Privacy Policy

We may collect and process the following categories of personal data:

1.1 Data You Provide Directly

• Identity data: your name, username, or similar identifier.
• Contact data: your email address, postal address, and telephone number.
• Transaction data: details of products, subscriptions, or event tickets you have purchased, including order history and payment records.
• Financial data: payment method details (processed securely by Stripe or PayPal — we do not store full card numbers).
• Communications data: messages, enquiries, or feedback you send us, including via our AI assistant (Xara) or contact form.
• Competition data: entry details for prize draws and competitions.
• Account data: login credentials and subscription status.

1.2 Data Collected Automatically

• Technical data: IP address, browser type and version, device type, operating system, and time zone.
• Usage data: pages visited, links clicked, content streamed, time spent on pages, and referring URLs.
• Cookie data: information collected via cookies and similar tracking technologies (see Section 10).

1.3 Data from Third Parties

• Payment confirmation and fraud-prevention data from Stripe and PayPal.
• Analytics data from Google Analytics (where applicable).

We use your personal data for the following purposes and on the following legal bases:

We will only send you marketing emails or messages if you have given us your consent to do so. You can withdraw your consent at any time by clicking the “unsubscribe” link in any marketing email or by contacting us at [email protected].

Withdrawing consent does not affect the lawfulness of any processing carried out before you withdrew consent. We will continue to send you transactional communications (such as order confirmations) as these are necessary for the performance of our contract with you.

We do not sell your personal data. We may share it with the following categories of third parties:

• Payment processors: Stripe and PayPal, to process payments securely.
• Email service providers: to send transactional and marketing emails on our behalf.
• Delivery and logistics providers: to fulfil physical product orders.
• Analytics providers: such as Google Analytics, to help us understand how our Services are used.
• AI service providers: OpenAI, which powers our Xara assistant. Conversation data may be processed by OpenAI in accordance with their privacy policy.
• Legal and regulatory authorities: where required by law, court order, or regulatory requirement.
• Professional advisers: including lawyers, accountants, and insurers, where necessary.

All third parties are required to process your data in accordance with applicable data protection law and our instructions. We do not permit them to use your data for their own purposes.

Some of our third-party service providers are based outside the UK or European Economic Area (EEA). Where we transfer your personal data internationally, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or equivalent mechanisms, to protect your data to the same standard as required under UK GDPR.

We retain your personal data only for as long as necessary for the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Our general retention periods are:

• Customer account data: for the duration of your account plus 6 years after closure.
• Transaction and financial records: 7 years, as required by HMRC.
• Marketing consent records: until you withdraw consent, plus 3 years.
• Customer service communications: 3 years from the date of the last interaction.
• Technical and usage data: up to 26 months.

When your data is no longer required, we will securely delete or anonymise it.

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure: to request deletion of your data in certain circumstances.
• Right to restrict processing: to request that we limit how we use your data in certain circumstances.
• Right to data portability: to receive your data in a structured, machine-readable format.
• Right to object: to object to processing based on legitimate interests or for direct marketing.
• Rights related to automated decision-making: to not be subject to solely automated decisions that significantly affect you.

To exercise any of these rights, please contact us at [email protected]. We will respond within one month. We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include encrypted data transmission (HTTPS/TLS), access controls, and regular security reviews.

While we take all reasonable steps to protect your data, no method of transmission over the internet is completely secure. We cannot guarantee absolute security, but we will notify you and the ICO of any data breach as required by law.

Our Services are not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us immediately at [email protected] and we will delete it promptly.

Users between the ages of 13 and 17 may use our free streaming services. Paid services, competitions, and shop purchases require users to be 18 or over.

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small text files placed on your device when you visit our site.

Types of cookies we use:

• Strictly necessary cookies: essential for the website to function (e.g. session management, shopping cart). These cannot be disabled.
• Performance cookies: help us understand how visitors use our site (e.g. Google Analytics). These are only set with your consent.
• Functional cookies: remember your preferences (e.g. language, subscription status).
• Marketing cookies: used to deliver relevant advertising. These are only set with your consent.

You can manage your cookie preferences through our cookie consent banner or by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality of our Services.

When you interact with our AI assistant, Xara, your conversation data (including any personal information you share) is processed by OpenAI to generate responses. We may also store a record of your enquiry in our own systems for customer service purposes.

Please do not share sensitive personal information (such as payment card details, passwords, or government-issued ID numbers) in your conversations with Xara.

Conversation records may be reviewed by our team for quality assurance, training, and service improvement. We retain conversation logs for up to 3 years.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the updated policy on this page with a revised effective date. Where changes are material, we will notify you by email or by a prominent notice on our website.

We encourage you to review this policy periodically.

If you have any questions, concerns, or requests relating to this Privacy Policy or our data processing practices, please contact us:

You also have the right to make a complaint to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint