Privacy Policy

This Privacy Policy outlines how Toby Charlton Roach, trading as Levanta Studios (“I”, “we”, “us”, “our”), collects, uses, and safeguards personal information (“personal data”) provided by you (“you”, “your”). It applies where we act as a data controller or data processor in relation to the personal data of website visitors, prospective clients, and clients. In all cases, we ensure compliance with the UK General Data Protection Regulation (UK GDPR).

GDPR Compliance

Levanta Studios is committed to full compliance with the UK GDPR, which came into effect on 25 May 2018. This legislation strengthens your rights as an individual and places greater responsibilities on organisations that handle personal data.

One of your key rights is the right to be informed—meaning you are entitled to clear information about how your personal data is collected and used. This Privacy Policy provides that transparency, along with details of your additional rights and the legal basis on which we process your data.

We take the control and security of our clients’ and prospective clients’ data seriously. Your personal data will never be shared beyond what is strictly necessary to respond to your enquiry or deliver our services. We conduct data audits every six months to ensure that all data held is accurate, relevant, and necessary.

Cookies and Third-Party Services

Our website uses third-party services, such as YouTube, to embed video content. When you visit a page containing embedded YouTube content, cookies may be set by YouTube. Levanta Studios does not control the distribution of these cookies.

Upon visiting our website, you will be prompted to manage your privacy settings, including cookie preferences. Disabling cookies may affect the functionality of embedded content.

For further details, please refer to our Cookies Policy.

Enquiry Data

When you contact us via our website, email, or telephone, we collect only the essential business contact information required to respond to your enquiry. This may include:

Name
Email address
Telephone number
Business name and location
Project-related information

Legal basis: Legitimate interest – we require this data to respond to your enquiry.

We retain enquiry data and related correspondence for up to one year from the date of last contact, recognising that some projects may take time to develop.

Client Data

Once a prospective client engages our services, we use the business contact details provided to manage the project. This may include:

Names of individuals and colleagues
Email addresses
Telephone numbers
Business details
Project specifications

Legal basis: Contractual necessity – required to fulfil our obligations to you.

Client data is retained for one year from the date of last contact, allowing for potential follow-up work or revisions.

Correspondence Data

We may process information contained in communications you send to us, including:

Email content
Metadata generated via our website forms

Legal basis: Legitimate interest – necessary for effective communication and record-keeping.

Correspondence data is retained for one year from the date of last contact, to support future collaboration or revisions.

Project Data

We retain all audiovisual materials and related documentation provided by you or created by us as part of your project (“project data”) for one year from the date of last contact.

We do not store personal data relating to individuals featured in footage or photographs. Media captured by us is assigned a unique identifier for internal reference.

If a project requires the collection of personal data, we will inform you in advance and ensure full compliance with GDPR.

Legal basis: Contractual necessity – required to deliver the agreed services.

At the end of the retention period, we will contact you to confirm whether you wish to continue storing your project assets or have them deleted.

Transaction Data

We may process data relating to purchases of goods or services, including:

Contact details
Transaction records

Legal basis: Performance of a contract – necessary to supply services and maintain accurate records.

Transaction data is retained for up to seven years, in line with accounting and legal obligations.

We do not store credit or debit card details.

Data Security

Your personal data is stored securely on a password-protected device, which is protected by:

Firewalls
Antivirus and threat protection
Ransomware safeguards

Footage and audiovisual materials are encrypted and stored in password-protected folders.

We do not share your personal data with third parties, and it will not be transferred outside the UK and European Economic Area (EEA) under any circumstances.

Data Transfers

To facilitate your project, media may need to be exchanged between you and us. This is typically done via a secure, password-protected cloud storage service. Access details are shared only with you, and passwords are sent via a separate communication channel.

In exceptional cases, you may request that data be transferred in person using an external storage device.

Your Rights

Under UK data protection law, you have the following rights:

Right of access – to request a copy of your personal data and confirmation of how it is being processed
Right to rectification – to correct inaccurate or incomplete data
Right to erasure – to request deletion of your data in certain circumstances
Right to restrict processing – to limit how your data is used
Right to data portability – to reuse your data across different services (where applicable)
Right to withdraw consent – to withdraw consent at any time (where processing is based on consent)

You also have the right to object – to object to processing in certain circumstances.

For more information or to exercise your rights, please contact us using the details below. You may also refer to the ICO’s guidance on individual rights.

Contact Details

For any queries regarding this Privacy Policy or your personal data, please contact:

Email: info@levantastudios.co.uk

Address: Levanta Studios, 4 Ovington Drive, Fleet, Hampshire, GU51 1DF

If you are dissatisfied with our response or wish to raise a complaint, you may contact the Information Commissioner’s Office (ICO):

Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Phone: 0303 123 1113

Website: www.ico.org.uk

Policy Updates

This Privacy Policy is reviewed regularly. Any changes to how we handle personal data will be reflected on our website.

Last updated: September 2025

ICO Registration Number: ZB989510