Your data, plainly explained.

EIGHT2B Creative Media Solutions ("EIGHT2B", "we", "us") is a sole-trader videography business operated by Guy Wistuba, based in central Scotland (Airdrie). For any privacy question, contact hello@eight2b.co.uk. We are the "data controller" for personal data submitted through this site.

When you complete the booking form we collect only what's needed to run the shoot:

• Your name and the client name / business name you're booking for
• Contact email and (optional) phone number
• Website, shoot location, proposed date/time, attendees
• Shoot details you provide (video type, deliverables, notes, etc.)
• The typed signature and confirmation that you accept the booking agreement
• Basic technical data your browser sends when submitting the form (e.g. IP address in server logs), used only to run the service and prevent abuse

We do not ask for special-category data (health, biometrics, political views, etc.). Please don't include it in the free-text notes.

• To respond to your enquiry and deliver the shoot — lawful basis: steps taken at your request prior to entering a contract, and performance of the contract once a booking is confirmed (UK GDPR Art. 6(1)(b)).
• To keep records for tax, accounting and dispute resolution — lawful basis: legal obligation and our legitimate interest in running the business (UK GDPR Art. 6(1)(c) and 6(1)(f)).

We do not use your details for marketing, newsletters, profiling, or automated decision-making. We do not sell or rent your data.

Your data is only shared with the service providers we need to run the site and the shoot:

• Site & database hosting — Lovable (Cloudflare edge + Supabase). Data is stored in the EU/UK region.
• Email delivery — Lovable Emails / Resend, used to notify us of your enquiry and send you the branded confirmation.
• Booked shoots only — trusted third-party editors, if editing is part of the deliverables you've asked for. They are only sent what's needed for that job.
• HMRC, professional advisors, or authorities where we're legally required to.

None of these providers use your data for their own purposes. Some providers may process data outside the UK; where they do, appropriate UK GDPR safeguards (adequacy or standard contractual clauses) apply.

• Booking form submissions: kept for up to 24 months after last contact, then deleted.
• Raw footage and shoot files: stored by EIGHT2B for up to 90 days after the shoot, as set out in the booking agreement.
• Invoices and financial records: kept for 6 years as required by HMRC.

The site is served over HTTPS. Submissions are stored in a database with row-level security so that only authorised administrator accounts can read them. Access is limited to Guy Wistuba. No system is 100% secure — if you spot a security issue, please email hello@eight2b.co.uk.

Under UK GDPR you have the right to:

• Ask what data we hold about you (access)
• Correct anything that's wrong (rectification)
• Ask us to delete it (erasure) — subject to our legal record-keeping duties
• Restrict or object to processing
• Ask for a copy in a portable format
• Withdraw consent, where consent was the basis

To exercise any of these, email hello@eight2b.co.uk. We'll respond within one month.

This site does not use analytics, advertising, or third-party tracking cookies. We only use cookies and similar storage that are strictly necessary to run the site — for example, keeping you signed in on admin pages and remembering your form state while you fill it in. Under PECR, strictly-necessary cookies do not require consent, so we don't display a consent banner. If we ever add analytics or marketing tracking, we'll ask you first.

Questions or requests: hello@eight2b.co.uk.

If you're not happy with how we've handled your data, you can complain to the UK Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint · 0303 123 1113.

We may update this policy from time to time. The "last updated" date at the top of the page will always show the current version. Material changes will be highlighted on the site.