Privacy Policy
Last updated: 26 October 2026
This Privacy Policy explains how showperu collects, uses and protects personal data in connection with its professional resource dedicated to studio production in motion.
Identity and role of the data controller
showperu is the data controller for the purposes of the UK GDPR and the Data Protection Act 2018. We determine the purposes and means of processing personal data collected through our commercial website.
Scope of the notice and the people it covers
This notice applies to all visitors to our website who are located in the United Kingdom and to individuals who interact with us through the contact form on our Contacts page. It does not cover employment-related processing.
Categories of personal data and the sources from which they are obtained
We obtain personal data directly from you when you submit the contact form. The categories include name, email address, any message content you provide, and technical data such as IP address and browser type collected automatically through server logs.
Purpose-by-purpose explanation of processing and the legal basis for each purpose
We process contact-form data to respond to enquiries on the basis of legitimate interests in providing customer support. Technical data is processed to maintain website security and functionality under the same legal basis. Cookie preferences are stored to comply with PECR on the basis of consent.
Whether providing data is required and the consequences of not providing it
Providing contact details through the form is voluntary. If you choose not to supply them we will be unable to respond to your enquiry. Technical data is collected automatically and cannot be refused without disabling essential site functions.
Cookies and similar technologies
Our website uses cookies and similar technologies. Please refer to our separate Cookie Policy for details on the types of cookies used and how to manage your preferences. The site-wide cookie banner allows you to accept or reject non-essential cookies.
Processors, service-provider categories, recipients, and disclosures required by law
We engage service providers such as hosting companies and email delivery services to process data on our behalf under written contracts. We may disclose data when required by law or to protect our legal rights.
International transfers and the safeguards used when they apply
Some service providers may be located outside the United Kingdom. In such cases we rely on UK adequacy regulations or standard contractual clauses approved by the Information Commissioner’s Office to ensure appropriate safeguards.
Specific retention periods or defensible criteria for deciding them
Contact-form data is retained for 24 months after the last correspondence. Log data is kept for 12 months. Cookie consent records are retained for 13 months to demonstrate compliance.
Security and data-minimisation practices
We implement appropriate technical and organisational measures including encryption in transit and access controls. We collect only the minimum data necessary for the stated purposes and regularly review our processing activities.
All applicable data-subject rights and a practical method for exercising them
You have the right to access, rectification, erasure, restriction, portability and objection. To exercise these rights please contact us using the details on our Contacts page or write to info@nfts.co.uk or Beaconsfield Studios, Station Road, Beaconsfield, Buckinghamshire, HP9 1LG.
The right to withdraw consent and object to direct marketing or profiling
Where processing is based on consent you may withdraw it at any time by adjusting your cookie settings or contacting us. We do not conduct direct marketing or profiling.
The right to complain to the competent supervisory authority
You have the right to lodge a complaint with the Information Commissioner’s Office at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF or via their website.
Children or age restrictions
Our website is not intended for children under 18. We do not knowingly collect personal data from individuals under this age.
Automated decision-making and profiling
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects.
Policy changes and the effective or last-updated date
We may update this policy from time to time. The current version is always available on this page and any material changes will be indicated by updating the last-updated date shown above.