Privacy Policy
Last updated: 30 October 2026
Identity and Role of the Data Controller
penmira operates this website as the data controller under the UK GDPR and the Data Protection Act 2018. We determine the purposes and means of processing personal data collected through the site and related services. Our registered address is Unit 53, Lidgate Crescent, Langthwaite Grange Industrial Estate, South Kirkby, Pontefract, West Yorkshire, WF9 3NR and you may contact us at [email protected] or 01977 659880 for any data protection queries.
Scope of This Notice
This privacy policy applies to all visitors to the website, including prospective students, course participants, and other individuals who interact with our audiovisual production resources. It covers data collected via the contact form, course enquiries, and any other means when you use the site from within the United Kingdom.
Categories of Personal Data and Sources
We collect identification data such as your name, contact details including email address and telephone number, and any information you provide in messages. Technical data including IP address, browser type, and device information is gathered automatically. All data originates directly from you when you submit forms or from your device when you browse the site.
Purposes of Processing and Legal Bases
We process contact data to respond to enquiries on the basis of legitimate interests in providing customer service. Course registration details are processed under contract to deliver educational services. Analytics data supports site improvement under legitimate interests, while marketing preferences rely on consent. Each purpose is explained separately so you understand exactly why data is used.
Whether Providing Data Is Required
Supplying contact information is necessary to receive responses to enquiries or to enrol in courses. If you do not provide required details, we cannot process your request or deliver the requested service. You may still browse publicly available course information without submitting personal data.
Cookies and Similar Technologies
The site uses cookies and similar technologies for essential functionality and performance measurement. A separate cookie policy explains the categories in use and how you can manage preferences via the site-wide cookie banner. Please refer to that policy for full details on consent mechanisms required under PECR.
Processors, Recipients and Disclosures
Service providers such as hosting companies, email delivery platforms, and analytics tools act as processors under contract. We may disclose data to law enforcement or regulatory bodies when legally required. No sale of personal data occurs.
International Transfers
Some processors may be located outside the UK. Where transfers occur we rely on UK adequacy regulations or standard contractual clauses approved by the Information Commissioner’s Office to ensure appropriate safeguards.
Retention Periods
Contact form submissions are retained for two years after the last interaction. Course enrolment records are kept for seven years to meet legal and accounting obligations. Technical logs are deleted after twelve months unless needed for security investigations.
Security and Data Minimisation
Reasonable technical and organisational measures protect data against unauthorised access, including encryption in transit and access controls. We collect only the minimum data necessary for each stated purpose and regularly review storage practices.
Data Subject Rights
You have the right to access, rectification, erasure, restriction, portability, and objection. To exercise these rights contact us using the details above. We will respond within one month and may request identification to verify your request.
Right to Withdraw Consent and Object to Marketing
Where processing relies on consent you may withdraw it at any time by contacting [email protected]. You can also object to direct marketing or profiling by using unsubscribe links or writing to us. Withdrawal does not affect processing carried out before the withdrawal.
Right to Complain
If you are dissatisfied with our handling of your data you may lodge a complaint with the Information Commissioner’s Office, the UK supervisory authority, at ico.org.uk. We encourage you to contact us first so we can address concerns directly.
Children and Age Restrictions
The site and courses are intended for individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we become aware that data from a child has been collected we will delete it promptly.
Automated Decision-Making and Profiling
We do not use automated decision-making or profiling that produces legal or similarly significant effects. Any analytics performed are for internal improvement only and do not result in automated decisions about individuals.
Changes to This Policy
We may update this policy to reflect changes in law or practice. The date of the latest revision appears at the top of the page. Continued use of the site after an update constitutes acceptance of the revised terms.