Privacy Policy

Flying Object are a creative agency and production company. We take your data very seriously. This Privacy Notice explains in detail the types of personal data we may collect about you when you interact with us in our day to day activities and in standard projects. It also explains how we will store and handle that data and keep it safe.

Some projects may involve the collection and processing of other forms of data, beyond the scope of this policy. In these cases we will abide by the GDPR's Accountability principle, and our approach is ‘data protection by design and by default’. This means we will put in place additional, appropriate technical and organisational measures to implement the all GDPR’s data protection principles and safeguard individual rights. We will assess the risk and where necessary complete a detailed Data Protection Impact Assessment, to help us identify and minimise the specific data protection risks for that project, and where appropriate we will release a specific or updated privacy policy for that project.

In in our day to day activities and in other projects our policy is as follows:

1. Legal Processing

Data protection law states there are several legal reasons why a company may collect and process personal data:

Contract – We will process your personal data to fulfil an order, deliver a service, essentially comply with our contractual obligations. 

Legal Compliance – If the law or government requires us to, we may need to collect and process your data. An example might be passing on details of fraud to law enforcement.

Legitimate Interest – In cases, we require personal data to pursue our legitimate interests in a way which might reasonably be expected as part of running our business. This does not impact your freedom or rights. Examples might be using a crew member’s phone number on a call sheet for a shoot, or using a current or past client’s email details to send marketing communication about relevant Flying Object services and work that we think might interest them. 

2. When do we collect, add to or amend your personal data?

  • When you visit our websites or speak us on the phone
  • When you purchase a product or service or enter into negotiations to do so
  • When you engage with us on social media
  • When you contact us by any means with queries, complaints etc
  • When you book any kind of appointment with us or book to attend an event, for example a meeting to discuss an opportunity
  • When you choose to complete any surveys we send you
  • Any individual may access personal data related to them, including opinions. So if your comment or review includes information about the Partner who provided that service, it may be passed on to them if requested.
  • When you’ve given a third party permission to share with us the information they hold about you
  • We may collect data from publicly-available sources where you have given your consent for them to share information publicly such as online directories or LinkedIn

3. What sort of personal data do we collect?

  • Contact details at the company which you work for such as email address and phone number
  • CVs and information about skills and services suppliers can provide
  • Details of your interactions with us through phone contact, email or online
  • Details of your visits to our websites, and which site you came from to ours
  • Information gathered by the use of cookies in your web browser
  • To deliver the best possible web experience, we may collect technical information about your internet connection and browser as well as the country and telephone code where your computer is located, the web pages viewed during your visit, the advertisements you clicked on, and any search terms you entered
  • Your social media username, if you interact with us through those channels, to help us respond to your comments, questions or feedback
     

4. How and why do we use your personal data?

We also want to help you solve business problems. To deliver projects we may need to use some of your personal data. We also want to offer you content, products and services that are most likely to interest you and to do this we will try to get the richest picture we can of who you are by combining the data we have about you.

The data privacy law allows this as part of our legitimate interest in understanding our clients and potential clients and providing the highest levels of service.

Of course, if you wish to change how we use your data, you’ll find details in the ‘What are my rights?’ section below.

Here’s how we’ll use your personal data and why:
 

  • To process any orders or hold negotiations that you make by using our team or agents. If we don’t collect your personal data during negotiations or ordering, we won’t be able to process your order and comply with our legal obligations. We would then keep those details for reasonable period afterwards in order to fulfil contractual obligations.

 

  • To respond to your queries. Handling the information you sent enables us to respond. We may also keep a record of these to inform any future communication with us and to demonstrate how we communicated with you throughout. We do this on the basis of our contractual obligations to you, our legal obligations and our legitimate interests in providing you with the best service and understanding how we can improve our service based on your experience.

 

  • To protect our business and yours from fraud and other illegal activities. We’ll also monitor your browsing activity with us to quickly identify and resolve any problems and protect the integrity of our websites. We’ll do all of this as part of our legitimate interest.

 

  • To market our services and products to you. We will use your personal data, preferences and details of your transactions to keep you informed by email, web, telephone about relevant content, products and services including information, tailored offers, discounts, promotions, events, competitions and so on. We market on the basis of legitimate interest and in a way which might reasonably be expected as part of running our business. This does not impact your freedom or rights. Our marketing will follow best practice laid out by the ICO when dealing with corporate subscribers under the PECR. Of course, you are free to opt out of hearing from us at any time.

 

  • To send you relevant, personalised communications by post or email in relation to updates, content, offers, services and products. We’ll do this on the basis of our legitimate business interest. You are free to opt out of hearing from us at any time.

 

  • To send you communications required by law or which are necessary to inform you about our changes to the services we provide you. For example, updates to this Privacy Notice, marketing data misuse issues, and legally required information relating to your orders. These service messages will not include any promotional content and do not require prior consent when sent by email or text message. If we do not use your personal data for these purposes, we would be unable to comply with our legal obligations.

 

  • To develop, test and improve the systems, services and products we provide to you. We’ll do this on the basis of our legitimate business interests

 

  • To comply with our contractual or legal obligations to share data with law enforcement 

 

  • To send you survey and feedback requests to help improve our services. These messages will not include any promotional content and do not require prior consent when sent by email or text message. We have a legitimate interest to do so as this helps make our products or services more relevant to you. Of course, you are free to opt out of receiving these requests from us at any time. 

5. How is personal data protected?

We will treat your data with the utmost care and take all appropriate steps to protect it.

We secure access to our websites and apps using ‘https’ technology.

Access to your personal data is password-protected, and sensitive data is secured by SSL encryption.

We regularly monitor our system to identify ways to further strengthen security. 

6. Website

What specific information is obtained?
Our website does not collect specific, detailed information about you as a visitor to our site.
Where information is gathered, we will inform you of this along with the explanation of why it is required. This information will be for purposes such as responding to an enquiry made and we will ask for this information in order for us to get in touch and provide the relevant information which has been requested from you.
 
What information is retained?
Cookies and tracking software are used on a temporary basis and expire when the site has been left. These are used for purposes such as website improvement. Google Analytics is also used for the same reason of website improvement and understanding how you use it. This information is not shared with anyone.
By using the website, you are consenting to the use of cookies to retain session information for the purposes listed above. This information is held in your web browser and is removed at the end of your session.


The personal information we collect and hold via analytics platforms or software is the following: 
 

  • Browser used (Chrome, Firefox, Internet Explorer etc.)
  • Location (based on IP address)
  • Gender
  • Age group
  • Site searches
  • Device(s) used
  • Frequency on Site
  • Session duration (time spent on the site)
  • Page(s) visited
  • Page session duration (time spent on specific page)
  • Web Surfing Behaviours

 
We currently use the following companies that may process your personal data through website usage. Facebook, Twitter, LinkedIn, Google, HubSpot, SharpSpring, Instiller.
 
Our Details
If you need to contact us then please find the relevant details on our contact page.

7. Customers / Enquirers

We hold information about customers/ enquirers as it is necessary for us to conduct our business activities.
 
What personal information is held?
The personal information we collect and hold is the following:

  • Full Name
  • Company Name
  • Company Address
  • Company Website Address
  • Email Address
  • Phone Number
  • Initial Requirement

 
This information may be linked together with what has already been gathered (as stated in the “what information is retained?” section) via tracking or analytics software.
 
How is this information gathered?
We gather this information through lead generation forms on our website and tracking software as mentioned in the “what information is retained?” section, as well as over the phone when relevant.
 
How long will the data be kept for?
For a reasonable period of time after you have stopped being an active customer, we may continue to contact you with information relating to our products and services. We deem a reasonable period of time to be three years after an order has been completed, or a relevant license period has expired. After this time, the data we hold will either be deleted, anonymised or retained providing you have asked us to do so.
 
Who will the data be passed to?
This information will not be passed on to anyone other than authorised employees the following third parties:

Examples of third parties we work with are:

  • Freelance crew and staff working with us on projects we are delivering for you
  • Google/Facebook/LinkedIn to show products that might interest you. This is based on consent or your acceptance of cookies on our website.
  • Data insight companies to ensure your details are up to date and accurate
  • IT companies who support our website and business systems

Additionally, if a legal matter were to arise, then we may need to provide this information for those purposes.

  • In this instance, we provide only the information required to perform the service
  • The data will only be used for that exact purpose
  • Partners are required to protect and respect your privacy
  • If we stop using a partners service, your data will be deleted or rendered anonymous

 
What is the reason for holding/using the information held?

While you are a customer of Flying Object, the basis for processing your data is ‘contract’. When you are not or no longer an active customer of Flying Object the basis is ‘legitimate interest’ as we would like you order products/services from us. 

We may use your details for the purpose of creating a profile to gauge decision making and for direct marketing purposes. For example, using information held, we may create profiles based on the following: 

  • Email Address
  • Telephone Number
  • Geographic Location
  • Job Title/Job Role

8. Data Subject Rights (Subject Access Request, Erasure, Rectification)

  • You have the right to ask for information we hold for you (Subject Access Request) which will be provided free of charge and if requested, can be presented in a spreadsheet
  • The data we hold will be corrected when we are notified of errors
  • Information we hold for you will no longer be processed if requested to do so
  • Information we hold for you will be deleted if requested to do so. It is possible we may contact you at a later date as we will hold no record of you
  • You have to right to withdraw consent at any time
  • You have the right to stop the use of your personal data for direct marketing through selected or all channels
  • You have the right to ask us to stop processing your personal data under legitimate interest for individual reasons. We will comply unless we believe there is a legitimate overriding reason to continue processing

Write to: Adele Hambly <adele@weareflyingobject.com>, Compliance Officer at Flying Object, for further information.

9. To stop the use of personal data for direct marketing:

Click 'Unsubscribe' link in any email communication that we send you. We will then stop all emails. 

Write to: Adele Hambly <adele@weareflyingobject.com>, Compliance Officer at Flying Object.

10. Our Details

If you need to contact us then please find the relevant details on our contact page.

11. To contact the regulator, please see below:

Call 0303 123 113 or go to www.ico.org.uk.