Privacy Policy

Climaxx Media Ltd
Effective Date: 9th December 2025
Last Updated: 9th December 2025

1. Introduction

Climaxx Media Ltd ("we", "us", or "our") is committed to protecting the privacy and personal data of individuals in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection laws in the United Kingdom. This Privacy Policy explains how we collect, use, disclose, retain, and protect your personal data when you visit our website at https://climaxxmedia.com or interact with us in any way.

We are registered with the UK Information Commissioner's Office (ICO) as both a Data Controller and, where applicable, a Data Processor under registration number ZB778270.

2. Who We Are

Climaxx Media Ltd
Registered in England and Wales
Company Number: 15778481
Registered Office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
Email: [email protected]
Website: https://climaxxmedia.com

We act as a Data Controller when we determine the purpose and means of processing personal data, and as a Data Processor when handling data on behalf of third parties (e.g. clients or course participants, where applicable).

3. Legal Basis for Processing

We collect and process personal data under the following lawful bases, as defined under Article 6 of the UK GDPR:

• Consent: where you have given clear and informed permission.
• Contractual necessity: where processing is required to fulfil a contract.
• Legal obligation: where we are legally required to retain or share data.
• Legitimate interests: for purposes such as marketing, security, or service optimisation, where your rights do not override our interests.

4. What Data We Collect

We may collect and process the following categories of personal data:

• Identity Data: name, date of birth, username, profile photo (if applicable)
• Contact Data: email address, phone number, postal address
• Technical Data: IP address, browser type, device information
• Usage Data: page views, clickstream data, referral sources
• Marketing Data: preferences, interactions with our newsletters or campaigns
• Application Data: professional interests, age, gender, sexual orientation (if voluntarily disclosed and required for casting)

Sensitive data (such as sexual orientation or gender identity) is only collected where explicit consent has been obtained and where it is directly relevant to our legitimate casting activities or services.

5. How We Collect Data

We collect data through:

• Direct submissions (e.g. contact forms, course enrolment, casting applications)
• Website analytics tools (e.g. Google Analytics, via anonymised tracking)
• Cookies and similar web tracking technologies
• Third party integrations (e.g. email marketing platforms, CRM systems)

6. Cookies and Tracking Technologies

We use cookies to enhance your experience, understand usage patterns, and deliver targeted content. You will be notified of cookie use upon your first visit and have the option to manage your preferences.

7. How We Use Your Personal Data

We process your data for the following purposes:

• To provide, manage, and support our services, including training courses and casting opportunities
• To administer your account or application
• To respond to enquiries or complaints
• To send marketing communications (with opt out options)
• To comply with legal or regulatory obligations
• To protect against fraud, abuse, or unauthorised access

We do not engage in automated decision making or profiling without your explicit consent.

8. Data Sharing and Third Parties

With your explicit consent:

• Verified partner production companies for increased casting and performance opportunities (as detailed in your application consent preferences)
• Other third parties you have specifically authorised us to share your information with

For legitimate business purposes:

• IT service providers (e.g. hosting providers, CRM developers, analytics platforms)
• Professional advisors (e.g. legal, HR, compliance consultants)

When legally required:

• Regulatory bodies (e.g. ICO, HMRC)
• Law enforcement agencies, when legally obligated to do so

All third party service providers are bound by strict data processing agreements ensuring GDPR compliance. Where we share data based on your consent, you retain the right to withdraw that consent at any time by contacting us.

9. Data Transfers Outside the UK

Where data is transferred outside the UK or European Economic Area (EEA), we ensure appropriate safeguards are in place, such as: UK IDTA (International Data Transfer Agreement) or Standard Contractual Clauses (SCCs) approved by the UK Government or European Commission.

10. How Long We Keep Your Data

We retain personal data only as long as necessary:

We securely delete or anonymise personal data after the retention period.

11. Your Data Protection Rights

Under UK GDPR legislation, you have the following rights:

• Right to access: request a copy of your personal data
• Right to rectification: request correction of inaccurate data
• Right to erasure: request deletion of your data
• Right to restrict processing: request limits on use
• Right to object: object to processing based on legitimate interest
• Right to data portability: request data transfer to another provider
• Right to withdraw consent: where processing is based on consent

To exercise your rights, email: [email protected]

If you believe your rights have been violated, you can lodge a complaint with the Information Commissioner's Office (ICO): https://ico.org.uk/make-a-complaint/

12. Data Security

We implement technical and organisational measures to safeguard your data, including:

• SSL encryption
• Secure data hosting and firewalls
• Access controls and role based data permissions for staff
• Regular backups and vulnerability monitoring

We also train our staff on GDPR and confidentiality obligations.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, operations, or technology. The most recent version will always be available on this page with the last updated date clearly displayed.

14. Governing Law and Jurisdiction

This Privacy Policy and any dispute arising out of it shall be governed by the laws of England and Wales. Any legal action or proceeding shall be subject to the exclusive jurisdiction of the courts of England and Wales.

15. Contact Us

For any privacy related queries, requests, or concerns, please contact:

Data Protection Officer
Climaxx Media Ltd
Email: [email protected]
Registered Office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
ICO Registration Number: ZB778270

Effective Date: 9th December 2025. Last Updated: 9th December 2025. Climaxx Media Ltd. Company No. 15778481.