Privacy policy. 

Last updated: 13 August 2026

Who we are

Talu Studios Ltd is the controller of the personal information described in this notice.

• Company number: 16168423
• Registered office: Startup Stiwdio, University of South Wales, Usk Way, Newport, NP20 2BP
• Email: hello@talustudios.com
• Website: https://www.talustudios.com/

Information we collect

Depending on how you interact with us, we may collect:

• your name, job title, organisation and contact details;
• information you submit through our website, including your referral source, project message and any file you upload, or provide by email or when booking a call;
• project briefs, enquiries, quotations, contracts, approvals and correspondence;
• payment, invoicing and transaction information;
• information about clients, suppliers, freelancers and job applicants;
• photographs, video, audio, interview material, releases and other production records where you take part in or support a production;
• accessibility, welfare or other sensitive information where it is necessary and lawful for a production;
• website, device, cookie and usage information where our settings and your choices permit this; and
• social media messages, comments and other information you choose to make available to us.

Please do not send sensitive personal information through the general website form unless we have asked you to do so and provided a suitable route.

How we receive information

We usually receive information directly from you. We may also receive it from your organisation, a client or commissioner, a parent or guardian, a production partner, a supplier, a public source, a social media platform or another person involved in a project.

Why we use information and our lawful bases

We use personal information to:

• answer enquiries and take steps you request before entering a contract;
• schedule discovery calls and meetings;
• prepare proposals, enter into contracts and deliver film and video projects;
• manage contributors, releases, rights, production safety and welfare;
• communicate with clients, suppliers, freelancers and professional advisers;
• invoice, pay, keep accounts, prevent fraud and meet legal duties;
• recruit and manage people who work with us;
• protect our systems, property, legal rights and confidential information;
• improve our services and manage our professional relationships; and
• send marketing where you have consented or where the law otherwise permits it.

We rely on one or more of the following lawful bases, depending on the context:

• contract: to take requested steps before a contract or perform a contract;
• legal obligation: to comply with tax, accounting, employment, safeguarding or other legal requirements;
• legitimate interests: to run and protect our business, respond to organisations, deliver and improve our work, maintain records and establish or defend legal claims, where those interests are not overridden by your rights;
• consent: where you have a genuine choice, including subscribed email marketing and some optional uses of information; and
• special-category conditions: where sensitive information is necessary, we identify and document an additional condition under data protection law before using it.

You can withdraw consent at any time. This will not affect processing that was lawful before withdrawal, and it may not remove other lawful grounds or contractual rights relating to completed production work.

Children and vulnerable contributors

Where a production involves a child or a person who may need additional support, we provide suitable project information and use appropriate consent, licence, safeguarding and access arrangements. We limit sensitive information to people who need it. A parent or guardian can contact us at hello@talustudios.com with questions about a specific project.

Who we share information with

We do not sell personal information. We share it only where necessary and lawful, which may include:

• clients, commissioners, production partners and distributors involved in the relevant work;
• authorised directors, staff, freelancers and production suppliers;
• Squarespace, which hosts our website and stores website-form submissions in Squarespace Contacts;
• Microsoft services used for email, bookings, meetings, collaboration and file storage;
• other approved website, production, file-transfer and IT providers needed for a project;
• accountants, insurers, banks, payment services, lawyers and other professional advisers;
• regulators, local authorities, law enforcement, courts or safeguarding bodies where required; and
• a buyer or successor if our business or assets are reorganised or transferred, subject to suitable protections.

Service providers may process information for us under contractual and security requirements. Some recipients, such as clients or social platforms, may act as separate controllers and provide their own privacy information.

International transfers

Some technology or production providers may process information outside the UK. Where UK data protection law requires it, we use an adequacy regulation, approved contractual safeguards or another lawful transfer mechanism, and we assess additional protections where appropriate. Contact us if you would like information about the relevant safeguards.

How long we keep information

We keep personal information only for as long as it is needed for the purpose collected, including legal, accounting, rights, insurance and dispute requirements. The period depends on the record:

• enquiries and booking records that do not become active relationships are reviewed regularly and deleted when they are no longer needed;
• marketing information is kept until you unsubscribe, withdraw consent or the record is no longer needed, while a minimal suppression record may be retained to respect your choice;
• financial and tax records are kept for the period required by law;
• contracts, approvals, releases and essential rights records may be kept for as long as the work is used or a legal claim could arise;
• working media and project files follow the agreed project retention and deletion plan; and
• safeguarding or sensitive records receive restricted access and a specific retention decision.

We may keep information longer where a legal hold, complaint, dispute or statutory duty requires it. We securely delete or anonymise information when it is no longer needed.

Security

We use proportionate organisational and technical measures designed to protect personal information. These include limiting access, using approved systems and suppliers, applying account and device controls, backing up appropriate records, using secure transfer methods, and requiring confidentiality from people who work with us. No internet or storage system can be guaranteed completely secure.

Your rights

Depending on the circumstances, you may have the right to:

• be informed about how we use your information;
• ask for a copy of your information;
• ask us to correct inaccurate or incomplete information;
• ask us to delete information;
• ask us to restrict how information is used;
• object to processing based on legitimate interests or to direct marketing;
• receive certain information in a portable format; and
• withdraw consent at any time.

Some rights are subject to legal conditions and exemptions. To exercise a right, email hello@talustudios.com. We may need information to verify your identity and identify the relevant records. We normally respond within one month.

Marketing

You can unsubscribe from an email by using its unsubscribe link or by contacting hello@talustudios.com. We may retain a minimal suppression record so that we do not contact you again through that route.

Cookies

We use essential cookies to make the website work. With your permission, we also use non-essential cookies and activity information to understand how the site is used and improve it. The cookie banner lets you accept, decline or manage non-essential cookies, and the Cookie Preferences control lets you change your choice later.

Linked services

Links to other websites or platforms are governed by those organisations' privacy information.

Complaints

Please contact us first at hello@talustudios.com so that we can try to resolve your concern. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint (https://ico.org.uk/make-a-complaint/) or by calling 0303 123 1113.

Changes to this notice

We may update this notice when our services, suppliers or legal obligations change. We will show the latest revision date on this page.