Privacy, explained clearly

Privacy &
Cookie Policy.

What we collect, why we use it, who helps us provide this website, and the choices you have.

Last updated
9 September 2026

Controller
THE CAMERA GUYSUK LTD

Questions?
info@thecameraguys.co.uk

The short version

We use personal information to answer enquiries, deliver projects, keep the site secure and—only where you choose—understand site use, provide live chat or show external video.

We do not sell personal data. We do use service providers where they are needed to run the website and the business, and some of those providers may process information outside the UK. The detail is below.

01 — Controller

Who is responsible for your data?

THE CAMERA GUYSUK LTD, trading as The Camera Guys, is the controller for the personal data described in this notice. The company is registered in England and Wales under number 11891791.

Registered office
Flat 6 Ballingdon Grove
Middleton Road
Sudbury, England
CO10 7LJ
Studio / contact address
2 Mill Tye
Great Cornard
Sudbury, Suffolk
CO10 0JA

For privacy questions or to exercise a right, email info@thecameraguys.co.uk, call 01787 275488, or write to the studio address above.

02 — Information

What we collect

Enquiries

Name, email address, phone number, company or organisation, project type, dates, location and anything you include in your message.

Client & supplier records

Contact details, briefs, contracts, schedules, correspondence, invoices, payment status and information needed to deliver or commission work.

Website & device data

IP address, browser, device, approximate location, referring page, pages viewed, interactions and timestamps. Optional analytics data is collected only after consent.

Security information

Request details and technical signals used by hosting, Wordfence and Cloudflare Turnstile to detect spam, abuse and threats.

Chat & media choices

If enabled, Tidio may process chat messages and device identifiers. YouTube or Vimeo may receive network, device and viewing information when a player is loaded.

Production information

Where relevant to a project: contributor details, permissions, access requirements and footage or photographs containing identifiable people.

We ask you not to send sensitive personal information through a general website form unless it is genuinely needed. If a production requires sensitive information, we will agree an appropriate way to handle it.

03 — Purposes & lawful bases

Why we use personal data

PurposeTypical lawful basis
Reply to an enquiry and prepare a quote or proposal.Steps at your request before a contract; legitimate interests for business enquiries.
Plan, film, photograph, edit, deliver and administer a project.Contract; legitimate interests where the client is an organisation; legal obligation where applicable.
Invoice, maintain financial records and deal with legal claims.Contract, legal obligation and legitimate interests.
Keep the website, forms and systems secure.Legitimate interests in preventing fraud, spam and misuse.
Measure website use with Google Analytics.Your consent for storage/access and related analytics processing.
Provide Tidio chat and external YouTube/Vimeo players.Your consent to load those optional services.
Send direct marketing where we do so.Consent, or another route permitted by UK direct-marketing rules; every message will provide an opt-out.

Where we rely on legitimate interests, we consider the purpose, necessity and effect on the people involved. You can object to that processing; see Your rights.

04 — Enquiries & security

What happens when you use a form?

Our enquiry forms are built with WPForms. A submission is sent to our business email account and may also be stored in the WordPress database so we can respond, maintain context and protect against spam. Form records can include the information you enter and technical submission data.

We use honeypot checks, time-based anti-spam controls and Cloudflare Turnstile on relevant forms. Turnstile receives technical information needed to assess whether a submission is likely to be human. We treat this as necessary security technology because the public forms cannot be operated safely without proportionate abuse controls.

Submitting an enquiry does not add you to a public newsletter list. The current site has no active Mailchimp or other newsletter sign-up integration.

05 — Cookies & similar technology

Choose what may load

Cookies are small text records. Similar technologies include local storage, session storage, pixels and scripts that read or write information on a device. Necessary technology is used without consent where the law permits; everything in the three optional categories stays off until you choose it.

Always on

Necessary

Stores your privacy choice, supports WordPress administration, protects forms and helps defend the site. It is not used for advertising.

Optional

Analytics

Loads Google Analytics 4 (measurement ID G-HSYN13859F) to report aggregated site and device use. Google Analytics is not requested before consent.

Optional

Live chat

Loads Tidio so you can start a chat. The widget and its browser storage are not requested before consent.

Optional

Embedded media

Loads YouTube or Vimeo players. Self-hosted videos and ordinary images do not require this permission.

Technologies used on this site

Name / serviceCategory & purposeTypical duration
tcg_consentNecessary. Records policy version, timestamp and category choices.180 days
wordpress_logged_in_*, wordpress_sec_*, wp-settings-*Necessary for signed-in WordPress administrators; normal public visitors are not logged in.Session to 1 year, depending on the cookie
Cloudflare Turnstile / security cookies such as cf_clearance when a challenge requires oneNecessary. Spam, bot and abuse prevention.Session or provider-controlled; cf_clearance can last up to 1 year
_ga, _ga_HSYN13859FAnalytics. Distinguish visitors and maintain session state after analytics consent.Google default: up to 2 years; browsers may shorten this
Tidio cookies and browser storage (names can change with the widget release)Live chat. Maintain the widget, visitor/session state and conversation continuity after chat consent.Session or provider-controlled
YouTube / Vimeo player cookies and storageEmbedded media. Playback, security, preferences and provider analytics after media consent. YouTube embeds use privacy-enhanced mode.Session to provider-controlled periods; Vimeo examples range from 30 minutes to 2 years

Consent is versioned and timestamped. It expires after 180 days, and we ask again sooner if the purposes or categories materially change. You can withdraw consent at any time using “Cookie settings” in the footer. Withdrawing consent stops future optional loading; deleting third-party records already held may also require browser controls or a request to the relevant provider.

06 — Recipients & providers

Who may receive information?

We share information only where it is needed for the purposes above, where you ask us to, or where law requires it. Depending on the interaction, recipients may include:

  • Website hosting, email, backup and IT providers used to operate and secure our systems.
  • WPForms and WordPress infrastructure used to receive and administer website enquiries.
  • Cloudflare Turnstile and Wordfence for form and website security.
  • Google Analytics if analytics is enabled in your choices.
  • Tidio if live chat is enabled and used.
  • YouTube and Vimeo if embedded media is enabled and a player is loaded.
  • ShortPixel's image-delivery network, Google Fonts and Font Awesome when the site requests visual assets; these services receive ordinary connection information such as IP address and user agent.
  • Professional advisers, insurers, regulators or public authorities where reasonably necessary.
  • Production crew, venues, freelancers and delivery suppliers where needed for a project, subject to appropriate instructions and confidentiality.

Links to Instagram, Facebook, YouTube, Google Maps and Yell do not load those services merely because the link is displayed. Their own terms apply if you follow a link.

07 — Outside the UK

International transfers

Some technology providers operate internationally, so personal data may be processed outside the UK. The route and location depend on the provider and service configuration. Where UK data-protection law restricts a transfer, we use or require an appropriate mechanism—such as UK adequacy regulations or approved contractual safeguards—and consider any additional protections that are needed.

Because optional analytics, chat and media providers are blocked before consent, you can use the core site without initiating those services.

08 — Retention

How long we keep information

We keep personal data only for as long as it is reasonably needed for the purpose collected, including responding to enquiries, delivering work, maintaining business records, resolving disputes and meeting legal obligations. Typical considerations are:

  • Routine enquiries are reviewed when no longer active; correspondence connected to a client relationship or potential claim may need to be kept longer.
  • Contracts, invoices and related records are generally retained for the period required for tax, accounting and legal purposes, commonly up to six years after the relevant period.
  • Production files and identifiable footage follow the agreed project, archive and delivery arrangements.
  • Security logs and backups are retained on rolling schedules set by the relevant hosting and security systems.
  • The consent record lasts 180 days. Google, Tidio, YouTube and Vimeo apply their own retention settings after their services are enabled.

If you need the retention position for a specific project or record, contact us and we will explain it.

09 — Your rights

Your data-protection rights

Depending on the circumstances, you may have the right to be informed; access your personal data; correct inaccurate data; ask for erasure or restriction; object to processing; receive certain data in a portable format; and withdraw consent without affecting earlier lawful processing.

These rights are not absolute. For example, we may need to keep information required by law or needed to establish, exercise or defend legal claims. We will explain if an exemption applies. We do not use website information for solely automated decisions that produce legal or similarly significant effects.

To make a request, email info@thecameraguys.co.uk. We may ask for proportionate proof of identity and information needed to locate the records.

10 — Children

Information about children

This business website is aimed at adults arranging professional services. We do not knowingly invite children to submit website enquiries. Productions involving children are handled through the commissioning organisation, parent, guardian or other authorised adult, with permissions and safeguards appropriate to the project.

11 — Questions or concerns

Talk to us first.

If you have a question, request or concern about personal data, contact info@thecameraguys.co.uk. We will look into it and respond as promptly as we can.

You may also complain to the Information Commissioner's Office. Visit ico.org.uk/make-a-complaint or call 0303 123 1113.

We may update this notice when our services or legal responsibilities change. The date at the top shows the current published version.

Contact The Camera Guys