Privacy Policy
This policy explains what personal data PhotonPhase Studio collects, why we collect it, how long we keep it, and the rights you hold over it.
Last updated: [Effective Date]
Legal review required. Bracketed placeholders such as [Jurisdiction], [Company Registration Number], and [Registered Address] must be completed and this document approved by qualified counsel before publication.
1. Who we are
PhotonPhase Studio ("we", "us") is a company registered in [Jurisdiction] under company number [Company Registration Number], with a registered address at [Registered Address]. We act as data controller for personal data described in this policy. Contact: hello@borelix.online.
2. Data we collect
Enquiry data: name, email address, organisation, show date, and the contents of the brief you send us. Client data: contact details of production personnel, contractual documents, and correspondence. Technical data: IP address, browser type, pages visited, and referral source, collected in server logs. Production data: material you supply for a project, including CAD or scan files, brand assets, and running orders.
3. Why we process it
To respond to enquiries and prepare feasibility reads; to perform a contract for stage design, build, and show operations; to comply with tax, accounting, and statutory record keeping in [Jurisdiction]; and for our legitimate interest in securing our systems and improving this website.
4. Legal bases
We rely on performance of a contract, our legitimate interests, compliance with a legal obligation, and, where required, your consent. Where consent is the basis, you may withdraw it at any time without affecting processing carried out beforehand.
5. Sharing and processors
We share personal data with service providers who host our infrastructure, manage email, handle accounting, and provide render capacity. Each is bound by a written processing agreement. We do not sell personal data. We disclose data to authorities only where legally compelled in [Jurisdiction].
6. International transfers
Where data is transferred outside [Jurisdiction], we use recognised safeguards such as standard contractual clauses or an adequacy decision. Details of the specific mechanism are available on request. [Legal review: confirm applicable transfer mechanism.]
7. Retention
Enquiries that do not become projects are deleted after 24 months. Project records and contracts are retained for [Retention Period] years after the final show, in line with statutory requirements in [Jurisdiction]. Client-supplied production assets are deleted or returned within 90 days of project close unless the contract states otherwise.
8. Your rights
Subject to law in [Jurisdiction], you may request access, correction, deletion, restriction, or portability of your personal data, and object to processing based on legitimate interests. Write to hello@borelix.online; we respond within 30 days. You may also lodge a complaint with [Supervisory Authority].
9. Security
Access to project data is role-restricted and logged. Workstations and render nodes are encrypted at rest, transfers use encrypted channels, and contractors sign confidentiality terms before receiving access. No system is perfectly secure; we notify affected parties and regulators of qualifying breaches as required.
10. Cookies
This website uses only cookies strictly necessary for delivery and security. We do not run advertising or cross-site tracking cookies. If analytics are added, this section will be updated and consent obtained where required.
11. Changes
We may update this policy. Material changes will be posted here with a revised effective date, and existing clients will be notified through their project channel.
Questions about this document? Write to hello@borelix.online.