GDPR Policy

Data controller

Nestamedia Studios is the data controller for personal data collected through this website and direct business enquiries. Company No. 09074381. Contact: hello@nestamedia.com.

Lawful bases for processing

We process personal data on one or more of the following bases: consent (for example when you opt in to marketing), contract (to deliver services you request), legitimate interests (to operate and improve our business, provided your rights are not overridden), and legal obligation (for example record keeping).

Categories of data

Identity and contact data, enquiry details, project correspondence, billing information, and limited technical usage data as described in our Privacy Policy.

International transfers

Some processors we use may store or process data outside the UK or EEA. Where this occurs, we rely on appropriate safeguards such as UK adequacy regulations, Standard Contractual Clauses, or equivalent approved mechanisms.

Data subject rights

You have the right to request access, rectification, erasure, restriction, portability, and to object to certain processing. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

We respond to valid requests within one month unless an extension is permitted. We may need to verify your identity before fulfilling a request.

Data protection enquiries

For GDPR-related requests or complaints, email hello@nestamedia.com with the subject line "Data protection request". You also have the right to contact the Information Commissioner's Office (ICO) in the UK.