Privacy Policy

Last updated: 30 October 2026

Identity and Role of the Data Controller

journeoza acts as the data controller for the personal data processed through this website. We are a United Kingdom-based provider of specialised training in live production decks, control rooms, multi-camera switching, live broadcasting techniques, real-time video operation and professional management of television and streaming productions. Our registered address is Beaconsfield Studios, Station Road, Beaconsfield, Buckinghamshire HP9 1LG. We determine the purposes and means of processing personal data collected via the site and associated services.

Scope of This Notice

This privacy notice applies to all visitors to the website, individuals who enquire about or enrol in our courses, and anyone who interacts with us through the contact form or other means. It covers data processing activities carried out in the United Kingdom and explains how we handle information in line with the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations.

Categories of Personal Data and Sources

We collect personal data directly from you when you complete the contact form, enrol in a course or communicate with us. This may include your name, email address, telephone number, postal address, payment details for course fees, and information about your professional background in broadcasting or production. We also collect technical data such as IP address, browser type and device identifiers through cookies and server logs. No data is obtained from third-party sources without your knowledge.

Purposes of Processing and Legal Bases

We process your data for the following purposes, each with a specific legal basis under UK GDPR: to respond to course enquiries and manage enrolments (contractual necessity or legitimate interest); to deliver training materials and certificates (contract); to process payments (contract); to send service-related communications (legitimate interest); to improve our website and courses through analytics (consent or legitimate interest); and to comply with legal obligations such as tax and accounting requirements (legal obligation). Each purpose is explained in plain terms so you understand why your information is needed.

Whether Providing Data Is Required

Supplying certain personal data is necessary to enrol in a course or receive a response to an enquiry. If you do not provide the required information, we may be unable to complete your registration, issue invoices or deliver the training. You are not obliged to provide data for marketing purposes and can opt out at any time without affecting your course access.

Cookies and Similar Technologies

We use cookies and similar technologies to enable essential site functions, remember your preferences and gather anonymous usage statistics. A separate Cookie Policy explains the categories of cookies we deploy and how you can manage your preferences through the site-wide cookie banner. You can adjust settings at any time via your browser or the banner controls.

Processors, Recipients and Disclosures

We share data with carefully selected service providers that act as processors, including payment processors, email delivery platforms, cloud hosting providers and course management software suppliers. These processors are bound by contracts that require them to protect your data and use it only for our specified purposes. We may also disclose information where required by law, such as in response to a court order or regulatory request from a UK authority.

International Transfers

Some of our processors are located outside the United Kingdom. When personal data is transferred to countries without an adequacy decision, we rely on appropriate safeguards such as UK-approved standard contractual clauses or binding corporate rules to ensure an equivalent level of protection.

Retention Periods

We retain personal data only for as long as necessary for the purposes described. Course enrolment records and associated financial data are kept for six years to meet tax and accounting obligations. Enquiry data is retained for up to two years if no enrolment follows. Marketing consent records are kept until you withdraw consent. Technical logs are deleted after twelve months unless required for security investigations.

Security and Data Minimisation

We implement appropriate technical and organisational measures, including encryption in transit, access controls and regular staff training, to protect personal data. We collect only the minimum information required for each purpose and regularly review our data holdings to delete or anonymise records that are no longer needed.

Your Data Subject Rights

Under UK GDPR you have the right to access your personal data, request rectification or erasure, restrict or object to processing, and request data portability where applicable. You may exercise these rights by contacting us using the details on our Contacts page or by emailing info@nfts.co.uk. We will respond within one month, or longer where the request is complex.

Right to Withdraw Consent and Object to Marketing

Where processing is based on consent, you may withdraw that consent at any time by using the unsubscribe link in emails or by writing to info@nfts.co.uk. You also have the right to object to direct marketing and any profiling we may undertake for that purpose. Opting out will not affect any contractual services you receive.

Right to Complain

If you are dissatisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office, the UK supervisory authority. Contact details are available on the ICO website. We encourage you to contact us first at info@nfts.co.uk so we can address your concerns directly.

Children and Age Restrictions

Our courses are intended for individuals aged 18 and over who are pursuing professional development in television and streaming production. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that data from a minor has been provided, we will delete it promptly.

Automated Decision-Making and Profiling

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects. Any analytics we perform are used solely to improve course content and website usability.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in law or our practices. The date of the most recent revision appears at the top of the page. Continued use of the website after an update constitutes acceptance of the revised policy. For questions, please reach us via the contact form or at info@nfts.co.uk.