Privacy Policy

1. Introduction and Scope

Reelpockscenegarden Ltd ("we", "us", or "our"), operating under company registration number #14920481 and located at 48 Chancery Lane, London, WC2A 1JF, United Kingdom, respects the privacy rights of our website visitors, clients, and corporate partners. This Privacy Policy details how we collect, process, store, and safeguard personal information collected through our website at reelpockscenegarden.quest and associated professional advisory channels.

2. Categories of Information We Collect

We collect only the minimum personal data necessary to provide reliable advisory communications and maintain technical platform security:

• Voluntarily Submitted Contact Information: Name, work email address, company affiliation, and project descriptions provided via our contact and consultation request forms.
• Automated Telemetry Data: IP addresses, browser user-agent strings, referring URLs, operating system characteristics, and timestamped engagement metrics collected via server logs to prevent malicious automated access.
• Cookie and Preference Identifiers: Anonymous identifiers stored in your local browser storage documenting your consent choices regarding analytics and session cookies.

3. Legal Bases for Processing (UK GDPR / EU GDPR)

We process personal data under strictly defined legal bases established by the UK Data Protection Act 2018 and Regulation (EU) 2016/679 (GDPR):

• Consent (Art. 6(1)(a)): Explicit consent provided by you when consenting to non-essential analytics cookies or requesting technical whitepapers.
• Contractual Performance (Art. 6(1)(b)): Processing necessary to prepare commercial proposals, execute client advisory agreements, or respond to direct business inquiries.
• Legitimate Interests (Art. 6(1)(f)): Securing our infrastructure against distributed denial-of-service attacks, investigating suspicious traffic, and maintaining operational integrity.

4. Third-Party Data Processors

We do not sell, lease, or monetize your personal data. We engage vetted third-party service providers under binding Data Processing Agreements (DPAs) compliant with Standard Contractual Clauses (SCCs). These processors include hosting infrastructure providers, security firewall providers, and secure email relay operators. All third-party processors are bound by strict non-disclosure obligations and process information exclusively on our documented instructions.

5. International Transfers and Data Retention

When personal information is transferred outside the United Kingdom or European Economic Area, we implement appropriate safeguards, including the UK International Data Transfer Addendum or approved Standard Contractual Clauses. We retain submitted contact inquiries for a maximum period of twenty-four (24) months following the resolution of your inquiry unless ongoing contractual obligations require longer retention. Server connection logs are automatically purged after thirty (30) days.

6. Your Statutory Rights (GDPR and CCPA / CPRA)

Depending on your jurisdiction, you maintain comprehensive statutory rights over your personal data:

• Right to Access & Portability: Request confirmation of processing and obtain a portable copy of your stored records.
• Right to Rectification: Request correction of inaccurate or incomplete records.
• Right to Erasure ("Right to be Forgotten"): Demand the deletion of personal data where legal retention grounds no longer apply.
• Right to Restrict or Object: Object to processing founded upon legitimate interests or request temporary restriction of processing.
• Non-Discrimination: Under the California Consumer Privacy Act (CCPA), California residents will never face discriminatory treatment, altered service pricing, or degraded quality for exercising privacy rights.

7. Data Protection Officer (DPO) and Inquiries

To exercise any statutory right, submit a formal subject access request, or raise an inquiry regarding our compliance practices, contact our designated Data Protection Officer at:

You also hold the right to lodge a formal complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk or your local European supervisory authority if you believe our data processing violates applicable regulations.