Little Man Video Productions
Little Man Video Productions is a sole trader business based in the United Kingdom. We are committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
What Information We Collect
We may collect and process the following personal data:
- Name and contact details (e.g. email address, phone number)
- Billing and payment information
- Event details (e.g. names, locations, dates)
- Video and photographic images where you are featured
- Communication records (emails, messages, enquiries)
How We Use Your Information
Your data is used only where necessary to:
- Provide and deliver our video production services
- Process payments and manage orders
- Communicate with you regarding your booking or enquiry
- Fulfil legal or contractual obligations
We do not sell or share your personal data for marketing purposes.
Legal Basis for Processing
We process personal data under the following lawful bases:
- Contract – to provide agreed services
- Legitimate interests – to operate and improve the business
- Legal obligation – to comply with applicable laws
- Consent – where required, particularly for use of identifiable images or footage
Storage and Retention
Your data is stored securely and only retained for as long as necessary:
- Project files and footage may be retained for archive and backup purposes
- Financial records are kept in line with HMRC retention requirements
Sharing Your Data
We may share data with:
- Payment processors and accountants
- Secure cloud storage or IT providers
All third parties are required to handle your data securely and in compliance with GDPR.
Data Breach Policy
We take data security seriously. In the event of a personal data breach, the following steps will be taken:
- Identification & Containment
Any suspected breach will be investigated immediately, and steps will be taken to contain and minimise the impact.
- Assessment
We will assess the nature of the breach, including the type of data involved, the number of individuals affected, and the potential risk.
- Notification
Where required under UK GDPR, we will notify the Information Commissioner’s Office (ICO) within 72 hours of becoming aware of the breach.
- Communication with Affected Individuals
If the breach is likely to result in a high risk to your rights and freedoms, you will be informed without undue delay, including details of the breach and recommended actions.
- Review & Prevention
Following any breach, we will review procedures and implement improvements to prevent future incidents.
Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request erasure of your data where appropriate
- Restrict or object to processing
- Lodge a complaint with the Information Commissioner’s Office (ICO)