Privacy Policy

The Production Packet is a production company registered in England and Wales. We are the data controller for personal data collected through this website.

Contact: info@theproductionpacket.com

If you have any questions about how we handle your personal data, please contact us at the address above. We will respond within 30 days.

We collect only the data necessary to provide our services and operate this website. Specifically, we collect:

• Contact form data — when you submit an enquiry through our contact form, we collect your name, email address, and the content of your message.
• Session data — when an authorised administrator logs into the site admin panel, a session cookie is set to maintain their authenticated state. This cookie contains no personally identifying information beyond what is necessary for authentication.
• Server logs — our web server automatically records standard technical information including your IP address, browser type, and the pages you visit. These logs are used solely for security and operational purposes and are not linked to your identity.

We do not use third-party tracking cookies, analytics platforms, social media pixels, or advertising networks on this website. We do not collect any special category data as defined under UK GDPR Article 9.

We use the data we collect only for the following purposes:

• Responding to your enquiry — when you contact us through our contact form, we use your name and email address to respond to your message and discuss your project requirements.
• Site security and administration — session cookies are used solely to maintain the authenticated state of our admin users. Server logs are reviewed if a security incident is suspected.
• Improving this website — anonymised server log data may be reviewed to understand how the site performs, though no profiling or behavioural tracking takes place.

We will never sell, rent, or otherwise share your personal data with third parties for their own marketing or commercial purposes.

Under UK GDPR, we must have a lawful basis to process your personal data. We rely on the following bases:

• Legitimate interests (Article 6(1)(f)) — for processing contact form submissions. When you reach out to us about a production project, we have a legitimate interest in responding to that enquiry. We have assessed that this interest is not overridden by your rights, given that you have actively chosen to contact us and would reasonably expect a response.
• Consent (Article 6(1)(a)) — for non-essential cookies, where applicable. The only cookie currently set by this site (the admin session cookie) is essential for site operation and does not require consent. If we introduce any non-essential cookies in the future, we will request your consent before setting them.
• Legitimate interests (Article 6(1)(f)) — for server log data collected for security and operational purposes.

We keep your data only for as long as necessary for the purpose for which it was collected:

• Contact form enquiries — retained for up to 2 years from the date of your enquiry. If we enter into a working relationship, we may retain relevant correspondence for the duration of that relationship and for a reasonable period thereafter for legal and accounting purposes.
• Admin session cookies — expire automatically when the browser is closed. They are not persisted beyond a single browser session.
• Server logs — retained for up to 90 days, after which they are automatically deleted.

Once the relevant retention period has passed, your data is securely deleted or anonymised.

We do not share your personal data with any third parties except in the following limited circumstances:

• Hosting and infrastructure providers — our website is hosted on servers operated by our infrastructure providers. These providers act as data processors on our behalf and are contractually bound to handle your data securely and only as we instruct.
• Legal obligations — we may disclose your data if required to do so by law, by a court order, or by a lawful request from a public authority.
• Protection of rights — we may disclose data where necessary to protect the rights, property, or safety of The Production Packet, our clients, or others.

We do not transfer your personal data outside the United Kingdom or European Economic Area.

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access — you have the right to request a copy of the personal data we hold about you (commonly known as a Subject Access Request).
• Right to rectification — you have the right to ask us to correct inaccurate or incomplete personal data we hold about you.
• Right to erasure — you have the right to request that we delete your personal data, subject to certain legal exceptions (for example, where we are required to retain it by law).
• Right to restriction of processing — you have the right to ask us to restrict how we use your data in certain circumstances, for example while a dispute about accuracy is being resolved.
• Right to data portability — where we process your data by automated means on the basis of consent or contract, you have the right to receive that data in a structured, commonly used, machine-readable format.
• Right to object — you have the right to object to our processing of your personal data where we rely on legitimate interests as our legal basis. We will stop processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Rights related to automated decision-making — we do not use automated decision-making or profiling in relation to your data.

To exercise any of these rights, please contact us at info@theproductionpacket.com. We will respond within one calendar month. There is no charge for making a request, unless it is manifestly unfounded or excessive.

We use a minimal number of cookies. For full details, please see our Cookie Policy. In summary, this site sets only one cookie — an essential session cookie used for admin authentication — and no third-party tracking cookies of any kind.

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our website is served over HTTPS, and access to stored enquiry data is restricted to authorised personnel only.

No method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

If you have a concern about how we have handled your personal data, please contact us first at info@theproductionpacket.com and we will do our best to resolve the issue.

If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters:

• Website: ico.org.uk
• Helpline: 0303 123 1113
• Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Material changes will be communicated on this page.

Continued use of this website after changes have been posted constitutes your acknowledgement of those changes.