Privacy Policy
Last updated: 18 September 2026
Identity and Role of the Data Controller
glampathki acts as the data controller for the purposes of this privacy policy. We are responsible for determining the purposes and means of processing personal data collected through our website, which provides a lifestyle media production guide covering visual direction, studio styling, lighting paths, camera framing, and polished content workflows. Our registered address is 36 Shad Thames, Butler's Wharf Building, London, SE1 2YE, United Kingdom and we can be contacted at [email protected].
Scope of the Notice and the People It Covers
This notice applies to all visitors to our commercial website based in the United Kingdom. It covers individuals who interact with the site, including those who submit enquiries via the contact form, access course materials, or otherwise engage with our services. It does not apply to offline interactions or third-party websites linked from our pages.
Categories of Personal Data and Sources
We collect personal data such as names, email addresses, and any details provided through the contact form. Additional information may include browsing behaviour, device identifiers, and preferences inferred from site usage. Data is obtained directly from you when you use the contact form or interact with the site, as well as automatically through cookies and similar technologies.
Purpose-by-Purpose Explanation of Processing and Legal Basis
We process data to respond to enquiries submitted via the contact form under the legal basis of legitimate interests and consent where applicable. For delivering the lifestyle media production guide content, processing occurs under contract performance. Analytics and site improvement rely on legitimate interests. Marketing communications, if opted into, are based on consent.
Whether Providing Data Is Required and Consequences
Providing contact details through the form is voluntary but necessary to receive responses. Failure to provide required information may prevent us from addressing your enquiry or granting access to certain features of the course guide.
Cookies and Similar Technologies
Our site uses cookies and similar technologies for functionality and analytics. Please refer to our separate Cookie Policy for full details on types used, durations, and how to manage preferences via the site-wide cookie banner.
Processors, Service-Provider Categories, Recipients, and Disclosures Required by Law
We engage service providers such as hosting platforms, email delivery services, and analytics providers who process data on our behalf under contractual safeguards. Data may be disclosed to law enforcement or regulatory bodies where required by applicable UK law, including under the Data Protection Act 2018.
International Transfers and Safeguards
Some processors may be located outside the UK. In such cases, we rely on UK adequacy regulations or standard contractual clauses approved by the Information Commissioner’s Office to ensure an adequate level of protection for your data.
Specific Retention Periods or Criteria
Contact form data is retained for up to two years after the last interaction to handle follow-ups. Analytics data is kept for twelve months. Course access records are retained for the duration of your subscription plus six years for legal compliance. Criteria for retention include legal obligations, business needs, and data minimisation principles.
Security and Data-Minimisation Practices
We implement technical and organisational measures including encryption, access controls, and regular security reviews to protect personal data. We collect only the minimum data necessary for the stated purposes and regularly review our processing activities to avoid excessive collection.
All Applicable Data-Subject Rights and Methods for Exercising Them
Under UK GDPR you have rights to access, rectification, erasure, restriction, portability, and objection. To exercise these rights, please contact us at [email protected] providing sufficient information to verify your identity. We will respond within one month as required by law.
Right to Withdraw Consent and Object to Direct Marketing or Profiling
Where processing is based on consent, you may withdraw it at any time by contacting [email protected]. You can also object to direct marketing or any profiling activities by using the same contact method or updating preferences through account settings where available.
Right to Complain to the Competent Supervisory Authority
If you are dissatisfied with our handling of your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority. Contact details and guidance are available on the ICO website.
Children or Age Restrictions
Our website and course content are intended for individuals aged 18 and over. We do not knowingly collect personal data from children under 18. If we become aware that such data has been collected, we will delete it promptly.
Automated Decision-Making and Profiling
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects. Any analytics used are for internal improvement only and do not result in automated decisions about individuals.
Policy Changes and Effective Date
We may update this policy to reflect changes in law or our practices. The last updated date appears at the top of this page. Continued use of the site after updates constitutes acceptance of the revised policy. For questions, reach us at [email protected] or 36 Shad Thames, Butler's Wharf Building, London, SE1 2YE, United Kingdom.