Book the studioBook a call
SCENE LEGAL

Privacy notice

Last updated 10 November 2026

Gempro ("Gempro", "we", "us" or "our") is committed to protecting your personal data. This notice explains how we collect, use, store and protect information about you when you visit our website, contact us, book our studio or use our services. It also sets out your rights under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where it applies, the EU GDPR.

Please read it together with our Cookie policy and Terms of use.

1. Who we are (data controller)

Gempro is the trading name of Gempro Designs, a subsidiary of NXT Horizon, registered in England and Wales, company number 07756371. We are the data controller for your personal data.

For any privacy question, or to use your rights, email hello@gempro.co.uk. We are not required to appoint a Data Protection Officer under Article 37 UK GDPR, and that address reaches the people who deal with data protection.

2. The personal data we collect

  • Information you give us. Your name, company, job role, email address, telephone number and anything you write in a form. This covers the contact, call and tour forms, studio booking requests, audit requests, On Location briefs, event reservations, newsletter sign ups and podcast guest suggestions.
  • Studio booking details. The room, date, time and extras you ask for, whether you are booking as a business, your company and VAT number if you give them, and the number of people attending. If you take part in a recording we also keep the recording release you sign (your name, email and the date and time you signed).
  • Payment information. Online payment is not switched on yet. When it is, card payments will be taken by our payment provider, Stripe. We never see or store your full card number.
  • Technical and usage data. Your IP address, browser type, device information and the pages you visit. Our servers keep short-lived logs to run and secure the site. Analytics cookies are set only if you accept them (see our Cookie policy).
  • Information from the work itself. Material exchanged while we deliver our services to you or your organisation.

3. How and why we use your data

We only use your personal data where we have a lawful basis under Article 6 of the UK GDPR:

  • Consent. Where you have opted in, for example to marketing emails or to non-essential cookies. You can withdraw consent at any time.
  • Legitimate interests. To reply to enquiries, run and improve our website and services, keep the site secure and prevent spam, and promote our services to businesses, balanced against your rights and interests.
  • Contract. To take steps at your request before a contract, and to carry out a contract for our services, such as a studio booking.
  • Legal obligation. To keep tax and accounting records and to respond to lawful requests.

4. Marketing

We send marketing emails only with your consent, or where the law otherwise allows it. Every marketing email has an unsubscribe link, and you can opt out at any time by emailing hello@gempro.co.uk. If you ask for a booking, a call or a quote we will email you about that request. That is not marketing.

5. Who we share your data with

We do not sell your personal data. We share it only with the organisations that help us run the website and our services, each of which acts on our instructions:

  • Netlify, which hosts the website.
  • Neon, which provides the database where enquiries, bookings and website content are stored.
  • Resend, which sends our emails, including the confirmation emails we send you.
  • HubSpot, our customer relationship management (CRM) system, where enquiries may also be recorded.
  • Cloudflare, which provides the spam check on our forms.
  • Stripe, our payment provider, once online payment is switched on.
  • Plausible or Google Analytics, only if you accept analytics cookies, and Google Maps, only if you accept the maps cookie.

We may also share information with our professional advisers, with people who help us deliver a project for you, and with authorities where the law requires it.

6. International transfers

Our team works from the United Kingdom, Germany, South Africa and India, and some of our providers are based outside the UK. This means personal data may be handled outside the UK and the European Economic Area. Where that happens we make sure an appropriate safeguard is in place, such as an adequacy decision, the UK International Data Transfer Agreement or addendum, or the EU Standard Contractual Clauses, together with a transfer risk assessment where needed. You can ask us for a copy of the relevant safeguard at hello@gempro.co.uk.

7. How long we keep your data

We keep personal data only as long as we need it for the reasons we collected it, and to meet legal, accounting and reporting duties. After that we delete it or anonymise it.

  • Enquiries and form submissions: up to 24 months from your last contact with us.
  • Studio bookings, invoices and payment records: six years, to meet tax and accounting requirements.
  • Signed recording releases: for as long as the recording is in use.
  • Marketing subscriptions: until you unsubscribe.

8. How we protect your data

We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, change or disclosure. Our website is served over HTTPS, access to the admin system needs a personal sign in, and we limit access to the people who need it to do their job.

9. Your rights

Under the UK GDPR and the EU GDPR you have the right to:

  • be informed about how your data is used;
  • access the personal data we hold about you;
  • have inaccurate or incomplete data corrected;
  • have your data erased ("the right to be forgotten");
  • restrict or object to our processing of your data;
  • data portability, to receive your data in a structured, machine-readable format;
  • withdraw consent at any time where we rely on it;
  • complain to a supervisory authority. In the UK this is the Information Commissioner's Office (ICO). If you are in the EEA you can also complain to your local authority.

To use any of these rights, email hello@gempro.co.uk. We will reply within one month, as the law requires. We would appreciate the chance to put things right before you contact the ICO.

10. Children

Our website and services are for business professionals and are not meant for anyone under 18. We do not knowingly collect personal data from children.

11. Our details

Website: www.gempro.co.uk
Address: Acorn House, 381 Midsummer Boulevard, Milton Keynes, MK9 3HP, United Kingdom
Email: hello@gempro.co.uk
Registered company number: 07756371

12. Changes to this notice

We may update this notice from time to time. The date at the top of the page shows when it was last changed. We will tell you about significant changes where appropriate.

Book a callBook the studio