Who we are
Cass Productions Limited, trading as NHIM Media (company number 03667610), is the controller of the personal data described in this notice, under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our address is The Patagonia Suite, Lyndhurst Road, Ashurst, Southampton, Hampshire, SO40 7AA. For any privacy question, email [email protected] or call 023 8065 2220.
What we collect
- Enquiry details: your name, email address, phone number, the service you choose and what you write in your message, and the date and time you sent it.
- Client records: contact details of people at client companies, project correspondence, contracts and invoices.
- Technical data: our web server keeps standard logs that may include your IP address, browser type and the pages requested. To limit repeated form submissions, we also keep a scrambled (hashed) version of your IP address for up to one hour.
- Footage and photographs: images and voices of people who appear in our filming. See "People we film".
We do not ask for special category data, such as health information, on this website. Please do not include it in your message.
Why we use it
| Purpose | Lawful basis |
|---|---|
| Replying to your enquiry and preparing a quote | Taking steps at your request before a contract, or our legitimate interest in answering business enquiries |
| Delivering and managing a project | Contract, or our legitimate interest in working with the people at our client companies |
| Accounting and tax records | Legal obligation |
| Keeping the website and form secure, and preventing spam | Legitimate interest in protecting our systems |
| Showing finished work in our portfolio | Legitimate interest in promoting our work, or consent where appropriate |
We do not sell personal data, send marketing emails from this form or use automated decision-making that has legal or similar effects on you.
People we film
When a client commissions us to film, the client usually decides why and how the footage is used, and is the controller. We process it on the client's behalf. This includes staff interviews, event guests and members of the public who may appear in the background. Clients should tell people that filming will take place, for example in invitations and notices at the venue.
When filming in public places or from a drone, we take reasonable steps to avoid focusing on people who are not part of the project. If you appear in our footage and have a concern, contact us and we will help, or pass your request on to the client responsible.
Who we share it with
We share personal data only where we need to, with:
- our website hosting and email providers, who act on our instructions
- freelance crew and suppliers working on a project, who only get what they need
- our accountants, professional advisers and insurers
- regulators, courts or law enforcement, if the law requires it
International transfers
We aim to keep personal data in the UK. If a provider handles it outside the UK, we make sure a lawful safeguard is in place, such as UK adequacy regulations or the Information Commissioner's approved data transfer agreement.
How long we keep it
- Enquiries that do not lead to work: up to 12 months after our last contact
- Client and accounting records: 6 years after the end of the financial year they relate to
- Footage: for the period agreed with the client, or as long as needed to complete the project
- Hashed IP addresses used to limit form submissions: up to one hour
How we protect it
Form submissions are sent over an encrypted connection when the site runs on HTTPS. Enquiries stored on our server are encrypted and kept in a protected area that cannot be reached or downloaded through the website. Access is limited to people who need it. No system is completely secure, so please do not send us passwords or payment details through the form.
Your rights
You have the right to:
- ask for a copy of your personal data
- ask us to correct data that is wrong or incomplete
- ask us to delete your data, or to restrict how we use it
- object to our use of your data where we rely on legitimate interests
- receive data you gave us in a portable format, in some cases
- withdraw consent at any time, where we rely on consent
These rights have some legal limits. To use them, contact us using the details above. We do not normally charge a fee, and we will normally reply within one month.
Complaints
If you are unhappy with how we handle your data, please contact us first so we can try to put it right. You can also complain to the Information Commissioner's Office (ICO): Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF; helpline 0303 123 1113; ico.org.uk/make-a-complaint (opens in a new tab).
Cookies
This website uses two cookies. Both are strictly necessary, so under the Privacy and Electronic Communications Regulations 2003 they do not need your consent. The first is set only on the contact page and when you send the form, and the second is set when you make your cookie choice.
| Cookie | Purpose | Lasts |
|---|---|---|
| nhim_form | Keeps your form session and security token, to protect the form against forged submissions | Until you close your browser |
| nhim_cookie_choice | Remembers the cookie choice you made, so we do not ask again on each page | 6 months |
We do not currently use analytics, advertising or social media cookies. If we add tools of that kind, we will ask for your permission first and they will run only if you allow them. Our fonts and images are served from our own server, and there are no embedded third-party maps or videos. The Google Maps link on the contact page only takes you to Google if you click it, and Google's own privacy terms then apply.
You can change your choice at any time here: . You can also block or delete cookies in your browser settings, although the enquiry form needs its cookie to work.
Changes to this notice
We may update this notice from time to time. The date at the top of the page shows when it last changed. See also our terms and legal notice.