GDPR Policy
Introduction
BNL Productions Ltd is committed to protecting the privacy and personal data of our staff, clients, suppliers and website users in accordance with the General Data Protection Regulation (GDPR).
As part of providing our services, we may collect and process personal information for a variety of purposes, including:
Recruitment and employment administration
Purchasing and sales activities
Processing payments and financial transactions
Responding to enquiries and requests for information
Managing client projects and communications
Complying with legal and regulatory obligations
We are committed to ensuring that all personal information is collected fairly, stored securely and only used for legitimate business purposes.
Compliance
All employees of BNL Productions Ltd are responsible for ensuring that personal information is handled securely and only accessed when necessary.
We maintain appropriate physical and electronic security measures to protect personal information from unauthorised access, loss, misuse or disclosure.
Where third-party suppliers or contractors have access to personal information, we take reasonable steps to ensure they comply with the same data protection standards.
Data Controller
For the purposes of GDPR, BNL Productions Ltd is the Data Controller and is responsible for determining how personal information is collected, processed and stored.
The Senior Management Team oversees data protection compliance and is responsible for ensuring this policy remains current and effective.
Your Rights
Under GDPR, individuals have the following rights:
The Right to Be Informed
You have the right to know how and why your personal information is being collected and used.
The Right of Access
You may request a copy of any personal information we hold about you.
The Right to Rectification
You may request that inaccurate or incomplete information is corrected.
The Right to Erasure
You may request that your personal information is deleted where there is no legal reason for us to continue processing it.
The Right to Restrict Processing
You may request that we temporarily restrict the processing of your personal information in certain circumstances.
The Right to Object
You may object to the processing of your information for direct marketing or other legitimate interest purposes.
Rights Related to Automated Decision Making
BNL Productions Ltd does not use automated decision-making or profiling processes that produce legal or similarly significant effects.
Data Accuracy
We take reasonable steps to ensure personal information is accurate and up to date. If your details change, please contact us so we can update our records.
Data Retention
We will only retain personal information for as long as necessary to fulfil the purpose for which it was collected, comply with legal obligations and support legitimate business requirements.
Information that is no longer required will be securely deleted or destroyed.
Data Sharing
BNL Productions Ltd does not sell personal information.
Information may be shared where:
The individual has provided consent
It is necessary to fulfil a contract
It is required by law or regulatory authorities
It is necessary to protect the rights, property or safety of BNL Productions Ltd or others
International Transfers
We do not knowingly transfer personal information outside the United Kingdom or European Economic Area (EEA) without ensuring appropriate safeguards are in place.
Where personal information may be transferred internationally through third-party systems or suppliers, we will ensure appropriate protections are implemented.
Website & Marketing
If personal information is collected through our website, forms or marketing activities, it will only be used for the purpose for which it was provided.
Where consent is required for marketing communications, individuals may withdraw their consent at any time.
Subject Access Requests
Individuals have the right to request access to the personal information held about them.
Requests should be submitted in writing. We may require proof of identity before releasing any information.
Data Breaches
BNL Productions Ltd maintains procedures for identifying, reporting and responding to personal data breaches.
Where required by GDPR, any reportable breach will be notified to the relevant supervisory authority within 72 hours of becoming aware of the incident. Where a breach is likely to result in a high risk to individuals, affected individuals will also be informed without undue delay.
Contact Us
If you have any questions regarding this policy or how your personal information is processed, please contact:
BNL Productions Ltd
21 High Street
Lurgan
County Armagh
BT66 8AH
Email: hello@bnlproductions.co.uk
Telephone: 028 3832 3793
Last Updated: June 2026