Last updated: 1 January 2026.
What we collect
From the enquiry, media kit and account forms: your name, email address, phone number, company, role, and whatever you write in the message. For Overlay Studio accounts we also collect a billing address where you provide one. Nothing more, and no fields you have not filled in.
From your visit: standard server logs and privacy-respecting analytics covering pages viewed, referring source and approximate region. We do not use advertising cookies or cross-site trackers, and we do not sell or share visitor data with data brokers.
Why we hold it
- To reply to your enquiry, send the media kit and quote for work — on the basis of your request.
- To perform a contract you have entered into with us.
- To meet tax, accounting and record-keeping obligations.
- To send updates, if you asked for them. One click unsubscribes.
How long
Enquiries that do not become bookings: 24 months. Client records: 7 years, as tax rules require. Marketing emails: until you unsubscribe. Analytics: 14 months, aggregated.
Who else sees it
Our email provider, accounting software, payment processor, website host, and Google (Sheets) where subscriber and enquiry records are mirrored for our own operations. Overlay Studio subscriptions are billed through a third-party payment processor; we never see or store your card number. Where SMS verification is used, a telecoms provider processes the message. We do not sell personal data to anyone.
Your rights
You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Email gordonxemily@gmail.com and we will respond within 30 days. If you are in the EU, UK, California or another jurisdiction with specific data rights, those rights apply and we will honour them, including the right to opt out of any sale or sharing of personal information — which, since we do neither, is already the position.
Affiliate links
Some links on this site — particularly product recommendations on the About page — are affiliate links. If you buy through one we may earn a small commission at no additional cost to you. This never affects what we recommend, and any paid partnership is disclosed separately and prominently.
Content and likeness
If you appear in content we produced and want it removed from our own channels, email us and we will take it down from anything we control. Content already licensed to a brand is subject to that brand's license; we will tell you who to contact and help you do it.
Security and children
Client media is delivered over private links and stored encrypted at rest. If a breach affects your data we will tell you promptly and directly. This site is not directed at children under 13 and we do not knowingly collect their data. Where a shoot involves minors we require written parental consent and a guardian present, without exception.
Questions: gordonxemily@gmail.com.
A readable starting point, not legal advice. If you take bookings from the EU or UK, or process California residents' data at scale, have a privacy lawyer confirm this meets GDPR and CCPA/CPRA requirements before launch.