Privacy Policy

Last updated on 26 October 2026.

Identity and Role of the Data Controller

upnewsra acts as the data controller for the personal data processed in connection with our specialised courses in live production decks, control rooms, multi-camera switching, live broadcasting techniques, real-time video operation and professional management of television and streaming productions. We determine the purposes and means of processing and are responsible for ensuring compliance with the UK GDPR and the Data Protection Act 2018. Our registered address is Beaconsfield Studios, Station Road, Beaconsfield, Buckinghamshire, HP9 1LG and we can be contacted at [email protected] or 01494 671234.

Scope of This Notice

This privacy notice applies to all individuals who interact with upnewsra, including prospective and enrolled students, website visitors, course participants, and anyone who submits enquiries through our contact form. It covers data collected via our commercial website, during course registration, payment processing, and any follow-up communications. The notice does not cover third-party websites linked from our pages.

Categories of Personal Data and Sources

We collect personal data directly from you when you register for courses, complete forms or contact us. Categories include identity information such as name and date of birth, contact details including email address and telephone number, professional information such as employment history or broadcasting experience, payment and billing data, technical data such as IP address and browser type collected automatically, and course-related records including attendance and performance notes. We may also receive limited data from payment processors or analytics providers acting on our behalf.

Purposes of Processing and Legal Bases

We process personal data for several distinct purposes, each with its own legal basis under UK GDPR. Course enrolment and delivery rely on contract necessity. Marketing communications are based on consent or legitimate interests. Payment processing and fraud prevention rest on legal obligation or legitimate interests. Website analytics and improvement use legitimate interests. Where consent is the basis, it can be withdrawn at any time without affecting prior processing.

Requirement to Provide Data and Consequences

Providing certain personal data is necessary to enrol in our courses, process payments or respond to enquiries. If you do not supply required information we may be unable to complete registration, issue certificates or deliver the training. Optional data such as marketing preferences can be withheld without affecting core service delivery.

Cookies and Similar Technologies

Our site uses cookies and similar tracking technologies to enable essential functions, analyse traffic and remember preferences. A site-wide cookie banner allows you to manage non-essential cookies. For full details please refer to our separate Cookie Policy which explains each category and how to adjust your settings.

Processors, Recipients and Lawful Disclosures

We share personal data with trusted service providers acting as processors, including payment gateways, email delivery platforms, cloud hosting providers and course management software. These parties are contractually bound to process data only on our instructions and to maintain appropriate security. We may also disclose data when required by law, such as in response to valid court orders or regulatory requests from UK authorities.

International Transfers

Some of our processors are located outside the United Kingdom. Where personal data is transferred internationally we rely on appropriate safeguards such as UK-approved standard contractual clauses or adequacy regulations to ensure equivalent protection. You may request further information about these safeguards by contacting us.

Retention Periods

We retain personal data only for as long as necessary for the purposes described. Course records are kept for seven years to meet accounting and regulatory requirements. Marketing consent records are retained until consent is withdrawn. Technical logs are deleted after twelve months. Criteria for determining retention include legal obligations, legitimate business needs and the exercise of data subject rights.

Security and Data Minimisation

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration or loss. These include encryption in transit, access controls and regular staff training. We apply data minimisation principles by collecting only the information required for each purpose and periodically reviewing stored data for deletion.

Data Subject Rights

Under UK GDPR you have the right to access your personal data, request rectification or erasure, restrict or object to processing, and receive your data in a portable format. To exercise any of these rights please contact us at [email protected] or 01494 671234 providing sufficient information to verify your identity. We will respond within one month.

Right to Withdraw Consent and Object to Marketing

Where processing is based on consent you may withdraw it at any time by using the unsubscribe link in emails or by contacting us directly. You also have the right to object to processing for direct marketing purposes or profiling. Such objections will be actioned without undue delay.

Right to Complain to the Supervisory Authority

If you believe your data protection rights have been infringed you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority. Contact details and guidance are available on the ICO website. We encourage you to contact us first so we can attempt to resolve any concerns.

Children and Age Restrictions

Our courses are intended for individuals aged eighteen and over. We do not knowingly collect personal data from children under eighteen. If we become aware that data from a minor has been collected we will delete it promptly. Parents or guardians who believe their child’s data has been submitted should contact us immediately.

Automated Decision-Making and Profiling

We do not engage in automated decision-making that produces legal or similarly significant effects. Limited profiling may occur for marketing segmentation based on course interests, but this is not used for automated decisions and you may object to it as described above.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in law, business practices or service offerings. The effective date of any revision will be stated at the top of the page. Continued use of the site after an update constitutes acceptance of the revised policy.