About · Privacy
What we hold about you, and why.
The short version first, then the detail. Futures in Film CIC is the data controller for personal information collected through this website and our programmes.
The short version
- We collect what you tell us on a form or by email, and records of the programmes you take part in.
- We use it to reply to you, run the programme and keep people safe. Nothing else.
- We never sell it, and we never give it to advertisers.
- We share it with a production, college or funder only if you agree, or in anonymous totals.
- You can ask to see it, correct it or delete it, free, at any time.
Who we are
The data controller is Futures in Film C.I.C., company number 14621615, registered office 167–169 Great Portland Street, 5th Floor, London W1W 5PF. For anything about your data, email [email protected] with "Privacy" in the subject line. A person reads it.
What we collect
| What | Examples | Where it comes from |
|---|---|---|
| Contact and enquiry details | Your name, email, phone if you give it, organisation, and what you write in a message | You, on a form or by email |
| Application details | Confirmation that you are 18 or over, roughly where you live, your experience and what you are applying for | You |
| Access needs | What you tell us you need, in your own words. We never ask for a diagnosis or evidence | You |
| Programme records | Attendance, completion, the grade you held on a unit, and where you go next if you tell us | We create them |
| Academy records (when accounts open) | Lessons watched, quiz results, task submissions and your online learning record. The FIF Certificate comes only from an in-person practical. Accounts are for adults 18 and over. The academy is a preview for now and stores nothing with us | You, and our marking |
| Photographs and film | Taken on courses, shoots and at events | We take them, with your consent |
| Safeguarding records | Details of a concern and what was done about it | You, or someone who raised a concern |
Under-18s. Our own programmes are for people aged 18 and over. When we work with under-18s through a school, college or the Pinewood Futures Festival, the host institution holds their records. We keep only what we need to run the session safely, and we never publish names or details of anyone under 18.
Why we use it, and our lawful basis
| What we do | Lawful basis under UK GDPR |
|---|---|
| Reply to an enquiry or process an application | Legitimate interests, and steps towards a contract where you go on to take a place or a hire |
| Run a course, simulation or placement you are on | Performance of a contract with you |
| Arrange access needs | Your explicit consent, and our duty under the Equality Act 2010 to make reasonable adjustments |
| Email you when something opens | Consent, which you can withdraw in one click |
| Report to funders and evaluate our work | Legitimate interests, in anonymous totals only |
| Publish a photograph or film of you | Consent, asked for separately and withdrawable |
| Act on a safeguarding concern | Legal obligation and, for sensitive information, the substantial public interest in safeguarding children and individuals at risk |
| Keep financial records | Legal obligation |
How long we keep it
| Record | How long |
|---|---|
| Enquiries that do not lead anywhere | 12 months from our last reply |
| Applications and programme records | 3 years after your last contact with us, so we can confirm what you did |
| Access needs | Only while we are using them to arrange something, unless you ask us to keep them |
| Mailing lists | Until you unsubscribe |
| Financial records | 6 years, as HMRC requires |
| Safeguarding records | As long as safeguarding law and guidance require, which can be many years |
| Photographs and film | Until you withdraw consent, or we stop using them |
If a funder's terms require us to keep records for longer, we tell you when you join that programme.
Who else sees it
Only the people who need it to run the programme. We use ordinary business software, including Google Workspace for email, forms and files. Those suppliers process data for us under contract and may not use it for their own purposes. Where a supplier stores data outside the UK, we rely on UK adequacy regulations or the safeguards the Information Commissioner's Office approves.
We do not pass your details to a production, college, funder or connected company, including MR Helix Ltd, Pixeleyed Pictures Ltd or Screen Sisters CIC, without asking you first. If you joined the academy through Screen Sisters CIC, Screen Sisters sees totals only, and your named record only if you say yes.
Where the law requires it, for example a safeguarding duty or a court order, we disclose what is required. We tell you unless telling you would put someone at risk or break the law.
Your rights
You can ask us:
- what we hold about you, and for a copy;
- to correct it if it is wrong;
- to delete it;
- to stop or limit how we use it, or object to it;
- for a copy in a portable format.
You can also withdraw any consent you gave. Exercising these rights is free and never affects your place on anything. We reply within one month.
If you are unhappy with how we have handled your data, tell us first. You can also complain to the Information Commissioner's Office, the UK regulator, at any time.
Changes to this notice
When we change this notice, we update the date at the foot of the page. If a change affects how we use information we already hold, we tell you first.
Last reviewed 8 November 2026