Privacy Policy

Last updated: 23 September 2026

Identity and Role of the Data Controller

headlinvory acts as the data controller for the purposes of this privacy policy. We are responsible for determining the purposes and means of processing personal data collected through our website and services related to professional video operation, live signal management, content distribution, camera work and high-quality media feeds for broadcasting. Our registered office is at Broadcast Centre, 201 Wood Lane, London W12 7TP, United Kingdom and we can be contacted via [email protected] or 020 8495 5000.

Scope of This Notice

This notice applies to all visitors to our website, individuals who submit enquiries through our contact form, clients who engage our media feed services, and any other persons whose personal data we process in the course of our commercial activities in the United Kingdom. It covers data collected online and offline in connection with our broadcasting and distribution operations.

Categories of Personal Data and Sources

We collect personal data directly from you when you use our contact form or otherwise communicate with us. Categories include identification information such as name and job title, contact details including email address and telephone number, professional information relating to your role in media or broadcasting, technical data such as IP address, browser type and device identifiers, and usage data derived from your interaction with our site. We may also receive limited data from third-party analytics providers or service partners where you have consented to such sharing.

Purposes of Processing and Legal Bases

We process personal data for the following purposes, each with its own legal basis under UK GDPR: to respond to enquiries and provide quotations for media feed services on the basis of legitimate interests or contract performance; to manage client accounts and deliver contracted broadcasting services under contract; to comply with legal obligations such as record keeping and tax requirements; to improve our website and services through analytics on the basis of legitimate interests; and to send service-related communications under legitimate interests or consent where marketing is involved. Each purpose is documented internally with a record of the applicable lawful basis.

Requirement to Provide Data and Consequences

Providing certain personal data is necessary to respond to your enquiry or to enter into a contract for our services. If you do not supply required information such as contact details when submitting a form, we may be unable to process your request or deliver the requested media services. You are not obliged to provide data for purely optional website browsing, although some technical data is collected automatically.

Cookies and Similar Technologies

We use cookies and similar tracking technologies to ensure the website functions correctly, to remember your preferences and to gather anonymous usage statistics. Details of the specific cookies deployed, their purposes and your options for managing them are set out in our separate Cookie Policy, which is accessible via the site-wide cookie banner and should be read in conjunction with this notice.

Processors, Recipients and Legal Disclosures

We engage carefully selected processors including cloud hosting providers, content delivery networks, email service platforms and professional service firms such as accountants and legal advisers. These processors act under written contracts that impose appropriate data protection obligations. We may also disclose personal data to regulatory authorities, law enforcement or other third parties where required by law or to protect our legal rights.

International Transfers

Some of our processors are located outside the United Kingdom. Where personal data is transferred to countries without an adequacy decision, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or binding corporate rules to ensure an equivalent level of protection.

Retention Periods

We retain personal data only for as long as necessary for the purposes for which it was collected. Enquiry data is typically kept for up to two years after the last contact; client contract records are retained for six years to meet statutory accounting and limitation requirements; technical logs are deleted within twelve months unless required for security investigations. Specific retention schedules are maintained and reviewed regularly.

Security and Data Minimisation

We implement appropriate technical and organisational measures including encryption in transit, access controls, regular security testing and staff training to protect personal data. We apply data minimisation principles, collecting only the information necessary for each purpose and deleting or anonymising data when it is no longer required.

Data Subject Rights

Under UK GDPR you have the right to access, rectify, erase, restrict processing of, and port your personal data, as well as the right to object to certain processing. To exercise any of these rights please contact us at [email protected]. We will respond within one month and may request additional information to verify your identity.

Withdrawing Consent and Objecting to Marketing

Where we process data on the basis of consent you may withdraw that consent at any time by contacting [email protected]. You also have the right to object to processing for direct marketing purposes; if you opt out we will cease such processing without undue delay.

Right to Complain

If you are dissatisfied with our handling of your personal data you have the right to lodge a complaint with the Information Commissioner’s Office, the UK supervisory authority, via their website or by post to their offices in Wilmslow.

Children and Age Restrictions

Our services are directed at professional clients in the broadcasting industry and are not intended for individuals under the age of eighteen. We do not knowingly collect personal data from children and will delete any such data discovered.

Automated Decision-Making and Profiling

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects. Any analytics we perform are used solely to improve service delivery and do not result in automated decisions about individuals.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in law or our practices. The current version will always be posted on this page with the date of the most recent revision. Continued use of the site after an update constitutes acceptance of the revised terms.