Privacy Policy
Last updated: 6 November 2026
Identity and Role of the Data Controller
penrafta acts as the data controller for the personal data processed through this website. We are responsible for determining the purposes and means of processing your personal data in connection with our services involving professional video operations, live signal management, content distribution, camera work, and the creation of high-quality feeds for news programmes and television broadcasting. Our registered office is at 6 Union Court, 20-22 Union Road, London, SW4 6JP, United Kingdom. For any queries regarding data protection, please contact us using [email protected] or 01483 234344.
Scope of This Privacy Policy
This notice applies to all visitors to our website, including individuals who access our services from the United Kingdom or elsewhere. It covers personal data collected when you browse the site, submit enquiries via the contact form, or interact with our commercial offerings. It does not apply to offline activities or third-party websites linked from our pages.
Categories of Personal Data and Sources
We collect personal data directly from you when you use the contact form, including your name, email address, telephone number, and any message content you provide. Automatically collected data includes IP address, browser type, device information, and usage patterns obtained through cookies and similar technologies. We do not obtain data from third-party sources unless you explicitly authorise such sharing in the course of business enquiries related to media feed services.
Purposes of Processing and Legal Bases
Personal data is processed for the following purposes: responding to enquiries and providing quotes for video and broadcasting services on the basis of legitimate interests or contract performance; maintaining website security and preventing fraud under legitimate interests; complying with legal obligations such as record-keeping under UK GDPR and the Data Protection Act 2018; and improving site functionality through analytics with your consent where required by PECR. Each purpose is matched to a specific lawful basis as outlined in UK data protection law.
Requirement to Provide Data and Consequences
Providing certain personal data is necessary to respond to your contact form submission or to deliver our media feed services. If you choose not to supply required information such as contact details, we may be unable to process your request or fulfil contractual obligations. Optional data fields allow you to share additional details at your discretion without affecting core service access.
Cookies and Similar Technologies
Our website uses cookies and similar tracking technologies to enhance user experience, remember preferences, and analyse traffic. A separate Cookie Policy explains the types of cookies deployed, their purposes, and how to manage them. You can adjust your browser settings or use the site-wide cookie banner to control non-essential cookies in line with PECR requirements.
Processors, Recipients and Disclosures
We engage service providers such as hosting companies, analytics platforms, and email delivery services to process data on our behalf under strict contractual terms. Personal data may be disclosed to law enforcement or regulatory bodies when legally required. We do not sell personal data to third parties.
International Transfers
Some service providers may be located outside the United Kingdom. In such cases, we ensure appropriate safeguards such as standard contractual clauses approved by the UK Information Commissioner’s Office are in place to protect your data during transfer and processing.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes outlined, typically up to six years for contractual and legal compliance records, or shorter periods where data is no longer required. Criteria for determining retention include legal obligations, business needs, and your exercise of rights to erasure.
Security and Data Minimisation
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, or loss. Data collection is limited to what is relevant and necessary, and we regularly review our practices to maintain proportionality without guaranteeing absolute security against all threats.
Your Data Protection Rights
Under UK GDPR you have the right to access, rectify, erase, restrict processing, port your data, and object to certain processing. To exercise these rights, contact us at [email protected]. We will respond within one month, subject to verification of your identity.
Withdrawal of Consent and Objections to Marketing
Where processing relies on consent, you may withdraw it at any time by contacting [email protected]. You can also object to direct marketing or profiling activities. Withdrawal does not affect processing carried out prior to your request.
Right to Complain to the Supervisory Authority
If you believe your data protection rights have been infringed, you may lodge a complaint with the UK Information Commissioner’s Office at their website or by post. We encourage you to contact us first to resolve concerns.
Children and Age Restrictions
Our services and website are directed at professional users in the media and broadcasting sector. We do not knowingly collect personal data from individuals under the age of 18. If we become aware of such collection, we will delete the data promptly.
Automated Decision-Making and Profiling
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals. Any analytics used are for internal service improvement only.
Changes to This Policy
We may update this Privacy Policy to reflect changes in law or our practices. The latest version will always be posted on this page with the effective date. Continued use of the site after updates constitutes acceptance of the revised terms.