Privacy policy

CM Drone Flythrough Studio UK

Last updated 5 October 2026

This privacy policy explains how we collect, use, share and protect personal information when you visit flythroughstudio.co.uk, contact us or use our drone videography and photography services.

1 Who we are

The data controller is Chris Moxham, trading as CM Drone Flythrough Studio UK. We comply with the UK General Data Protection Regulation and the Data Protection Act 2018, as amended, when deciding why and how personal information is used.

Email: cmflythroughstudio@gmail.com

Website: https://www.flythroughstudio.co.uk

Where we process information solely on a client’s instructions, that client may be the controller. We will explain the relevant responsibilities where this applies.

2 Information we collect and its sources

The information we collect depends on your dealings with us and may include:

• Identity and contact information: your name, business name or role, email address, telephone number and relevant address.

• Enquiry and project information: messages, property and project locations, access arrangements, booking details, correspondence and files you provide.

• Transaction information: quotes, invoices, payment records and information needed for accounting and tax purposes.

• Photographs and video: images, voices and other details captured during a shoot, where these identify or relate to an identifiable person.

• Website information: IP addresses, device/browser details and usage or cookie information, where collected by our website and the services described in section 6.

Sources include your communications with us, our website technologies, shoots and clients commissioning work, such as estate agents, builders or property owners who supply relevant contact or project information.

If you provide another person’s information, please ensure you are entitled to share it and direct them to this notice. We remain responsible for meeting our own transparency obligations.

3 How we use information and our lawful bases

We identify the appropriate lawful basis for each use of personal information.

• Contract: to respond to a request for a quote, arrange a booking, provide agreed services, communicate about a project and arrange payment, where necessary for a contract with you or steps you have asked us to take before entering into one.

• Legitimate interests: to answer general enquiries, manage business-client contacts, secure our website and records, and handle complaints or claims. Our interests are providing services, maintaining business relationships and protecting our business. We assess these interests against your rights and use only necessary, proportionate information.

• Filming and delivery: contract where processing is necessary to deliver an individual client’s agreed service. For other identifiable people, our basis is legitimate interests in producing the commissioned property media, subject to an assessment of their rights, reasonable expectations and the necessity of recording or sharing the material.

• Legal obligation: to keep required tax and accounting records and comply with applicable legal duties.

• Consent: for cookies or similar tracking that requires consent, marketing communications where consent is required, and any specific use for which we ask for your permission. Consent requests explain the purpose and can be withdrawn using the relevant controls or by emailing us.

If we send promotional messages, we do so only where permitted by the applicable marketing rules, relying on consent where required or otherwise on our legitimate interests in promoting relevant services. You can opt out at any time. Service and booking messages are separate from promotional marketing.

We explain which information is needed for a quote, access, booking or legal duty. If you do not provide required information, we may be unable to proceed.

4 Photographs video and promotional use

We aim to avoid collecting unnecessary personal information during shoots, including identifiable bystanders or private details unrelated to the project. Where appropriate, we provide filming information at the location and direct people to this notice.

We share agreed photographs and videos with the commissioning client and authorised recipients. Where the client decides how material will be published or otherwise used, its own privacy information may also apply.

Before using personal information in our own website, portfolio or social-media promotion, we explain that purpose and the applicable lawful basis to affected people. Where we rely on consent, we obtain it before publication. A booking alone is not consent to promotional use of someone’s personal information.

If you have a concern about being identifiable in our material, contact us with enough detail to identify the relevant image or video.

5 Security and retention

We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse and disclosure. We limit access to people and service providers who need it for the relevant purpose.

We retain information only for as long as necessary for its purpose:

• Enquiries that do not become bookings: until the enquiry and any agreed follow-up are complete, unless information is needed to resolve an outstanding issue or legal claim.

• Client and contract records: for the duration of the project and afterwards only as needed for outstanding payments, agreed obligations, complaints or legal claims, taking account of the applicable limitation periods.

• Tax records: for the statutory period. For self-employed business records, this is normally at least five years after the 31 January submission deadline for the relevant tax year. Longer retention may be required in particular circumstances, such as an ongoing tax enquiry.

• Raw footage and delivered files: for any archive period agreed with the client; otherwise for as long as needed to complete editing, delivery, agreed revisions and any outstanding project issues. We review and delete material once those purposes no longer apply.

• Promotional material: while it remains relevant to the stated promotional purpose and we have a lawful basis to use it, subject to review and any applicable objection or withdrawal of consent.

• Marketing preferences: for as long as needed to manage your choices. We may retain a minimal suppression record to ensure we respect an opt-out.

When retention is no longer justified, we securely delete or anonymise the information. Information in backups is removed through the applicable backup-retention cycle and is not used for new purposes.

6 Sharing information and our website

We do not sell, rent or trade your personal information. Where necessary for the purposes in this notice, recipients may include:

• Service providers: website and email hosting, IT support, storage and file-delivery services, and any authorised editing or production support.

• Project recipients: the client commissioning the work and people authorised to receive it; relevant hosting or social-media platforms where material is lawfully published.

• Professional advisers and authorities: accountants, insurers, legal advisers, regulators or law-enforcement bodies where necessary and lawful.

Where a provider processes personal information on our behalf, we put appropriate contractual arrangements in place covering instructions, confidentiality and data protection.

Our website is hosted by Wix.com Ltd. Wix may process visitor information outside the UK, including in Israel, the European Union, the United States and other locations identified in its published information. Wix’s Data Processing Addendum sets out the applicable transfer safeguards and UK-specific terms. Contact us for further details and copies of relevant safeguards.

Further information: Wix privacy policy and Wix Data Processing Addendum.

Wix uses essential cookies for functions such as security and site stability. Embedded YouTube content and any additional website integrations may also use cookies or similar technologies. Where consent is legally required, we obtain it before those technologies are used and provide a way to refuse or withdraw it. Browser controls provide additional options.

Wix publishes the names, purposes and durations of its standard cookies in Cookies and Your Wix Site. Additional integrations may use other technologies and require further information and consent controls. Other websites have their own privacy notices.

7 Your data protection rights

Depending on the information, purpose and lawful basis, you may have the right to:

• Access: request a copy of your personal information and information about how it is used.

• Rectification: ask us to correct inaccurate information or complete information that is incomplete.

• Erasure: ask us to delete personal information in the circumstances provided by law.

• Restriction: ask us to limit how we use your information in the circumstances provided by law.

• Data portability: receive certain information you provided in a structured, commonly used, machine-readable format, or ask for it to be transferred to another organisation, where the legal conditions apply.

• Withdrawal of consent: withdraw consent at any time where we rely on it. This does not affect the lawfulness of processing before withdrawal.

Your right to object

You can object to processing based on legitimate interests for reasons relating to your particular situation. You have an absolute right to object to use of your personal information for direct marketing, including related profiling. We will stop using it for that marketing purpose.

To exercise your rights, email cmflythroughstudio@gmail.com. We normally respond free of charge and without undue delay, within one calendar month. Where the law permits an extension or another adjustment to the deadline, we will explain why. We may need proportionate information to verify your identity. If a legal exception limits what we can do, we will explain it.

8 Complaints

If you have a concern or complaint about our handling of personal information, email cmflythroughstudio@gmail.com. We will acknowledge a data-protection complaint within 30 days, make appropriate enquiries, keep you informed and communicate the outcome without undue delay. Requests to exercise your data-protection rights follow the separate time limits described in section 7.

You also have the right to complain to the Information Commissioner’s Office:

Website: https://ico.org.uk
Telephone: 0303 123 1113
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

10 Changes to this policy

We review this policy when our practices or legal requirements change and publish the updated version on our website. The date above shows the latest revision. Where required, we will give further information before using personal information for a new purpose.