UK GDPR Compliance

NO LIMIT STUDIO, an independent AI creative production house in London, is committed to handling personal data lawfully, fairly and transparently under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR). NO LIMIT STUDIO is the data controller for personal data collected through nolimitstudio.co.uk and its labels Nytefall Music, Event Art London, A.M.L. and The London Heist. For full detail of what we collect, read our Privacy Notice.

• Lawfulness, fairness and transparency — we only process data with a valid lawful basis and tell you how it is used.
• Purpose limitation — data is used only for the purpose it was collected for.
• Data minimisation — forms ask only for what is needed; optional fields are clearly marked.
• Accuracy — you can ask us to correct your details at any time.
• Storage limitation — data is kept no longer than necessary, then deleted.
• Integrity and confidentiality — data is stored securely with restricted access.
• Accountability — we keep records of consent, agreements and how data is handled.

• Consent — email updates, uploaded photos and use of your likeness. You can withdraw consent at any time; this does not affect processing already carried out.
• Contract — delivering projects, quotes and the Talent Agreement you sign.
• Legitimate interests — replying to enquiries, reviewing applications, keeping the website secure and protecting our legal position.
• Legal obligation — keeping business and tax records required by UK law.

Under UK GDPR you have the right to:

• Be informed about how your data is used.
• Access a copy of your personal data (a subject access request).
• Have inaccurate data corrected.
• Have your data erased ("right to be forgotten"), where no overriding legal reason to keep it applies.
• Restrict how your data is processed.
• Data portability — receive your data in a common, machine-readable format.
• Object to processing based on legitimate interests or for direct marketing.
• Not be subject to decisions made solely by automated means that have legal or similarly significant effects. We do not make such decisions.

Email nolimitstudio.london@gmail.com with the subject "Data Request", saying which right you want to use. We may ask for proof of identity to protect your data. We will respond within one month, free of charge. Where a request is complex or repeated, we may extend this by up to two further months or charge a reasonable fee, and we will tell you why.

Photos of your face can be used to identify you, so we treat them with extra care. They are only collected from adults aged 18 or over who choose to upload them, stored in private storage, shared with you or us only through time-limited links, and used under the terms of the Talent Agreement. You can ask for your photos to be deleted at any time; content already published under a signed agreement is handled in line with that agreement's takedown terms.

• Encrypted connections (HTTPS) across the whole website.
• Data stored with reputable providers using encryption and access controls.
• Private storage for uploads, with no public access.
• Admin areas protected by login and restricted to the studio owner only.
• No selling, renting or trading of personal data — ever.

We use trusted service providers for website hosting, data storage and email delivery. They act only on our instructions and are bound by data processing terms. Where data is transferred outside the UK, we rely on UK adequacy regulations or appropriate safeguards such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

If a personal data breach occurs that is likely to put your rights at risk, we will report it to the Information Commissioner's Office (ICO) within 72 hours of becoming aware of it and, where the risk is high, tell you without undue delay.

Enquiries and unsuccessful applications are deleted once no longer needed, normally within 12 months. Signed agreements and project records are kept for as long as the content is in use and for up to six years afterwards to meet legal and tax obligations and to defend legal claims. Email sign-ups are kept until you unsubscribe.

We only use cookies that are strictly necessary to run the website and the admin login, which do not require consent under PECR. We do not use advertising cookies. We only send marketing emails to people who have asked for them, and every email lets you opt out.

Our services, applications and forms are intended for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has sent us data, contact us and we will delete it.

Please contact us first at nolimitstudio.london@gmail.com so we can put things right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.

We review this page regularly and will update it when the law or our practices change. The date at the top shows when it was last updated.