website who are located in the United Kingdom. It covers individuals who browse our course information, submit enquiries via the contact form, or otherwise interact with the site. The notice does not apply to processing carried out by third parties outside our control.
Categories of Personal Data and Sources
We collect personal data directly from you when you complete the contact form or communicate with us. Categories include name, email address, telephone number, postal address, and any additional information you provide about your interest in our courses. We may also collect technical data such as IP address, browser type and device identifiers through cookies and similar technologies. No data is obtained from third-party sources without your knowledge.
Purpose-by-Purpose Explanation of Processing and Legal Basis
We process personal data for the following purposes: to respond to enquiries and provide course information (legal basis: legitimate interests or consent where required); to deliver the services you request and manage course bookings (legal basis: contract performance); to comply with legal obligations such as record-keeping (legal basis: legal obligation); and to improve website functionality through analytics (legal basis: legitimate interests). Each purpose is limited to what is necessary.
Whether Providing Data Is Required and Consequences
Providing personal data through the contact form is voluntary. However, if you choose not to supply required fields such as email address, we may be unable to respond to your enquiry or process your request. Technical data collected via cookies can often be managed through your browser settings without preventing site access.
Cookies and Similar Technologies
We use cookies and similar technologies to enable essential site functions and, where consented, for analytics. A separate Cookie Policy explains the types of cookies used, their purposes and how to manage preferences. Please refer to that policy for full details on cookie categories and consent mechanisms required under PECR.
Processors, Service-Provider Categories and Recipients
We engage trusted processors such as hosting providers, email service providers and analytics platforms to support website operation. These processors are bound by contractual safeguards and may only process data on our instructions. Personal data may be disclosed to law enforcement or regulatory bodies where required by law.
International Transfers and Safeguards
Some processors may be located outside the United Kingdom. Where personal data is transferred internationally we rely on UK adequacy regulations or standard contractual clauses approved by the Information Commissioner’s Office to ensure an adequate level of protection.
Retention Periods or Criteria
We retain enquiry data for up to two years after the last contact to handle follow-up requests and resolve disputes. Technical logs are kept for a maximum of twelve months. Data required for legal compliance is retained for the periods mandated by applicable law.
Security and Data-Minimisation Practices
We implement appropriate technical and organisational measures including encryption in transit, access controls and regular security reviews. Data collection is limited to what is strictly necessary for the stated purposes. While we take reasonable steps to protect information, no system can guarantee absolute security.
Data-Subject Rights and Exercising Them
Under UK GDPR and the Data Protection Act 2018 you have rights to access, rectification, erasure, restriction, portability and objection. To exercise these rights please contact us using [email protected] or 020 8035 8010. We will respond within one month and may request identification to verify your request.
Right to Withdraw Consent and Object to Direct Marketing
Where processing is based on consent you may withdraw it at any time by contacting [email protected]. You also have the right to object to direct marketing and profiling at any time; we will cease such processing upon receipt of your objection.
Right to Complain to the Supervisory Authority
If you are dissatisfied with our handling of your personal data you may lodge a complaint with the Information Commissioner’s Office, the UK supervisory authority. Contact details are available on the ICO website.
Children or Age Restrictions
Our courses and website are intended for individuals aged 18 and over. We do not knowingly collect personal data from children under 18. If we become aware that such data has been collected we will delete it promptly.
Automated Decision-Making and Profiling
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects. Any analytics processing is limited to aggregate trends and does not involve solely automated decisions about individuals.
Policy Changes and Effective Date
We may update this policy to reflect changes in law or practice. The last updated date appears at the beginning of the notice. Continued use of the site after changes constitutes acceptance of the revised policy. For questions please contact [email protected] or write to The Warehouse, 3 Js Nursery, Smarts Heath Road, Woking, Surrey, GU22 0RG, United Kingdom.