Privacy

Who is responsible

RETOLD is the trading name of Eddie Walsh, a sole trader based in Manchester, England. Eddie Walsh, trading as RETOLD, is the data controller for everything described on this page. RETOLD is not a limited company, so there is no company number or registered office to give.

Email info@retold.uk. Our postal address is available on request while we finalise a trading address for publication.

We are not required to appoint a Data Protection Officer and have not appointed one. Questions about this notice go to the address above.

What this notice covers

The retold.uk website, email correspondence with us, and the personal data we handle while making films. It does not cover other people's websites we link to, who have their own notices.

The website collects nothing

Worth saying first, because it is unusual. This website does not collect any personal data directly. There are no forms, no accounts, no analytics and no tracking of any kind. The only way to contact us is a link that opens your own email application. The website itself sends us nothing about you.

Personal data reaches us in three ways instead.

What we process, and why we are allowed to

When you email us

Your name, your email address, and whatever you put in the message. We use it to read and answer you, and to keep a record of business correspondence.

Lawful basis: legitimate interests under Article 6(1)(f), the interest being able to answer someone who has contacted us. Where the exchange becomes steps taken at your request before entering a contract, Article 6(1)(b) applies instead.

When you visit this site

Our host, Netlify, records standard server access logs: IP address, browser user agent, the page requested and a timestamp. We use them to keep the site up, to spot abuse and to diagnose faults. We do not use them to identify anyone and we do not build profiles from them.

Lawful basis: legitimate interests under Article 6(1)(f), the interest being a secure and available website.

When you become a client or appear in a film

Contact and billing details, the brief, schedules and call sheets, invoicing records, and the footage itself where it shows identifiable people.

Lawful basis: Article 6(1)(b) performance of a contract where you are the client. Article 6(1)(f) legitimate interests where you are a contact at a client company, a contributor or a crew member, the interest being delivering the film we were commissioned to make. Article 6(1)(c) legal obligation for the accounting records HMRC requires us to keep.

Where a film features identifiable people we also take a signed release. The release records what you agreed to and is our evidence of it. If any footage would reveal something about health, religion, politics, trade union membership, ethnic origin or sexual orientation, we ask for explicit consent separately, and you can withdraw that at any time.

Who else sees it

We do not sell personal data and we never use it for advertising. It reaches other companies only where they provide something we need.

• Netlify, which hosts this website and holds the server logs. It acts as our processor for the hosting itself, and as a controller in its own right for its platform security, abuse prevention and billing, which are its decisions and not ours.
• Google Workspace, which carries our email.
• Our accountant, for invoicing and tax records.
• Occasionally a freelance editor, colourist or composer working on your project, bound by the same confidentiality terms we are.

Data sent outside Britain

Netlify is based in the United States. Transfers to it are covered by its data processing agreement, which relies on the UK Extension to the EU to US Data Privacy Framework and on Standard Contractual Clauses with the UK International Data Transfer Addendum. Ask us and we will point you to a copy of the safeguards in force.

How long we keep it

• Enquiries that do not become projects: up to 24 months from your last contact, then deleted.
• Accounting and tax records: 6 years from the end of the relevant accounting period, which is what HMRC requires.
• Project files and correspondence: for the life of the working relationship and 6 years after it, so we can answer questions about work we delivered.
• Footage and stills: kept as part of the archive on the terms set out in your release or contract.
• Server logs: for the period Netlify retains them under its own policy, which is short and measured in weeks rather than years.

Do you have to give us anything

No. There is no statutory or contractual requirement to give us personal data. But if you do not tell us how to reach you we cannot answer your enquiry, and we cannot deliver a commissioned film without the details needed to make it.

Your right to object

Most of what we do rests on legitimate interests, so this is the right that matters most here. You can object at any time to our processing of your personal data. If you do, we stop, unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or unless we need the data to establish or defend a legal claim.

Object by emailing info@retold.uk. You do not have to give a reason and there is no charge.

Your other rights

You can also ask us to give you a copy of your data, correct it, delete it, or restrict what we do with it. Where we rely on consent you can withdraw it at any time, and withdrawing is as easy as giving it was. The right to portability rarely bites here, because it applies to data processed by consent or under a contract and most of ours rests on legitimate interests.

Ask by emailing info@retold.uk. We answer within one month and there is no charge.

We do not make automated decisions about anyone and we do not profile.

Complaints

You have the right to complain to us about how we have handled your personal data, under section 164A of the Data Protection Act 2018. Write to info@retold.uk. We will acknowledge your complaint within 30 days of receiving it and tell you the outcome without undue delay.

You can also complain to the Information Commissioner's Office at any time, and you do not have to come to us first. ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. ico.org.uk/make-a-complaint or 0303 123 1113.

Cookies

One, and only once you have answered the choice we offer. It is called retold_consent, it holds nothing but the word accepted or declined, it lasts six months, and it exists so we stop asking. It is not an identifier and it is never shared. Nothing is stored before you answer.

The choice itself is about films hosted on YouTube, which store things on your device when their player loads. The full explanation is on the cookies page, and you can change your answer from the Cookie choice link in the footer of any page.

Changes

If this notice changes materially we update the date below and keep the previous version on file.

Last updated 16 August 2026.