Privacy Policy

Last updated: 23 September 2026

Identity and Role of the Data Controller

starquestry acts as the data controller for all personal data processed in connection with our specialised courses in live production decks, control rooms, multi-camera switching, live broadcasting techniques, real-time video operation and professional management of television and streaming productions. We determine the purposes and means of processing and are responsible for compliance with the UK GDPR and the Data Protection Act 2018. Our registered office is at Wansbeck Workspace, Rotary Parkway, Ashington, Northumberland, NE63 8QZ and we can be contacted at [email protected] or 0191 694 1001.

Scope of This Notice and the People It Covers

This privacy notice applies to all individuals who interact with starquestry, including prospective students, enrolled learners, alumni, website visitors, and anyone who submits information through our contact form. It covers data collected via our commercial website, course registration processes, payment systems and any subsequent communications related to training in live production environments.

Categories of Personal Data and Sources

We collect identification data such as name and date of birth, contact details including email address and telephone number, professional information such as current employer and role in broadcasting, payment and billing information, course progress records and technical data from website interactions. Data is obtained directly from you when you register, complete forms or make payments, and indirectly through cookies or analytics tools that record browsing behaviour on our site.

Purpose-by-Purpose Explanation of Processing and Legal Basis

We process data to deliver and administer courses on the basis of contract performance. Marketing communications are sent only with your consent. Payment processing relies on legitimate interests to complete transactions securely. Compliance with legal obligations such as tax reporting forms another basis. Each purpose is documented internally with a clear record of the applicable lawful basis under the UK GDPR.

Whether Providing Data Is Required and Consequences of Not Providing It

Supplying identification and payment information is necessary to enrol on our courses. Failure to provide these details will prevent registration and access to training materials. Optional fields such as marketing preferences may be left blank without affecting course participation, though this may limit receipt of updates about new live production techniques or streaming production workshops.

Cookies and Similar Technologies

Our website uses cookies and similar tracking technologies to improve functionality and analyse usage. A separate Cookie Policy explains the types of cookies employed, their purposes and how you can manage your preferences through the site-wide cookie banner. Please refer to that document for full details on cookie categories and consent mechanisms required under PECR.

Processors, Service-Provider Categories, Recipients and Disclosures Required by Law

We engage carefully selected processors including payment gateways, learning management system providers and email delivery services. These entities process data only on our documented instructions and under appropriate contracts. We may disclose information where required by law, such as in response to requests from regulatory authorities or to protect our legal rights in the context of course delivery.

International Transfers and the Safeguards Used

Some processors may be located outside the United Kingdom. In such cases we rely on UK adequacy regulations where available, or implement appropriate safeguards including standard contractual clauses approved by the Information Commissioner’s Office to ensure an adequate level of protection for your personal data.

Specific Retention Periods or Defensible Criteria

Course enrolment records are retained for seven years after course completion to meet accounting and regulatory requirements. Marketing consent records are kept until consent is withdrawn. Technical logs are deleted after 12 months unless needed for security investigations. Criteria for retention balance legal obligations with data minimisation principles.

Security and Data-Minimisation Practices

We implement appropriate technical and organisational measures including encryption of sensitive data in transit, access controls and regular staff training on data protection. While we strive to protect information, no system can guarantee absolute security. We collect only the data necessary for the stated purposes and regularly review our processing activities to reduce unnecessary collection.

All Applicable Data-Subject Rights and Practical Exercise Method

You have the right to access, rectification, erasure, restriction, portability and objection. Requests can be submitted by emailing [email protected] or writing to Wansbeck Workspace, Rotary Parkway, Ashington, Northumberland, NE63 8QZ. We aim to respond within one month and may request identification to verify your identity before processing the request.

Right to Withdraw Consent and Object to Direct Marketing or Profiling

Where processing is based on consent you may withdraw it at any time by contacting us or using unsubscribe links. You may also object to direct marketing and any profiling activities. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Right to Complain to the Competent Supervisory Authority

If you are dissatisfied with our handling of your data you have the right to lodge a complaint with the Information Commissioner’s Office, the UK supervisory authority. Contact details are available on the ICO website. We encourage you to contact us first at [email protected] so we can attempt to resolve any concerns.

Children or Age Restrictions

Our courses are intended for individuals aged 18 and over who are pursuing professional development in live broadcasting and streaming production. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that data from a minor has been collected we will delete it promptly.

Automated Decision-Making and Profiling

We do not engage in automated decision-making that produces legal or similarly significant effects. Limited profiling may occur for marketing segmentation based on course interests, but this is always subject to your consent and does not result in automated decisions affecting individuals.

Policy Changes and Effective Date

We review this policy regularly and will update it when necessary to reflect changes in law or our practices. The current version is effective from 23 September 2026. Continued use of the website or enrolment in courses after an update constitutes acceptance of the revised policy.