Legal
Privacy policy
Effective 1 January 2026. This policy explains how Scene Garden Media Ltd (“we”, “us” or “our”) handles personal information through scenegardenscenefd.sbs.
1. Controller and contact details
Scene Garden Media Ltd, company number 15820471, is the data controller for information described in this policy. Our registered address is 14 Lantern Yard, Bristol BS1 4QF, United Kingdom. Privacy questions and requests may be sent to our data protection contact at [email protected].
2. Information we collect
We collect information you deliberately provide through the contact form or by email, including your name, email address, subject and message. We may also process correspondence history and any information you choose to include. Please do not send sensitive personal data unless it is necessary for your request.
Our hosting environment may automatically record technical information such as IP address, browser type, device type, requested page, referring page, timestamp and security events. These logs are used to deliver the site, diagnose faults, prevent abuse and maintain security.
3. Purposes and legal bases
We process enquiries to respond to your request and manage our relationship with you. The legal basis is our legitimate interest in operating the publication and communicating with readers, or taking steps at your request before entering a contract. Technical logs are processed for our legitimate interests in secure, reliable website operation. Where optional analytics are introduced, they will be used only after consent where applicable.
4. Cookies and local storage
The site stores your cookie choice in your browser’s local storage so the banner does not reappear on every page. This essential preference supports the operation you request. Optional cookies are not required to read our guides. More information appears in our cookie policy.
5. Processors and international transfers
We may use hosting, email, security and form-delivery providers acting under our instructions. These processors receive only the information needed to provide their service and are expected to apply appropriate safeguards. If data is transferred outside the United Kingdom or European Economic Area, we use an approved transfer mechanism where required, such as an adequacy decision or standard contractual clauses.
6. Retention
Contact enquiries are ordinarily retained for up to 24 months after the last substantive communication, unless a longer period is needed for a contract, legal claim or regulatory obligation. Routine server logs are generally retained for up to 90 days, although security records connected to an incident may be retained longer. Cookie preferences remain in local storage until deleted by you or replaced by a later choice.
7. Your GDPR rights
Depending on your location and the circumstances, you may request access, correction, deletion, restriction, portability or objection to processing. Where processing relies on consent, you may withdraw that consent without affecting earlier lawful processing. You may also complain to the UK Information Commissioner’s Office or the supervisory authority where you live or work. Rights can be limited where an exemption applies.
8. California privacy rights
California residents may have rights to know, correct or delete personal information and to receive equal service when exercising those rights. We do not sell personal information or share it for cross-context behavioural advertising. An authorised agent may submit a request, but we may need evidence of authority and identity before responding.
9. Security, children and changes
We use proportionate organisational and technical measures designed to protect information. No internet transmission or storage system can be guaranteed completely secure. This general-interest site is not directed to children under 13, and we do not knowingly collect their personal information. We may update this policy when our practices or legal duties change. The effective date above will identify the current version.
10. DPO contact
We are not currently required to appoint a statutory Data Protection Officer. Our designated data protection contact handles equivalent enquiries and can be reached at [email protected].