1. Who we are
Screen Northants Limited is a film and TV social enterprise based in Northamptonshire. We make professional feature films while training young people from backgrounds under-represented in the industry.
We are a private company limited by guarantee without share capital, registered in England and Wales (Companies House number 09663514). We are not a registered charity.
For the purposes of UK GDPR and the Data Protection Act 2018, Screen Northants Limited is the data controller for the personal information collected through this website.
- Registered office: 2 Union Street, Northampton NN1 2EW
- Operating address: 1 Princes Walk (upper level), Grosvenor Centre, Off Abington Street, Northampton NN1 2EW
- Email: info@screennorthants.co.uk
- Phone: +44 (0)7828 242806
- Companies House number: 09663514
- ICO registration: [to be confirmed]
2. What we collect, and why
We only collect what we need to do our job. Here's the full list of information we may hold about you, and the reason we hold it.
| What | When | Why |
|---|---|---|
| Email address (and optional name) | When you sign up to our newsletter | To send you updates about our films, academy and competitions |
| Name, email, company, subject, message | When you fill in our contact form | To reply to your enquiry |
| Name, email, company, role, phone, skills, message | When you submit our ambassador / industry-professional form | To follow up about supporting the academy or making a donation |
| Name, email, donation amount, Stripe customer / subscription IDs | When you donate via our donate page | To process the donation, send you a receipt, and reconcile our accounts |
| Aggregated, IP-anonymised usage data (pages viewed, device type, country, approximate session length) | Only if you accept Google Analytics via the cookie banner | To understand which content is useful and improve the site. We can't identify you personally from this data. |
What we do NOT collect
- We never see or store your card number, expiry, CVC or bank details. All payments go through Stripe and are handled entirely on Stripe's PCI-compliant infrastructure.
- We don't run any advertising, retargeting, profiling or cross-site tracking on this site. No Facebook Pixel, no ad networks, no behavioural advertising.
- We don't sell, rent or trade your personal information with anyone.
3. Lawful basis for using your data
UK GDPR requires us to have a lawful basis to use your personal data. For Screen Northants, that basis is:
- Consent: for marketing emails (when you opt in to our newsletter) and for Google Analytics (when you click Accept on the cookie banner). You can withdraw either at any time.
- Legitimate interest: to reply to enquiries, manage ambassador relationships, and run the not-for-profit work of the organisation.
- Contract: to process and fulfil your donation (and any ongoing monthly subscription).
- Legal obligation: to keep accounting and financial records (e.g. for HMRC and Companies House).
4. How long we keep it
- Newsletter subscribers: until you unsubscribe.
- Contact form / ambassador form: up to 24 months from your last contact, then deleted unless you have an ongoing relationship with us.
- Donation records: at least 6 years, to meet HMRC and Companies House accounting record-keeping requirements.
5. Where your data lives
We use a small, deliberately chosen set of third-party services ("data processors") to run this website. Each is a reputable company with their own UK / EU GDPR commitments:
| Service | What it does | Privacy policy |
|---|---|---|
| Vercel | Hosts the website | vercel.com/legal/privacy-policy |
| Neon | Hosts our database (form submissions, donations, subscribers) | neon.tech/privacy-policy |
| Stripe | Processes donations and stores payment method securely | stripe.com/gb/privacy |
| Resend | Delivers transactional emails (form submissions) to our inbox | resend.com/legal/privacy-policy |
| Google Analytics 4 (Google LLC) | Measures aggregated, IP-anonymised website usage. Loaded only after you accept the cookie banner. We don't enable Google Signals, demographic / interest reports, or any advertising features. | policies.google.com/privacy |
6. International transfers
Several of the processors above (Stripe, Neon, Vercel, Resend and Google) are US-based and may store data on US infrastructure. Where this is the case we rely on the UK Extension to the EU-US Data Privacy Framework, the UK government's adequacy decisions and the EU Standard Contractual Clauses (SCCs) put in place by those providers.
7. How we keep it secure
- The website is served over HTTPS only.
- The database is encrypted at rest and only accessible over a TLS connection with credentials held in private environment variables. There is no public read access.
- Card payment information is handled exclusively by Stripe, we never see it.
- Access to our database, email tools and Stripe dashboard is limited to named Screen Northants staff using individually-authenticated accounts.
- We periodically review access and rotate credentials.
8. Your rights
Under UK GDPR you have the right to:
- Access: request a copy of the personal data we hold about you.
- Rectify: ask us to correct anything that's wrong.
- Erase: ask us to delete your data (we may need to keep donation records for tax purposes).
- Restrict or object: ask us to stop processing your data for specific purposes.
- Withdraw consent: for example, to unsubscribe from the newsletter.
- Portability: ask for your data in a portable format.
- Complain to the ICO if you feel we've not handled your data properly: ico.org.uk/make-a-complaint.
To exercise any of these rights, email info@screennorthants.co.uk. We'll respond within one calendar month.
9. Children & the Screen Northants Academy
The website itself is not directed at children. Newsletter and ambassador signups are intended for people aged 16 or older.
Our Academy works with young people aged 14–21. Personal information related to academy participants (including any under-18s) is handled through a separate consent and safeguarding process, with parental / guardian consent where required by law. That process is not covered by this website privacy policy.
10. Changes to this policy
We'll post any updates to this page and change the "Last updated" date at the top. Material changes will be flagged on the homepage and, where appropriate, communicated by email.
11. Contact
Questions, requests, or concerns? Email info@screennorthants.co.uk and mark the subject line "Privacy".