Privacy Policy

Who are we

Spotlight Studios is an online Digital & Cloud Services provider operated by Spotlight Studios Ltd, a company based in England and Wales ("we," "us," "our,", "Spotlight" and "Spotlight Studios"). Find out more about our Services by navigating our webiste. As an organisation that processes business related data, Spotlight Studios has determined "Legitimate Interests" as the most suitable lawful ground for the processing of data for the purposes of our marketing and sales activites.

Privacy for our Clients

This section applies to the Personal Information we collect and process from a Client, Potential Client or Website Visitor. If you are not an active Client, the Potential Clients and Website Visitors section of this policy may be more applicable to you and your data. In this section, "you" and "your" refer to Clients.

The Information we Collect

The Information you Provide to us during any engagement, may be considered Personal Information about you, your organisation and your employees. Personal Information is often, but not exclusively, provided to us when you request a quotation, complete a form on our website, sign up for our services, consult with our customer service team, send us an email, raise a support ticket, provide login credentials, or communicate with us in any other way.

We will let you know prior to collection of said information whether or not the provision of Personal Information we are collecting is compulsory or if it may be provided on a voluntary basis and the consequences, if any, of not providing the information. By providing us with this information, you agree to this information being collected, used and disclosed as described in our Terms of Service and in this privacy policy.

Login Credentials: We will often require login credentials to websites and 3rd party websites to perform integrations. When login credentials are provided to us in a non-secure way (such as e-mail) Spotlight Studios ensure these are securely saved in a GDPR compliant manor using LastPass (part of LogMeIn). Additional security on our account include dual factor authentication and location based account restrictions. A statement released about LogMeIn and GDPR can be read here: and a more detailed overview of LastPass compliance can be found here:

The Use of Personal Information

We may use the Information we collect about you through our Services or other sources for a variety of reasons, including:

  • To provide quotations
  • To invoice and collect money owed to us
  • To send account activity messages such as password resets, payment reminders or alerts
  • To effectively manage your account and expectations
  • To provide customer support
  • To enforce compliance with our Terms of Service
  • To meet legal requirements
  • To provide essential information to external representatives and advisors, including lawyers and accountants, to help us comply with legal, accounting, or security requirements
  • To prosecute and/or defend any legal proceedings
  • To respond to lawful requests by public authorities
  • To analyise data
  • To provide suggestions to you
  • To improve our services: We may combine your information with other sources of information we obtain about you from sources which may include but are not limited to social media profiles. This is done to serve you specifically so we can deliver a product or service according to your preferences, or for advertising or targeting purposes in accordance with this privacy policy. In cirumstances where we combine your Personal Information with other information, we treat it as, and apply all of the safeguards in this privacy policy applicable to, Personal Information.
  • Other purposes. To carry out other legitimate business purposes, as well as other lawful purposes about which we will notify you.

Privacy for our Potential Clients and Website Visitors

This section applies to Personal Information that we collect and process through our Websites and in the usual course of our business. Examples of such may be in association with events, networking opportunities or sales and marketing activities. In this section "you" and "your" refers to Potential Clients and Website Visitors.

  • To optimise and maintain our Websites
  • To send you information for marketing purposes, in accordance with your marketing preferences
  • To provide quotations
  • For recruitment purposes if you have applied for a role with Spotlight Studios.
  • To respond to your online inquiries and requests
  • To improve the navigation and content of our Websites
  • To process transactions and to set up a new online account
  • Identify any server problems or other IT or network issues
  • Analyse data about site usage to better understand the preferences of our Potential Clients and Website Visitors
  • To carry out research and development to improve our products and services
  • To carry out other legitimate business purposes, as well as other lawful purpose

Cookies, Analtics & Tracking

We and our partners may use various technologies to collect and store information when you use our Services, and this may include using cookies and similar tracking technologies, such as pixels and web beacons. For example, we use web beacons in the emails we send. These web beacons track certain behavior such as whether the email sent through the Services was delivered and opened and whether links within the email were clicked. They also allow us to collect information such as the recipient’s IP address, browser, email client type and other similar details. We use this information to measure the performance of your email campaigns, and to provide analytics information and enhance the effectiveness of our Services. Reports are also available to us when we send email to you, so we may collect and review that information.

To improve your experience on our site, we may use 'cookies'. Cookies are an industry standard and most major web sites use them. A cookie is a small text file that our site may place on your computer as a tool to remember your preferences. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

Google Analytics: Our website uses Google Analytics, a service which transmits website traffic data to Google servers in the United States. Google Analytics does not identify individual users or associate your IP address with any other data held by Google. We use reports provided by Google Analytics to help us understand website traffic and webpage usage.

Spotlight Studios uses are 3rd-party tool integrated with Google Analytics to translate anonymous IP data into tangiable information. The information provides us with a business name and lookup we then use to determine a legitimate business interest in the services you viewed on our website. No personal information is obtained by Spotlight Studios at this stage but we may use this to establish connections on social media channels such as LinkedIn to obtain such information

Social media platforms and widgets.

Our Websites includes reviews and social media features, such as the Facebook Like button. These features may collect information about your IP address and which page you are visiting on our Website, and they may set a cookie to make sure the feature functions properly.

Links to third-party websites.

Our Websites include links to other websites, whose privacy practices may be different from ours. If you submit Personal Information to any of those sites, your information is governed by their privacy policies. We encourage you to carefully read the privacy policy of any website you visit.

Other Data Protection Rights

Data Retention

Spotlight Studios records all personal data in a GDPR compliant CRM system. We have a compliance module for full accountability and tracability of every record alongside the ability to update contact preferences and opt-in/out of commniictions. Our team continually cleanse the data held within the CRM, completing a full cleanse cycle at least once every 12 months. Any records found to be out of date or no longer relevant are placed into a deletion queue which are securely purged periodically throughout the year.

Children's Privacy

Our service is not available to children under the age of 18, and we will not intentionally maintain information about anyone under the age of 18.

Data Protection Rights

To access, correct, update or request the removal of Personal Information

Spotlight Studios takes reasonable steps to ensure that the data we collect is reliable for its intended use, accurate, complete and up to date. As a Client, you can manage many of your individual account and profile settings within our client portal ( or you my contact us directly via phone (0800 689 3652) or emailing

Withdraw of consent

If Personal Information is collected or processed on the basis of consent, as the data subject you can withdraw your consent at any time. Withdrawing consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your Personal Information conducted in reliance on lawful processing grounds other than consent.

The right to complain to a data protection authority

For more information, please contact your local data protection authority.

Processing a request

We will endevour to respond to all requests in a timely manner. Any individuals wishing to exercise their data protection rights in accordance with applicable data protection law will need to verify their identity in order to help us respond efficiently to your request.