Version 1.0. Effective 18/08/2026. Last reviewed 18/08/2026.
1. Who we are
Brazen Studios is a trading name of Brazen Media Ltd, a company registered in England and Wales under company number 14229824, whose registered office is at 1-4 Plantain Place, Crosby Row, London, England, SE1 1YN. Our VAT registration number is GB470694567. Our studio operates from Unit 3A, 1-4 Plantain Place, Crosby Row, London SE1 1YN.
In this policy, "we", "us" and "our" mean Brazen Media Ltd. This policy covers the studio recording, production and post-production services provided under our studio terms and conditions. Our agency, brand, digital and consulting engagements are contracted separately and any different privacy terms in those contracts take precedence for that work.
We are registered with the Information Commissioner's Office under registration number [insert ICO registration number]. For anything to do with this policy or your personal information, email hello@brazenstudios.xyz or call +44 7383 422011.
2. When we are a controller and when we are a processor
This distinction matters, because it decides who you deal with about what.
We are a data controller for the information we handle for our own purposes: enquiries, bookings, invoicing, guest release forms, our own marketing, and the running of this website. This policy explains what we do with that information.
We are a data processor for the content of recordings made in our studio. The client who books the session decides who is recorded, what is discussed and where the recording is published. That client is the controller of the recording content, and we handle it only on their instructions. If you appeared in a recording and want to know how it will be used, or want it removed, the client is the person to ask. We will pass your request on if you contact us and you do not know who they are.
This split is set out in clause 6.3.3 of our terms and conditions, and the short-form notice given to everyone who appears in a recording is at Schedule 2 of those terms.
3. What we collect and where it comes from
| Category | What this includes | Where it comes from |
|---|---|---|
| Enquiry and booking information | Name, email address, telephone number, company or production name, the service you are interested in, and anything you tell us in your message | The forms on brazenstudios.xyz, email and telephone |
| Third-party booking platforms | Your name, contact details and booking details | TagVenue, Tutti and Peerspace, when you book a session through them |
| Payment information | The amount, date, payment reference and the last four digits and expiry of your card, covering both the 25% confirmation deposit and the balance | Our payment provider. We never see or store your full card number |
| Accounting records | Invoices, receipts, and the contact and billing details on them | Generated by us, held in our accounting software |
| Recording content | Audio and video of everyone who takes part, including anything they say about themselves | Captured in the studio. We handle this as a processor - see section 2 |
| Guest releases | Name, signature, date, the recording date and production, and whether promotional consent was given | The Guest Release at Schedule 2 of our terms, completed by each guest before a session begins |
| Website usage | Pages viewed, approximate location derived from IP address, device and browser type, referring site | Google Analytics, only if you accept analytics cookies - see our cookie policy |
| [Advertising and campaign measurement] | [Which advert or campaign brought you to the site, and which version of a page you were shown in a test] | [Google Ads and our A/B testing tool, only if you accept marketing and statistics cookies - see our cookie policy] |
| Marketing preferences | Your email address and whether you have opted in or out | Given by you when you ask to hear from us |
| CCTV footage | [Images of people entering and moving around the premises] | [Cameras at the entrance and in common areas] |
4. Why we use it, and our lawful basis
| Purpose | Lawful basis | Notes |
|---|---|---|
| Answering your enquiry and quoting for work | Legitimate interests | We cannot respond to an enquiry without using the details in it |
| Taking and fulfilling a booking, and providing the studio and technical services | Performance of a contract | |
| Taking payment and chasing overdue payment | Performance of a contract, and legitimate interests in recovering sums owed | |
| Keeping accounting and tax records | Legal obligation | Required under the Companies Act 2006 and by HMRC |
| Keeping a record that a guest consented to be recorded | Legitimate interests | The record protects both the guest and the production |
| Using recordings or identifiable images in our own marketing | Consent | Opt-in only, ticked by the client at clause 17 and by the guest at Schedule 2. Never a condition of any booking. Withdraw at any time |
| Sending marketing emails about our services | Consent, or the soft opt-in for existing customers under PECR | Every message has an unsubscribe link |
| Recording sensitive information a guest chooses to discuss | Explicit consent under Article 9(2)(a) UK GDPR | The client is responsible for identifying this in advance under clause 6.3.3(d) |
| Measuring how the website is used | Consent | Analytics cookies are set only if you accept them |
| [Measuring which adverts and page versions bring people to us] | [Consent] | [Advertising and testing cookies are set only if you accept them] |
| Premises security and health and safety | [Legitimate interests] | [CCTV, where operated - delete if not applicable] |
| Defending or bringing a legal claim | Legitimate interests, and legal obligation where a court requires it |
Where we rely on legitimate interests, we have considered whether our interest is fair to you and whether you would reasonably expect us to use your information in that way. You can ask us for the assessment, and you can object at any time.
5. Who we share it with
We do not sell personal information and we do not share it for anyone else's marketing. We share it with the following categories of recipients, each of which is bound to use it only for the purpose we specify.
| Recipient | What they receive and why |
|---|---|
| Our website host and content delivery provider | Technical data needed to serve the website |
| Our payment provider | The information needed to take your payment and handle refunds and chargebacks |
| Our accounting software provider and our accountant | Invoices and the billing details on them |
| Our email, file storage and productivity providers | Correspondence, documents and files created in the course of the work |
| Google Analytics | Website usage data, only where you have accepted analytics cookies |
| [Google Ads and our A/B testing tool] | [Campaign and page-test data, only where you have accepted marketing and statistics cookies] |
| Third-party booking platforms | Booking and messaging data, where you booked through them. They are separate controllers and have their own privacy policies |
| The client who booked a session | Recording content, and guest release forms relating to their session |
| Freelancers and contractors we engage | Only what they need for the specific job, under a written confidentiality obligation |
| Our professional advisers, insurers and auditors | Only what they need to advise or insure us |
| HMRC, regulators, courts and law enforcement | Where we are legally required to disclose it |
| A buyer or successor | If we sell or reorganise the business, on the same terms as this policy |
6. Where your information is held
We are based in the United Kingdom and our own records are held here. Some of the providers we use store or access data outside the UK, in particular in the United States and the European Economic Area.
Where information leaves the UK we rely on one of the safeguards permitted by Chapter V of the UK GDPR: a transfer to a country the UK Government has decided provides adequate protection, or the International Data Transfer Agreement or the UK Addendum to the European Commission's standard contractual clauses, together with an assessment of the risk in the destination country. You can ask us which applies to a particular provider.
7. How long we keep it
| Information | Retention period | Why |
|---|---|---|
| Enquiries that do not lead to a booking | 12 months from the last contact | So we can pick up a conversation that resumes |
| Booking records and correspondence | 6 years from the end of the booking | The limitation period for a contract claim in England and Wales |
| Accounting and tax records | 6 years from the end of the accounting period | HMRC and Companies Act requirements |
| Recording files | 30 days from the date we make the recording available to you, unless you arrange extended retention | The Standard Retention Period in our terms and conditions. We tell you the deletion date when we deliver the files |
| Signed guest releases | [6] years from the recording date | To evidence that consent was obtained for as long as a claim could realistically be brought |
| Marketing consents and opt-outs | Until you withdraw consent, and the record of the opt-out indefinitely | So we do not contact you again by mistake |
| Website analytics | [14] months in Google Analytics | Configurable in your Analytics settings |
| CCTV footage | [31] days unless needed for an incident | [Delete if not applicable] |
When a retention period ends we delete the information or anonymise it so it can no longer identify anyone.
8. Your rights
You have the right to ask us for a copy of the personal information we hold about you, to have inaccurate information corrected, to have information erased where we no longer need it, to object to or restrict how we use it, to receive it in a portable format where we hold it on the basis of consent or a contract, and to withdraw any consent you have given. Withdrawing consent does not affect anything done before you withdrew it.
You also have the right not to be subject to a decision made solely by automated means that has a significant effect on you. We do not make decisions that way.
To exercise any of these rights, email hello@brazenstudios.xyz. We will respond within one month. We may ask you to confirm your identity first. There is no charge unless a request is excessive or repetitive.
If your request concerns the content of a recording, see section 2 - the client who booked the session is usually the right person to ask, and we will help you reach them.
If you are unhappy with how we have handled your information, please tell us first so we have the chance to put it right. You can also complain to the Information Commissioner's Office at ico.org.uk, by calling 0303 123 1113, or by writing to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
9. Cookies
This website uses cookies. Our cookie policy explains which ones, what they do, how long they last, and how to change your choices.
10. Children
Our services are aimed at businesses and adult creators, and we do not knowingly collect information about children through this website. Guests under 18 sometimes take part in recordings. Where they do, clause 5.1.7 of our terms requires them to be accompanied on the premises at all times by a responsible adult nominated by the client, a parent or guardian completes the Guest Release at Schedule 2 on their behalf, and we do not supervise them.
11. Changes to this policy
We update this policy when what we do changes. The version number and effective date at the top tell you which version you are reading. Where a change materially affects how we use information we already hold, we will tell the people affected directly.
