# Privacy Policy

**Last updated: May 2026**

—

## Who We Are

MCHAR. (trading as MCharMedia) is a video production company based in Leeds, United Kingdom. We produce cinematic brand films and content for automotive, luxury, and lifestyle brands.

**Data Controller:**
Miles Charlesworth
MCHAR. / MCharMedia
Leeds, United Kingdom
Website: mchar.media

—

## What Information We Collect

We collect information in the following ways:

**Information you give us directly:**
– Your name, email address, phone number, and company name when you contact us via our enquiry form or by email
– Project details, briefs, and any other information you share in the course of working with us

**Information collected automatically:**
– Basic analytics data when you visit our website, including pages visited, time on site, and device/browser type (via cookies — see our Cookie Policy)
– IP address

**Information from third parties:**
– We may receive your contact details if you have been referred to us by an existing client or partner

We do not collect sensitive personal data (such as health information, financial account details, or government identifiers).

—

## How We Use Your Information

We use the information we collect to:

– Respond to enquiries and assess whether we are the right fit for your project
– Deliver our video production services and manage client relationships
– Send project updates, invoices, and communications relating to your project
– Improve our website and understand how visitors use it
– Comply with our legal obligations

We do not use your information for automated decision-making or profiling.

—

## Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

– **Contract:** Processing necessary to fulfil a contract with you, or to take steps at your request before entering into one
– **Legitimate interests:** Responding to enquiries, managing client relationships, and improving our services — where these interests are not overridden by your rights
– **Legal obligation:** Where we are required to process data to comply with the law (e.g. tax and accounting records)
– **Consent:** Where you have explicitly opted in, such as subscribing to updates from Legacy Driven or MCHAR

—

## Sharing Your Information

We do not sell your personal data. We may share it with:

– **Service providers:** Third parties who help us deliver our services, including cloud storage providers, project management tools, and accounting software. These parties are contractually required to handle your data securely and only for the purposes we specify.
– **Professional advisers:** Accountants or legal advisers where required
– **Legal compliance:** Where we are required to disclose information by law, regulation, or court order

All third parties we work with are based in the UK or EEA, or have appropriate safeguards in place for international transfers.

—

## Data Retention

We retain your personal data only for as long as necessary:

– **Enquiry data (no project commenced):** 12 months from last contact
– **Client project data:** 6 years from project completion (in line with HMRC requirements for financial records)
– **Website analytics:** As per our analytics provider’s standard retention policy

After these periods, your data is securely deleted or anonymised.

—

## Your Rights

Under UK GDPR, you have the right to:

– **Access** the personal data we hold about you
– **Correct** any inaccurate or incomplete data
– **Erase** your data in certain circumstances (“the right to be forgotten”)
– **Restrict** how we process your data in certain circumstances
– **Object** to processing based on legitimate interests
– **Portability** — receive your data in a structured, machine-readable format where applicable
– **Withdraw consent** at any time, where consent is the basis for processing

To exercise any of these rights, contact us at: **miles@mcharmedia.co.uk**

We will respond within 30 days. There is no charge for exercising your rights in most circumstances.

—

## Data Security

We take the security of your data seriously. We use appropriate technical and organisational measures to protect your information against unauthorised access, loss, or disclosure. These include password-protected systems, encrypted file storage, and restricted access to client data.

In the unlikely event of a data breach that poses a risk to your rights, we will notify you and the Information Commissioner’s Office (ICO) as required by law.

—

## Cookies

Our website uses cookies to understand how visitors use the site and to ensure it functions correctly. For full details of the cookies we use and how to manage them, please see our Cookie Policy.

—

## Third-Party Links

Our website may contain links to third-party websites (including our social media profiles and Vimeo-hosted videos). We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.

—

## Changes to This Policy

We may update this policy from time to time. The date at the top of this page will always reflect when it was last revised. We recommend checking back periodically.

—

## Contact & Complaints

If you have any questions about this policy or how we handle your data, please contact:

**Miles Charlesworth**
miles@mcharmedia.co.uk
mchar.media

If you are unhappy with how we have handled your data and we have not been able to resolve your concern, you have the right to lodge a complaint with the UK’s supervisory authority:

**Information Commissioner’s Office (ICO)**
ico.org.uk/make-a-complaint
0303 123 1113

—

*Please note: This privacy policy covers mchar.media only. If you are a subscriber or viewer of Legacy Driven (our YouTube channel), please also refer to YouTube/Google’s privacy policy for data processed through their platform.*