Privacy Policy

Last updated: 3 November 2026

Who we are and our role as data controller

shineupo operates this website and the associated course offerings focused on live production decks, control rooms, multi-camera switching, live broadcasting techniques, real-time video operation, and professional management of television and streaming productions. We act as the data controller under the UK GDPR and the Data Protection Act 2018. This means we decide why and how personal data is processed in connection with our commercial services.

Scope of this notice

This privacy notice applies to anyone who visits our website, submits enquiries through the contact form, enrols in or expresses interest in our courses, or otherwise interacts with us from within the United Kingdom. It covers all processing activities carried out by shineupo in its capacity as a commercial provider of specialised training.

Categories of personal data and sources

We collect identification details such as name and address, contact information including email address and telephone number, professional background information relevant to course enrolment, and technical data such as IP address and browser type obtained automatically when you visit the site. Information is gathered directly from you via forms, indirectly through service providers, and automatically via cookies and similar technologies.

Purposes of processing and legal bases

We process personal data to respond to enquiries submitted through the contact form on the basis of legitimate interest and, where required, consent. Course enrolment and delivery rely on contract performance. Marketing communications are sent only with consent or where soft opt-in applies under PECR. Website analytics are conducted under legitimate interest to improve service quality. Each purpose is matched to a specific lawful basis under UK GDPR Article 6.

Requirement to provide data and consequences

Supplying contact details is necessary to receive replies to enquiries or to complete course registration. Failure to provide required information will prevent us from delivering the requested service or responding to your message. Optional fields may be left blank without affecting core functionality.

Cookies and similar technologies

We use cookies and similar tracking technologies to enable essential site functions, measure audience reach, and remember preferences. A separate Cookie Policy explains the categories in use and how to manage them. You can adjust settings via the site-wide cookie banner or your browser controls at any time.

Processors, recipients and legal disclosures

Personal data may be shared with service providers acting as processors such as hosting companies, email delivery platforms, and payment processors under written contracts. We may also disclose information to regulatory bodies or law enforcement where legally required. No sale of personal data occurs.

International transfers

Where data is transferred outside the United Kingdom, appropriate safeguards such as UK-approved standard contractual clauses or adequacy decisions are applied to protect the data to a standard equivalent to UK GDPR.

Retention periods

Enquiry data is retained for up to two years after the last contact. Course records are kept for seven years to meet accounting and regulatory obligations. Technical logs are deleted after twelve months unless needed for security investigations.

Security and data minimisation

Reasonable technical and organisational measures are implemented to protect personal data against unauthorised access or loss. Data collection is limited to what is necessary for the stated purposes, and access is restricted to authorised personnel.

Your data protection rights

Under UK GDPR you may request access, rectification, erasure, restriction, portability, or objection to processing. Requests can be made by emailing [email protected] or writing to Beaconsfield Studios, Station Road, Beaconsfield, Buckinghamshire, HP9 1LG. We will respond within one month, extendable by two further months for complex requests.

Withdrawing consent and objecting to marketing

Where processing relies on consent you may withdraw it at any time by contacting [email protected] or using unsubscribe links. You may also object to direct marketing at any time without charge.

Complaints to the supervisory authority

If you believe your data protection rights have been infringed you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by telephone on 0303 123 1113.

Children and age restrictions

Our courses and website are intended for individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we become aware that data from a minor has been collected we will delete it promptly.

Automated decision-making and profiling

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects. Any analytics performed are used solely for service improvement and do not result in automated decisions about individuals.

Changes to this policy

We may update this notice from time to time to reflect legal or operational changes. The current version will always be available on this page with the last updated date displayed at the top. Continued use of the site after changes constitutes acceptance of the revised policy.