PRIVACY — BEDITORIUM

1. Who we are

Beditorium is a content consultancy and video production business based in the United Kingdom, operated by Billy (the "data controller"). When this policy refers to "we," "us," or "our," it means Beditorium.

If you have any questions about how your data is handled, you can contact us at Billy@beditorium.co.uk.

2. Data we collect

We only collect information that is necessary to provide our services or communicate with you effectively.

Information you provide directly

Your name and email address when you submit an enquiry via our contact form
Your name, email, and payment information when you subscribe to a plan via Stripe
Your name, email, and calendar details when you book a discovery call via Calendly
Any project details or files you share with us as part of our working relationship

Information collected automatically

Basic usage data when you visit our website (pages visited, time spent, device type) via standard web analytics
IP address and browser information for security and performance purposes
Cookies (see the Cookies section below)

3. How we use your data

We use the information we collect for the following purposes, each with a lawful basis under UK GDPR:

To deliver our services — processing your project files, communicating about work, and managing deliverables. Lawful basis: contract performance.
To process payments — managing subscriptions and one-off payments via Stripe. Lawful basis: contract performance.
To respond to enquiries — replying to messages you send us via the contact form or email. Lawful basis: legitimate interest.
To schedule calls — managing discovery call bookings through Calendly. Lawful basis: legitimate interest.
To improve our website — understanding how visitors use the site. Lawful basis: legitimate interest.

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling.

4. Third parties we use

We use a small number of trusted third-party services to run our business. Each handles your data only as necessary to provide their specific function:

Stripe

Used to process subscription payments and one-off transactions. Stripe handles all payment card data directly — we never see or store your card details. Stripe is PCI-DSS compliant. Stripe's privacy policy →

Formspree

Used to receive and route messages submitted via our contact form. Your name, email, and message are transmitted through Formspree's servers. Formspree's privacy policy →

Calendly

Used to manage discovery call bookings. When you book a call, Calendly collects your name, email address, and calendar availability. Calendly's privacy policy →

Google Fonts & YouTube

Our website uses Google Fonts for typography, which may result in a request to Google's servers when you visit. We also embed YouTube videos on some pages; YouTube may set cookies when you interact with these players. Google's privacy policy →

All third-party providers are required to handle your data securely and are not permitted to use it for their own marketing purposes.

5. Data retention

We retain your personal data only for as long as necessary:

Client project data — retained for the duration of our working relationship and up to 6 years afterwards for tax and legal record-keeping purposes
Enquiry data — retained for up to 12 months if no ongoing relationship is established
Payment records — retained for 6 years in accordance with HMRC requirements
Analytics data — aggregated and anonymised; no personally identifiable information is retained

When data is no longer required, it is securely deleted.

6. Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

Right of access — you can request a copy of the personal data we hold about you
Right to rectification — you can ask us to correct inaccurate or incomplete data
Right to erasure — you can request that we delete your data, subject to any legal obligations to retain it
Right to restrict processing — you can ask us to limit how we use your data
Right to data portability — you can request your data in a machine-readable format
Right to object — you can object to processing based on legitimate interests

To exercise any of these rights, contact us at Billy@beditorium.co.uk. We will respond within 30 days.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

7. Cookies

Cookies are small text files stored on your device by your browser. Our website uses the following types:

Essential cookies — required for the website to function (e.g. remembering your session)
Third-party cookies — set by Calendly, YouTube, and Google Fonts when you interact with embedded content. These are subject to the respective providers' cookie policies.

You can control or delete cookies through your browser settings. Note that disabling certain cookies may affect website functionality.

8. Contact us

If you have questions about this Privacy Policy or how we handle your personal data, please get in touch:

Email: Billy@beditorium.co.uk
Website: beditorium.co.uk/contact

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Significant changes will be communicated to active clients directly.