Privacy & Individual
Data Rights

1. The individual as Data Owner

We use Data Owner to express the dignity and agency of the individual whose life, identity or work is represented by data. People should be able to understand what happens to their information and exercise meaningful control.

This ethical position does not create a new property right or replace the legal concepts of data subject, controller and processor. Rights and responsibilities depend on applicable law, the context of processing and relevant agreements.

2. Clear purposes, minimum data

Our policy is to avoid advertising tracking and the sale of personal information. We reject dark patterns, unnecessary surveillance and vague explanations that conceal the purpose of processing.

• Browsing: this frontend uses local assets and a system font stack. It does not include advertising pixels, analytics SDKs, embedded social widgets or external font requests.
• Appearance: the website uses a light appearance. It no longer saves a theme preference; any previous theme preference is removed when scripting and browser storage are available.
• Enquiry preparation: draft details remain in page memory until you choose to send. Reloading or leaving clears the draft. Opening an email draft or copying a brief does not submit it through the website.
• Online enquiries: choosing “Send enquiry” transmits your reply address and reviewed brief, including optional contact and organisation details, to the mailbox shown for the chosen team. We use this information to assess and respond to your request, not to subscribe you to marketing. You can choose whether to receive an acknowledgement.
• Abuse prevention: the enquiry service uses temporary, pseudonymous request counters and submission references to limit abuse and duplicate sending. These are held in memory for up to an hour; they are not advertising profiles. This does not describe or limit separate infrastructure security logs.
• Email and service delivery: correspondence is handled by the relevant team and necessary hosting or email service providers. It may be retained as needed for the enquiry, any resulting engagement, legal obligations and dispute handling. Retention depends on the context; ask us about the records relevant to your enquiry. Mail-service acceptance is not proof of mailbox delivery or human review.

Hosting and email systems may process connection information and necessary security records. Frontend behaviour alone cannot establish the retention or logging practices of deployed infrastructure. Contact us before including sensitive personal information, case records or confidential technical material. A first enquiry should contain only what is needed to understand your request.

3. Statutory rights, policy & contracts

• Statutory rights: the UK GDPR and Data Protection Act 2018, as amended, set rights and duties where applicable. Rights can be subject to conditions and exemptions.
• Group policy: our commitment to dignity, minimal surveillance and transparent purposes guides decisions. It does not broaden every statutory right into an unconditional entitlement.
• Engineering principles: minimisation, privacy by design and sovereign infrastructure inform how requirements are set. They are not promises of absolute deletion, permanent availability or immunity from lawful process.
• Contractual commitments: service scope, processing responsibilities, retention, residency, export arrangements and support obligations must be established in the relevant agreement and privacy information.

Processing requires an appropriate lawful basis. Depending on the circumstances, this may include steps requested before a contract, performance of a contract, a legal obligation, consent or legitimate interests following the required assessment. Responding to a business enquiry may involve requested pre-contract steps or legitimate interests in handling correspondence; applicable rights requests may involve legal duties. Legitimate interests are not a blanket justification for unnecessary surveillance.

4. Privacy & Data Protection by Design

Privacy requirements should be considered before a system is built, not added after unnecessary data has already been collected.

• Minimisation: collect and retain only what is needed for a defined, lawful purpose.
• Transparency: explain relevant purposes, responsibilities and choices in understandable language.
• Protection: seek safeguards proportionate to the sensitivity and consequences of processing.
• Retention: set schedules appropriate to purpose, legal duties and contractual obligations. Deletion requests require a contextual assessment; immediate removal from every system or backup is not universally promised.
• Sovereign infrastructure: make jurisdiction, residency requirements and supplier responsibilities clear without claiming exemption from applicable law.
• Human control: avoid coercive interfaces and support accessible routes to questions and requests.

These principles describe intended outcomes. They do not disclose proprietary implementation or guarantee that all Group services have identical processing arrangements.

5. Exercising your rights

Depending on the processing and applicable law, you may have rights to:

• be informed about processing and request access to your personal data;
• request correction of inaccurate or incomplete personal data;
• request erasure or restriction of processing in relevant circumstances;
• object to certain processing, including direct marketing;
• receive or transmit certain data under the right to portability where its conditions are met;
• withdraw consent where processing relies on consent, without affecting the lawfulness of earlier processing;
• exercise applicable safeguards concerning solely automated decisions with legal or similarly significant effects.

These rights are not absolute. We may need proportionate information to establish identity or clarify a request. Responses follow applicable statutory time limits, including permitted extensions and exemptions where relevant; where we cannot act, we should explain why.

A portability right is not an automatic right to all software, intellectual property or organisational records. Withdrawal of consent does not necessarily end processing based on another valid legal ground.

6. Group responsibilities

Alt Production Group Limited is the contact for this corporate website and enquiries addressed to it. The controller or processor for a particular service depends on the operating entity, purpose and agreement; Group membership alone does not determine that role.

Studios, Hosting, Labs, The Ministry and strategic ventures have distinct purposes. The enquiry form shows the destination before sending; choosing a team routes your brief to that mailbox. Information should not otherwise be shared between them without an appropriate purpose, authority and safeguards. Sensitive information should only be shared through agreed arrangements.

Service-specific information should explain the relevant recipient categories, retention arrangements and any international transfers. Ask for that information before providing material whose handling needs clarification.

7. Contact & complaints

Alt Production Group Limited
Company No. 17022716, registered in England & Wales
15 Collingham Street, Manchester M8 8RQ

governance@altproductiongroup.com
0161 987 0420

Explain the nature of your request and the service involved. You need not send identity documents with an initial enquiry. We will explain any further information reasonably needed.

You may also raise a concern with the UK Information Commissioner’s Office at ico.org.uk. Contacting us first does not remove your right to complain to the regulator.