Privacy Policy

Last updated: 02 November 2026

Who we are and our role as data controller

itemify operates this website as a commercial resource focused on professional studio production techniques for motion content. We act as the data controller under the UK GDPR and the Data Protection Act 2018. This means we determine the purposes and means of processing personal data collected through the site. Our registered address is Beaconsfield Studios, Station Road, Beaconsfield, Buckinghamshire, HP9 1LG and you may contact us at info@nfts.co.uk or 01494 671234 for any data protection queries.

Scope of this notice

This privacy notice applies to all visitors to the website, including individuals who submit enquiries through the contact form, register for resources, or otherwise interact with our online services. It covers processing activities carried out by itemify in the United Kingdom and explains how we handle personal data in accordance with UK data protection law and the Privacy and Electronic Communications Regulations.

Categories of personal data and sources

We collect personal data directly from you when you use the contact form or request information. This includes your name, email address, telephone number if provided, and any message content you submit. We may also receive technical data such as IP address, browser type, and device information automatically through server logs. No data is obtained from third-party sources without your knowledge.

Purposes of processing and legal bases

We process personal data for several distinct purposes. First, to respond to enquiries submitted via the contact form, the legal basis is legitimate interests in providing customer service. Second, to deliver the professional resources and course materials described on the site, the basis is performance of a contract. Third, for website analytics and improvement, the basis is legitimate interests, balanced against your rights. Fourth, for compliance with legal obligations such as record keeping, the basis is legal obligation. Each purpose is explained in plain terms so you understand why your data is needed.

Requirement to provide data and consequences

Providing personal data through the contact form is voluntary. However, if you choose not to supply the minimum information required, we may be unable to respond to your enquiry or grant access to certain resources. Technical data is collected automatically and cannot be refused without disabling essential site functions.

Cookies and similar technologies

We use cookies and similar tracking technologies to enable core site functionality and gather usage statistics. Details of the specific cookies deployed, their purposes, and your options for managing them are set out in our separate Cookie Policy, which is accessible from the site footer and referenced here in accordance with PECR requirements.

Processors, recipients and lawful disclosures

We engage carefully selected service providers who act as processors on our behalf, including hosting providers, email delivery services, and analytics platforms. These processors are bound by contractual safeguards. We may also disclose personal data where required by law, regulation, or court order, or to protect the rights and safety of itemify and its users.

International transfers

Some of our processors are located outside the United Kingdom. Where personal data is transferred to countries without an adequacy decision, we rely on appropriate safeguards such as standard contractual clauses approved by the UK Government or the Information Commissioner’s Office to ensure an equivalent level of protection.

Retention periods

We retain enquiry-related personal data for a maximum of two years after the last interaction, unless a longer period is required for legal or accounting reasons. Technical log data is retained for twelve months. These periods are reviewed regularly to ensure they remain necessary and proportionate.

Security and data minimisation

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, or loss. Data collection is limited to what is strictly necessary for the stated purposes, and we encourage users to provide only the information required to fulfil their request.

Your data protection rights

Under UK GDPR you have the right to access your personal data, request rectification or erasure, restrict or object to processing, and request data portability where applicable. To exercise any of these rights, please contact us in writing at info@nfts.co.uk or Beaconsfield Studios, Station Road, Beaconsfield, Buckinghamshire, HP9 1LG. We will respond within one month, or inform you if an extension is necessary.

Withdrawing consent and objecting to marketing

Where processing relies on consent, you may withdraw that consent at any time by contacting info@nfts.co.uk. You also have the right to object to direct marketing at any time. If you opt out, we will cease such processing without undue delay.

Right to complain to the supervisory authority

If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with the Information Commissioner’s Office, the UK supervisory authority. Contact details and guidance are available on the ICO website.

Children and age restrictions

Our website and resources are intended for professionals aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that such data has been collected, it will be deleted promptly.

Automated decision-making and profiling

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals. Any analytics performed are used solely for internal service improvement and do not result in automated outcomes affecting you personally.

Changes to this policy

We may update this privacy policy from time to time to reflect changes in law or our practices. The date of the most recent revision appears at the top of the page. Continued use of the website after an update constitutes acceptance of the revised terms.