CHAPLIN MULTIMEDIA

Privacy policy

Last updated: 13 October 2026

1. Who we are

Chaplin Multimedia Ltd is responsible for personal information where we decide how and why it is used. This privacy policy covers our website and our dealings with enquirers, customers and business contacts.

For questions about your information, to exercise your rights or to raise a data protection concern, contact us:

Visiting our website does not, by itself, give consent to every use of your personal information.

2. Information we collect

Depending on how you interact with us, we may collect your name, business or organisation, job role, email address, telephone number, postal address and information about how you heard about us. We also handle enquiry details, correspondence, project instructions, quotations, contracts, billing information and marketing preferences.

Project materials may contain personal information, including identifiable photographs where relevant to a photography commission. Google Analytics can collect website usage and device information, as explained below.

We receive information when you contact us, engage our services, subscribe to our newsletter or supply project materials. A colleague or authorised project contact may provide information relevant to work we are undertaking. If you want to know where we obtained information about you, please contact us.

We ask for information relevant to your enquiry or the agreed service. Without essential contact details or project information, we may be unable to respond fully or complete the work.

3. Why we use information

We use personal information to respond to enquiries, discuss and deliver projects, administer customer relationships, provide support, manage invoicing, meet record-keeping obligations and send permitted marketing communications.

  • Contract: where information is necessary to perform a contract with you as an individual, or to take steps you request before entering one.
  • Legitimate interests: where appropriate to respond to enquiries, communicate with organisational contacts, deliver and administer business services, or protect our operations. These interests must be balanced against your rights and reasonable expectations.
  • Legal obligation: where we must retain records or disclose information to comply with the law.
  • Consent: where required for a particular marketing activity or use of cookies and similar technologies. Consent must be a specific, affirmative choice and can be withdrawn.

A photography commission or provision of project materials does not automatically authorise every later publication or marketing use. Any additional use needs an appropriate lawful basis and relevant permissions.

4. Newsletters and marketing emails

We use Mailchimp to manage our newsletter audience and send marketing emails. Relevant contact details and marketing preferences are processed through Mailchimp to administer subscriptions and opt-outs.

Our marketing audience includes subscribers, customers and business contacts. For individuals, sole traders and certain partnerships, electronic marketing normally requires consent unless the customer soft opt-in applies. That exception is limited to our own similar services, where details were obtained during a sale or genuine negotiations and an opt-out was offered both at collection and in every message.

For contacts at corporate organisations, legitimate interests may be appropriate, subject to their rights and the applicable rules. Use of Mailchimp must also meet its audience-permission requirements.

You can unsubscribe using the option in a marketing email or contact info@chaplinmultimedia.co.uk. You have an unconditional right to object to direct marketing. We retain the minimum information needed to respect an opt-out and avoid contacting you again.

5. Cookies and Google Analytics

We use Google Analytics to understand website use and improve our content and usability. It can collect information about pages viewed, interactions, devices and browsers, using cookies or similar technologies. Google receives information through this service.

We have installed Cookie Compliance for WordPress by Hu-manity.co to provide our cookie notice. The consent controls and Analytics integration are being configured. We will update this section with the final cookie categories, lifetimes and settings control when that setup is complete.

Where consent is required, it must be obtained before the relevant cookies or technologies are used; merely continuing to browse is not consent. Some technologies can operate without consent where a legal exception applies and its conditions are met.

You can also manage or delete cookies through your browser settings. Restricting necessary cookies may affect website functionality. Browser controls are separate from any consent choice made on the website.

6. Who receives information

We manage our website hosting ourselves. Information may also be handled by suppliers needed for the relevant service, including underlying hosting infrastructure, email, storage and backup providers, domain-registration providers and professional advisers. Authorities may receive information where disclosure is legally required.

Our newsletter provider, Mailchimp (The Rocket Science Group LLC), processes audience information on our behalf for sending and administering marketing emails under its data-processing terms. Google receives Analytics information as described above.

Sharing must be limited to what is relevant for the purpose. Some suppliers process information on our instructions; others have their own controller responsibilities. You can contact us for information about the suppliers relevant to your enquiry or service.

7. International processing

Mailchimp processes newsletter information in the United States and may use suppliers in other countries. Its Data Processing Addendum describes international-transfer arrangements, including the Data Privacy Framework and UK Extension, and Standard Contractual Clauses with the UK Addendum where applicable.

Use of a provider does not mean all information stays in the UK. A restricted international transfer requires an applicable UK adequacy arrangement or another permitted safeguard, together with any assessment required by law. Contact us for details of arrangements relevant to your information or to request information about applicable safeguards.

8. How long we keep information

  • Enquiries: we keep enquiry records for two years.
  • Routine customer records: we retain these during the relationship and for two years after the person or organisation stops being a customer.
  • Accounting and tax records: these have separate legal retention requirements, normally six years from the end of the relevant company financial year, or longer where required.
  • Marketing records: retention depends on the continuing lawful marketing purpose and your preferences. Minimum opt-out records may be retained to honour an unsubscribe or objection.

Project materials, photographs, technical logs, backups, Analytics data and cookies have different purposes and retention arrangements. Their periods depend on the relevant service, agreed requirements, configured provider settings, legal obligations and any specific dispute. Please contact us for details relevant to your information.

Information should not be kept longer than necessary for its purpose. Where a legal obligation or dispute requires longer retention, this applies to the relevant records rather than every item of customer information.

9. Security

Personal information must be handled using technical and organisational measures appropriate to its sensitivity and the risks involved. No website, email or storage system can be guaranteed completely secure. If you have a concern about information you have supplied, please contact us promptly.

10. Your rights

Depending on the circumstances, you can request access to your personal information, correction of inaccuracies, deletion, restriction of processing or a portable copy of certain information. You can object to processing based on legitimate interests and always object to direct marketing.

Where processing relies on consent, you can withdraw it without affecting processing that was lawful before withdrawal.

Contact info@chaplinmultimedia.co.uk to make a request. We may need proportionate information to verify your identity. Requests are normally answered within one calendar month, subject to any lawful extension or adjustment. Some rights depend on the lawful basis and applicable exemptions; we will explain any limitation that applies.

11. Complaints

You can raise a data protection concern using the email or postal address above. Please describe what happened so we can investigate. We will acknowledge a complaint within 30 days, investigate without undue delay and keep you informed about progress and the outcome.

You also have the right to complain to the Information Commissioner’s Office (ICO).

12. Information handled for our customers

When we handle personal information solely on a customer’s behalf, such as through hosting or maintenance, that customer may be the controller and we may be its processor. The role and arrangements depend on the service and belong in the relevant agreement.

The customer’s privacy notice explains information it controls, and the customer normally coordinates related rights requests. This policy does not replace a customer data-processing agreement or remove our own responsibilities.

13. Changes to this policy

We will review this policy as our services and use of information change and update the date above. Where appropriate, we will bring material changes to the attention of people affected. A policy update does not itself give consent to a new use of your information.