Privacy Policy
Last updated: 2 November 2026
Identity and Role of the Data Controller
shimmerra acts as the data controller for the personal data processed through this website. We are responsible for determining the purposes and means of processing your personal data in connection with our specialised courses on live production decks, control rooms, multi-camera switching, live broadcasting techniques, real-time video operation, and professional management of television and streaming productions. Our registered address is Beaconsfield Studios, Station Road, Beaconsfield, Buckinghamshire, HP9 1LG, United Kingdom and you may contact us at [email protected] or by telephone on 01494 671234.
Scope of This Notice and the People It Covers
This privacy notice applies to all visitors to our website, individuals who enquire about or enrol in our courses, and anyone who interacts with us through the contact form or other means. It covers personal data collected from users located in the United Kingdom and explains how we handle that information in compliance with the UK GDPR and the Data Protection Act 2018.
Categories of Personal Data and Sources
We collect personal data directly from you when you complete forms on our site or communicate with us. This includes identification details such as your name, contact information including email address and telephone number, and professional details relevant to course enrolment such as your experience in video production. We may also receive technical data such as IP address and browser type through automated means when you visit the site. No data is obtained from third-party sources without your knowledge.
Purpose-by-Purpose Explanation of Processing and Legal Basis
We process your data to respond to course enquiries and manage enrolments on the basis of contractual necessity. Marketing communications are sent only with your consent. Website functionality and security are maintained under our legitimate interests. Analytics to improve course offerings are conducted with consent where required. Each purpose is limited to what is necessary and we do not process data for unrelated activities.
Whether Providing Data Is Required and Consequences
Providing certain personal data is necessary to process your course application or respond to your enquiry. If you do not supply required information such as contact details, we may be unable to complete your enrolment or provide the requested service. Optional fields allow you to share additional information at your discretion.
Cookies and Similar Technologies
We use cookies and similar technologies to ensure the website functions correctly and to remember your preferences. A separate cookie policy explains the types of cookies used and how you can manage them. Please refer to that document for full details on our use of these technologies in line with PECR requirements.
Processors, Service-Provider Categories and Recipients
We engage trusted service providers such as hosting companies, email delivery platforms and payment processors to support our operations. These processors act only on our instructions and under appropriate contracts. We may disclose data to regulatory authorities where legally required but do not sell or rent personal data to third parties for their own marketing purposes.
International Transfers and Safeguards
Some of our service providers may be located outside the United Kingdom. Where personal data is transferred internationally we rely on appropriate safeguards such as standard contractual clauses approved by the UK authorities to ensure an adequate level of protection.
Specific Retention Periods or Criteria
Enrolment records are retained for six years after course completion to meet legal and accounting obligations. Enquiry data is kept for up to two years unless you become a student. Technical logs are deleted after twelve months. We apply these criteria consistently and review retention needs regularly.
Security and Data-Minimisation Practices
We implement appropriate technical and organisational measures including encryption, access controls and regular security reviews to protect your data. We collect only the minimum information necessary for each purpose and train staff on data protection responsibilities. No security measure can be guaranteed to be completely effective.
All Applicable Data-Subject Rights and How to Exercise Them
You have the right to access, rectify, erase, restrict processing, data portability and object to processing of your personal data. To exercise these rights please contact us at [email protected]. We will respond to verified requests within one month as required by law.
Right to Withdraw Consent and Object to Direct Marketing
Where processing relies on consent you may withdraw that consent at any time by contacting us. You can also object to direct marketing at any time and we will cease such processing immediately upon receipt of your request.
Right to Complain to the Competent Supervisory Authority
If you are dissatisfied with how we handle your personal data you have the right to lodge a complaint with the Information Commissioner’s Office, the UK supervisory authority, using their website or contact details.
Children or Age Restrictions
Our courses are intended for adults and we do not knowingly collect personal data from individuals under the age of eighteen. If we become aware that data has been collected from a child we will take steps to delete it promptly.
Automated Decision-Making and Profiling
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals. Any analysis we perform is manual and supports our course development without automated outcomes.
Policy Changes and Effective Date
We may update this privacy policy from time to time to reflect changes in law or our practices. The current version was last updated on 2 November 2026 and any material changes will be highlighted on this page.