Privacy policy

Datenschutzerklärung

1. Who is responsible

The controller for this website and for Doc School bookings is:

Zed Productions Ltd
11 Charlotte Place
London W1T 1SJ
United Kingdom
Email: hello@zed-productions.com

For questions about Doc School bookings, write to docschool@zed-productions.com.

2. Hosting and server logs

This website is hosted by Hostinger International Ltd, Cyprus. When you visit a page, the server automatically records technical data your browser sends: your IP address, the date and time, the page requested, the referring page and your browser type and operating system. We use this data only to deliver the site and keep it secure. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in running a secure website). Hostinger processes this data on our behalf under a data processing agreement.

3. No cookies, no tracking

We do not use analytics, advertising or tracking cookies. Our fonts are stored on our own server, so no font service is contacted when you visit.

4. Vimeo videos

Our films are hosted on Vimeo, provided by Vimeo.com, Inc., New York, USA. On the home page and the Work page your browser loads thumbnails and video players from Vimeo's servers, which means Vimeo receives your IP address and technical browser data. We embed videos with Vimeo's "do not track" setting. When you play a film, Vimeo may process further usage data under its own privacy policy. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in showing our work). Vimeo takes part in the EU-US Data Privacy Framework, which covers transfers to the USA. More information: vimeo.com/privacy.

5. Booking and waitlist forms

Doc School bookings and the waitlist use forms provided by Tally BV, Ghent, Belgium. Tally stores form data on servers in the European Union. On the Doc School pages your browser loads Tally's script from tally.so so the waitlist can open on the page.

When you book a place, we collect your name, email address, your answers to the form questions and your consent. When you join the waitlist, we collect your name, email address and consent. We use this data to manage your booking or waitlist place and to contact you about the course. The legal basis is Art. 6(1)(b) GDPR (steps towards and performance of a contract) and, for being contacted about future places, your consent under Art. 6(1)(a) GDPR, which you can withdraw at any time by emailing us.

Form submissions are also sent to us by email and copied to a Google Sheet in our Google Workspace account (Google Ireland Limited, Dublin, Ireland) so we can keep track of bookings and payments. More information: tally.so/privacy.

6. Soli ticket applications

Applications for a Soli ticket use Google Forms, provided by Google Ireland Limited, Dublin, Ireland. We collect your email address, name and your answers. Some answers may concern your personal and financial circumstances. We use them only to decide on Soli places and delete them once places have been allocated, unless you take part in the course. The legal basis is Art. 6(1)(b) GDPR and your consent under Art. 6(1)(a) GDPR. Google may transfer data to the USA. Google takes part in the EU-US Data Privacy Framework. More information: policies.google.com/privacy.

7. Payments

Course payments are handled by Stripe. When you pay, you enter your payment details directly on Stripe's payment page. We do not see or store your card details. Stripe tells us your name, email address, the amount paid and the payment status. The legal basis is Art. 6(1)(b) GDPR. Stripe processes payment data under its own privacy policy: stripe.com/privacy.

8. Email

If you email us, we use your email address and message to reply. Our email runs on Google Workspace (Google Ireland Limited). The legal basis is Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR if your message concerns a booking or a project.

9. How long we keep data

We keep booking and waitlist data for as long as needed to run the course and stay in touch about it. You can ask us to delete it at any time. Payment records are kept for as long as tax and accounting law requires.

10. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict its processing, to receive it in a portable format and to object to processing based on legitimate interests. Where processing is based on consent, you can withdraw it at any time with effect for the future. To use any of these rights, email hello@zed-productions.com.

You also have the right to complain to a data protection authority. In the UK this is the Information Commissioner's Office (ico.org.uk). If you live in the EU, you can complain to the authority where you live, for example in Berlin the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

Last updated: October 2026