Privacy Policy

Last updated: 20 October 2026

Who We Are and Our Role as Data Controller

spotlymixo operates this website and acts as the data controller for personal data collected through it. We are a commercial provider of specialised training courses focused on live production decks, control rooms, multi-camera switching, live broadcasting techniques, real-time video operation and professional management of television and streaming productions. Our registered address is Beaconsfield Studios, Station Road, Beaconsfield, Buckinghamshire, HP9 1LG. For any data protection queries please contact us at info@nfts.co.uk or by telephone on 01494 671234.

Scope of This Privacy Policy

This notice explains how we collect, use and protect personal data from visitors to our website, individuals who enquire about or enrol on our courses, and anyone who interacts with us through the contact form or other means. It applies to all users located in the United Kingdom and covers data processing carried out by or on behalf of spotlymixo.

Categories of Personal Data and Sources

We collect identification details such as name and job title, contact information including email address and telephone number, enrolment and payment records, technical data such as IP address and browser type, and any information you voluntarily provide through forms. Data is obtained directly from you when you complete forms, purchase courses or correspond with us, as well as automatically through cookies and similar technologies.

Purposes of Processing and Legal Bases

We process personal data to respond to enquiries and provide course information on the basis of legitimate interest and contract performance. Enrolment and payment processing rely on contract necessity. Marketing communications are sent only with consent. Website analytics and security monitoring are carried out under legitimate interest. Each purpose is limited to what is necessary for the stated objective.

Whether Providing Data Is Required

Supplying certain information is necessary to enrol on courses or receive responses to enquiries. If you choose not to provide required details we may be unable to complete your registration or deliver the requested service. Optional fields, such as additional comments, can be left blank without affecting core service delivery.

Cookies and Similar Technologies

We use cookies and similar tracking technologies to ensure the website functions correctly, remember preferences and gather anonymised usage statistics. A separate Cookie Policy explains the types of cookies deployed and how to manage your preferences through browser settings or our site-wide cookie banner.

Processors, Recipients and Lawful Disclosures

We engage carefully selected service providers including payment processors, email delivery platforms, hosting providers and course management software suppliers. These processors act only on our documented instructions and under appropriate contracts. We may also disclose data when required by law, regulation or court order, or to protect our legal rights.

International Data Transfers

Some of our service providers are located outside the United Kingdom. Where personal data is transferred internationally we rely on appropriate safeguards such as UK-approved standard contractual clauses or adequacy regulations to ensure an equivalent level of protection.

Data Retention Periods

Enrolment records and associated personal data are retained for six years after the end of the course to meet tax, accounting and contractual obligations. Enquiry data is kept for up to two years unless you become a customer. Marketing consent records are maintained until consent is withdrawn. Technical logs are deleted after twelve months unless needed for security investigations.

Security and Data Minimisation

We implement appropriate technical and organisational measures including encryption, access controls and regular security reviews to protect personal data. We collect only the minimum information necessary for each purpose and train staff on data protection responsibilities.

Your Data Protection Rights

Under UK GDPR and the Data Protection Act 2018 you have the right to access your personal data, request rectification or erasure, restrict or object to processing, and request data portability where applicable. To exercise these rights please write to info@nfts.co.uk or Beaconsfield Studios, Station Road, Beaconsfield, Buckinghamshire, HP9 1LG with sufficient information to identify your records.

Withdrawing Consent and Objecting to Marketing

Where processing is based on consent you may withdraw it at any time by contacting us or using the unsubscribe link in marketing emails. You can also object to direct marketing or profiling at any time; we will cease such processing upon receipt of your objection.

Right to Complain to the Supervisory Authority

If you are not satisfied with our response you have the right to lodge a complaint with the Information Commissioner’s Office, the UK supervisory authority, at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF or via their website.

Age Restrictions and Children’s Data

Our courses are intended for adults aged eighteen and over. We do not knowingly collect personal data from children under eighteen. If we become aware that data from a minor has been submitted we will delete it promptly.

Automated Decision-Making and Profiling

We do not use automated decision-making or profiling that produces legal or similarly significant effects. Any analytics we conduct are for internal improvement purposes only and do not result in automated decisions about individuals.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law or our practices. The date of the most recent revision appears at the top of the page. Continued use of the website after an update constitutes acceptance of the revised terms.