Privacy Policy

Last updated: 13 October 2026

Identity and role of the data controller

galaflowry acts as the data controller for personal data processed through this website. We are responsible for determining the purposes and means of processing your personal data in accordance with UK GDPR and the Data Protection Act 2018.

Scope of the notice and the people it covers

This notice applies to all visitors to the website, including users seeking information on studio production resources, equipment setup, camera operation, lighting, sound, and workflows for television news and live shows. It covers individuals in the United Kingdom and elsewhere who interact with our site.

Categories of personal data and the sources from which they are obtained

We collect personal data such as name, email address, and any details submitted via the contact form. Data is obtained directly from you when you use the form or browse the site. We may also collect technical data like IP address and browser type through cookies.

Purpose-by-purpose explanation of processing and the legal basis for each purpose

We process contact details to respond to enquiries on a legitimate interest basis. Technical data supports site functionality under legitimate interests. Where consent is given for marketing, that forms the legal basis. Each purpose is explained clearly to allow informed decisions.

Whether providing data is required and the consequences of not providing it

Providing contact information via the form is voluntary. Failure to supply details means we cannot respond to your enquiry. Technical data collection is automatic but can be managed through browser settings.

Cookies and similar technologies

We use cookies for essential site operation and analytics. Please refer to our separate Cookie Policy for full details on types, purposes, and management options under PECR rules.

Processors, service-provider categories, recipients, and disclosures required by law

We engage service providers such as hosting and email platforms to process data on our behalf. Data may be disclosed if required by law or to protect legal rights. Categories include IT support and analytics providers.

International transfers and the safeguards used when they apply

Some processors may be located outside the UK. We ensure appropriate safeguards such as standard contractual clauses are in place to protect your data during transfers.

Specific retention periods or defensible criteria for deciding them

Contact data is retained for up to two years after the last interaction or as required for legal compliance. Technical logs are kept for 12 months. Retention is based on necessity for the stated purposes and legal obligations.

Security and data-minimisation practices

We implement reasonable technical and organisational measures to protect data, including encryption and access controls. We minimise collection to what is necessary and regularly review practices to reduce risks, though no system is entirely risk-free.

All applicable data-subject rights and a practical method for exercising them

You have rights to access, rectification, erasure, restriction, portability, and objection. To exercise these, contact us using the details on our Contacts page or via [email protected]. We will respond within one month.

The right to withdraw consent and object to direct marketing or profiling

Where processing relies on consent, you may withdraw it at any time. You can also object to direct marketing or profiling by contacting us or using any unsubscribe options provided.

The right to complain to the competent supervisory authority

If you are unsatisfied, you may lodge a complaint with the Information Commissioner's Office (ICO) in the United Kingdom via their website or contact details.

Children or age restrictions

Our site is intended for professional users aged 18 and over. We do not knowingly collect data from children under 18. If we become aware of such data, it will be deleted promptly.

Automated decision-making and profiling

We do not engage in automated decision-making or profiling that produces legal or significant effects on individuals.

Policy changes and the effective or last-updated date

We may update this policy periodically. Changes will be posted on this page with a revised date. Continued use of the site after updates constitutes acceptance of the revised terms.