Privacy Policy

Last updated: Feb 2026

1) Who we are

BrightWolf Films is a trading brand of ENCAPTIVATE FILMS LTD (“we”, “us”, “our”). We are the data controller for personal data collected via our website
Company name: ENCAPTIVATE FILMS LTD
Company number: SC591806
Registered office: 272 Bath Street, Glasgow, Scotland, G2 4JR (unsolicited mail will not be held)
Email: info@brightwolf.co.uk
Website: [Insert domain]

2) What data we collect

Contact form: name, email address, phone number (if provided), company (if provided), message content and any information you submit.
Newsletter: email address (and optionally name if you provide it).
Website usage data: IP address, device/browser details, pages viewed, and interaction data (via cookies/analytics—see “Cookies & analytics”).
Correspondence: any additional information you provide when communicating with us.
Casting and production enquiries: see Section 9 for details on CVs, headshots, showreels, agent details, availability, and—where relevant—child performer information.

3) How we use your data and legal bases

Responding to enquiries (contact form): to read, triage and reply to your message. Legal basis: legitimate interests (operating our business and responding to prospective clients and partners).
Providing our newsletter/updates: to send news, insights and occasional marketing. Legal basis: consent (opt‑in). You can withdraw consent at any time via the unsubscribe link or by contacting us.
Marketing to existing clients/contacts: where appropriate, we may send related communications. Legal basis: legitimate interests (and PECR rules). You can opt out at any time.
Improving our website and services: analysing usage to maintain security and enhance performance. Legal basis: legitimate interests.
Legal and compliance: to establish, exercise, or defend legal claims; to comply with legal obligations.

4) How long we keep your data

Contact form enquiries: typically up to 24 months from last interaction, unless a longer period is needed for ongoing projects, legal obligations, or dispute resolution.
Newsletter data: until you unsubscribe or withdraw consent; we may retain a suppression record to ensure we don’t email you again.
Analytics data: per our analytics provider’s retention settings (see “Cookies & analytics”).
Casting data: see Section 9; typically retained as long as relevant to current and upcoming productions or in accordance with legal obligations (e.g., child performance licensing), after which it is securely deleted or archived.

5) Who we share your data with

Service providers (processors): website hosting, email delivery, newsletter platforms, and analytics providers. They only process data on our instructions and must protect it.
Production partners: for casting and crew engagement, we may share relevant information with trusted casting directors, agents, and production partners strictly for the purpose of a specific production (see Section 9).
Professional advisers: legal or accounting services where necessary.
Authorities: where required by law or to protect our rights (e.g., child performance licensing bodies).
We do not sell your personal data.

6) International transfers

Some service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as UK adequacy regulations, International Data Transfer Agreements (IDTAs), or EU Standard Contractual Clauses with UK addenda.

7) Your rights

Under UK GDPR, you have rights which may include:
Access: request a copy of your personal data.
Rectification: have inaccurate data corrected.
Erasure: ask us to delete your data (subject to legal obligations).
Restriction: request we limit processing in certain circumstances.
Objection: object to processing based on legitimate interests or direct marketing.
Portability: receive data you provided in a structured, commonly used format (where applicable).
Withdraw consent: for newsletter or other consent‑based processing at any time.
To exercise your rights, contact info@brightwolf.co.uk. We’ll respond within one month.

8) Cookies & analytics

We may use cookies and similar technologies to operate the site, remember preferences, and analyse usage.
If we use analytics (e.g., Google Analytics, Plausible, Matomo), we process data such as IP address (possibly anonymised), device, and interaction data to understand performance and improve content.
Where required, we obtain your consent for non‑essential cookies via our cookie banner. You can manage preferences at any time via the banner or your browser settings.

9) Casting & production enquiries

What we collect
Contact details (name, email, phone), agent details, CVs, headshots, showreels, spotlight links, union membership (if provided), skills, and availability.
For crew: role, CV, portfolio links, rates (if provided), availability, references.
Where relevant for child performers: parent/guardian contact details, age/date of birth, school information, licensing documentation (handled with heightened care).
How we use casting data
To assess suitability for roles and projects, organise auditions, and communicate about opportunities.
To comply with legal and insurance requirements, including child performance licensing.
To maintain a secure talent/crew pipeline for current and future productions (you can ask us to remove your details at any time).
Legal bases
Legitimate interests: identifying and engaging talent and crew for productions.
Consent: where we request and rely on your explicit permission (e.g., retaining your details for future opportunities, or processing child performer information with guardian consent).
Legal obligation: where required for licensing, safeguarding, and compliance.
Sharing
We may share relevant information with casting directors, agents, production companies, and insurers strictly for production purposes.
Child performer data is shared only as necessary with licensing authorities and relevant production personnel, following safeguarding principles.
Retention
Active casting/production files: retained for the duration of the production and for a reasonable period thereafter for legal and insurance purposes.
Talent/crew database (with consent or legitimate interest): retained while relevant to upcoming productions; you may request deletion at any time.
Child performer records: retained per statutory requirements and safeguarding best practice, then securely deleted.
Safeguarding
We apply enhanced access controls and confidentiality for child performer data and sensitive documentation.
Do not send sensitive information unless requested and necessary; if you do, we will handle it securely and minimise retention.

10) Marketing communications

Newsletter emails are sent only with your consent or where otherwise permitted by law. You can unsubscribe via the link in any email or by contacting us.
We may perform basic segmentation (e.g., by interest category) to keep communications relevant.

11) Security

3We implement appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and staff awareness. No method of transmission is 100% secure, but we take reasonable steps to safeguard your data.

12) Third‑party links

Our website may include links to third‑party sites. Those sites have their own privacy practices; we are not responsible for them.

13) Children

Our site is not intended for children under 13. We do not knowingly collect data from children via the site. If you believe a child has provided data, please contact us to remove it.

14) Changes to this policy

We may update this policy from time to time. The latest version will always appear on this page with the “Last updated” date.

15) Contact us

Data controller: ENCAPTIVATE FILMS LTD (trading as BrightWolf Films)
Email: info@brightwolf.co.uk
Postal address: 272 Bath Street, Glasgow, Scotland, G2 4JR

16) Complaints

If you have concerns, please contact us first. You also have the right to complain to the UK Information Commissioner’s Office (ICO):
www.ico.org.uk
Tel: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

This policy is intended to comply with the UK GDPR and the Data Protection Act 2018.