Privacy Policy

M&Y Media Ltd – Privacy Notice

This Privacy Notice provides details of the personal data we collect from you, what we do with it, how you might access it and who it might be shared with.

Our Contact Information (Data Controller)

M&Y Media Ltd

Brill Memorial Hall
Church Street
HP18 9RT
United Kingdom
Telephone: +441869866745

Company Email: info@mandymedia.co.uk

ATTENTION all children.
This is a very important notice which we must share with you and any one of your parents or legal guardians. To make use of our services, we need information which is personal to you. For example, your name, your email address, your identity and banking details. We cannot use your information unless your parent agrees. Please tell your parents to read the notice below.

ATTENTION all parents / legal guardians
In order for children to make use of our services we need to use their Personal Data and for this we are required by law to obtain the consent of a parent or legal guardian. Before deciding on consent it is important for parents to understand our Data Protection and Privacy policies. It is equally important for parents to explain to children, the implications of not providing our company with the proper consent. A link to our consent form can be found wherever we collect Personal Data of Children.

What we do with your personal data

We process personal data only for the purpose for which they are collected. The purpose is dependent on whether you use only our website, or additionally, our services. If you use our services you are required to register and we collect your personal data. We use this personal data for the provision of the service or the performance of the contract. We may use your personal data for other similar purposes, including marketing and communications, but that will only occur in the case we have your consent or another legal justification for doing so.

From our Contractors we process and retain personal data for the following purposes and periods, with the applicable legal basis.

Processing purpose Legal basis Retention period
Organisation’s administration and management we have the data subject’s consent Until tax or other retention period expires
Site management and security it’s in our legitimate interest (Business operations and due Diligence) Until tax or other retention period expires
Supplier Management it’s in our legitimate interest (Business operations and due Diligence) Until tax or other retention period expires
Travel and events management it’s in our legitimate interest (Business operations and due Diligence) Until tax or other retention period expires
Video surveillance it’s in our legitimate interest (Business operations and due Diligence) 1 month
Contact management we have the data subject’s consent Until consent withdrawn
Archiving it’s in our legitimate interest (Business operations and due Diligence) Until not relevant
Industry specific regulation, standards and intelligence we have to comply with a legal obligation Until tax or other retention period expires
Information, system, network and cyber security we have the data subject’s consent Until consent withdrawn
Legal and regulatory compliance we have the data subject’s consent Until tax or other retention period expires

From our Customers / Clients we process and retain personal data for the following purposes and periods, with the applicable legal basis.

Processing purpose Legal basis Retention period
Archiving we do so for archiving purposes Until not relevant
Communications, marketing and intelligence we have the data subject’s consent Until consent withdrawn
Contact management we have the data subject’s consent Until consent withdrawn
Debt management it’s in our legitimate interest (Business operations and due Diligence) Until debt recovered
Commercial Photography it’s in our legitimate interest (Communications, marketing and intelligence) Until not relevant
Service delivery we have the data subject’s consent Until consent withdrawn
Travel and events management we have the data subject’s consent Until consent withdrawn
Video or TV Production it’s in our legitimate interest (Communications, marketing and intelligence) Until not relevant
Video surveillance it’s in our legitimate interest (Business operations and due Diligence) 1 month
Administrative enquiries it’s in our legitimate interest (Business operations and due Diligence) Until service completed

From our Service Providers we process and retain personal data for the following purposes and periods, with the applicable legal basis.

Processing purpose Legal basis Retention period
Archiving we have to comply with a legal obligation Until tax or other retention period expires
Contact management it’s in our legitimate interest (Business operations and due Diligence) Until service completed
Legal and regulatory compliance we have to comply with a legal obligation Until tax or other retention period expires
Supplier Management it’s in our legitimate interest (Business operations and due Diligence) Until service completed

From our Students we process and retain personal data for the following purposes and periods, with the applicable legal basis.

Processing purpose Legal basis Retention period
Video surveillance it’s in our legitimate interest (Business operations and due Diligence) 1 month
Site management and security it’s in our legitimate interest (Business operations and due Diligence) 1 month

From our Suppliers we process and retain personal data for the following purposes and periods, with the applicable legal basis.

Processing purpose Legal basis Retention period
Archiving we have to comply with a legal obligation Until tax or other retention period expires
Contact management we have the data subject’s consent Until consent withdrawn
Legal and regulatory compliance we have to comply with a legal obligation Until tax or other retention period expires
Supplier Management it’s in our legitimate interest (Business operations and due Diligence) Until service completed
Travel and events management we have the data subject’s consent Until service completed

From our Talent we process and retain personal data for the following purposes and periods, with the applicable legal basis.

Processing purpose Legal basis Retention period
Archiving we do so for archiving purposes Until consent withdrawn
Commercial Photography we have the data subject’s consent Until consent withdrawn
Communications, marketing and intelligence we have the data subject’s consent Until consent withdrawn
Contact management we have the data subject’s consent Until consent withdrawn
Video or TV Production it’s in our legitimate interest (Industry specific regulation, standards and intelligence) Until deemed irrelevant
Video surveillance it’s in our legitimate interest (Business operations and due Diligence) 1 month

What personal data do we collect?

The personal data we collect depends on whether you just visit our website or use our services. If you visit our website, you do not need to provide us with any personal data. However, your browser transmits some data automatically, such as the date and time of retrieval of one of our web pages, your browser type and settings, your operating system, the last web page you visited, the data transmitted and the access status, and your IP address.

If you use our services, personal data is required to fulfill the requirements of a contractual or service relationship, which may exist between you and our organisation.

We collect:

  • Banking Details
  • Confidential Correspondence
  • Digital Images
  • Email, Social Networks
  • Employee Performance Data
  • Financial Details
  • Identification Number
  • Location Information
  • Name
  • Online Identifiers
  • Photographs together with Identifiers
  • Telephone contact details
  • Visual Images

Who might we share your personal data with?

To maintain and improve our services, your personal data may need to be shared with or disclosed to service providers, other Controllers or, in some cases, public authorities. We may be mandated to disclose your personal data in response to requests from a court, police services or other regulatory bodies. Where feasible, we will consult with you prior to making such disclosure and, in order to protect your privacy, we will ensure that we will disclose only the minimum amount of your information necessary for the required purpose.

We transfer personal data to the following organisations and countries:

Data subject type Organisation name Type Country
Contractors JE Accountants Controller United Kingdom
Customers / Clients JE Accountants Controller United Kingdom
Suppliers JE Accountants Processor United Kingdom

How do we look after personal data

We limit the amount of personal data collected only to what is fit for the purpose, as described above. We restrict, secure and control all of our information assets against unauthorised access, damage, loss or destruction; whether physical or electronic. We retain personal data only for as long as is described above, to respond to your requests, or longer if required by law. If we retain your personal data for historical or statistical purposes we ensure that the personal data cannot be used further. While in our possession, together with your assistance, we try to maintain the accuracy of your personal data.

How can you access your personal data?

You have the right to request access to any of your personal data we may hold. If any of that information is incorrect, you may request that we correct it. If we are improperly using your information, you may request that we stop using it or even delete it completely.

If you would like to make a request to see what personal data of yours we might hold, you may make a request from our company website or here.

Where you have previously given your consent to process your personal data, you also have the right to request that we port or transfer your personal data to a different service provider or to yourself, if you so wish.

Where it may have been necessary to get your consent to use your personal data, at any moment, you have the right to withdraw that consent. If you withdraw your consent, we will cease using your personal data without affecting the lawfulness of processing based on consent before your withdrawal.

Our Data Protection Officer

Will Caddy
will.caddy@mandymedia.co.uk
Telephone: +01869866745

Our Supervisory Authority

You have the right to lodge a complaint with any Supervisory Authority. See our Supervisory Authority contact details below

United Kingdom
Water Lane, Wycliffe House
Wilmslow – Cheshire SK9 5AF
international.team@ico.org.uk
+44 1625 545 745
www.ico.org.uk