Privacy Policy

We may collect and process the following types of personal information:

• Name, title, and contact details (address, telephone number, email address).

• Date of birth and gender.

• Employment, education, or professional background (where relevant to our services).

• Information you provide when you contact us, register for services, or participate in events.

• Payment information (when you make purchases).

• Technical data such as IP address, browser type, device information, and usage data (collected automatically when you use our website).

• Any other information you choose to provide.

Sensitive Data

We will only collect sensitive personal data (e.g., health or disability information) where necessary and with your explicit consent or as required by law.

• Directly from you (e.g., via forms, registrations, email, or phone).

• Automatically via our website (e.g., cookies, analytics).

• From third parties (e.g., payment processors, event partners, or public sources).

We process your personal data for the following purposes:

• To provide, improve, and administer our services and events.

• To communicate with you about your account, our services, or important updates.

• To process payments and fulfil orders.

• To respond to your enquiries and provide support.

• To comply with legal obligations and regulatory requirements.

• To send you marketing communications (where you have consented).

• To analyse website usage and improve user experience.

• To protect our services and users from fraud and abuse.

We only process your personal data when we have a valid legal basis, including:

• Your consent.

• Performance of a contract.

• Compliance with legal obligations.

• Our legitimate interests (e.g., service improvement, security, marketing).

We may share your data with:

• Our staff and contractors who need the information to provide services.

• Service providers and partners who process data on our behalf (e.g., IT, payment, or marketing providers).

• Government bodies or regulators where required by law.

• Third parties in connection with business transfers or legal claims.

All third parties are required to respect the security of your personal data and to treat it in accordance with the law.

We do not routinely transfer your data outside the UK or European Economic Area (EEA). If we do, we will ensure appropriate safeguards are in place.

We have implemented appropriate technical and organisational measures to safeguard your personal data against loss, misuse, unauthorised access, disclosure, or alteration.

We retain your personal data only as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting requirements. Data may be anonymised or deleted when no longer required.

Under data protection law, you have the right to:

• Access your personal data.

• Rectify inaccurate or incomplete data.

• Request erasure of your data (“right to be forgotten”).

• Restrict or object to processing.

• Withdraw consent at any time (where processing is based on consent).

• Data portability (in certain circumstances).

• Lodge a complaint with the Information Commissioner’s Office (ICO).

To exercise any of these rights, please contact us at info@xrstudios.co.uk.

Our website uses cookies and similar technologies to improve your experience and analyse usage. You can manage your cookie preferences via your browser settings. For more information, see our Cookie Policy.

Our services are not intended for children under 18. We do not knowingly collect data from minors. If you believe we have collected data from a child, please contact us and we will delete it.

We may update this Privacy Policy from time to time. The latest version will always be available on our website. Significant changes will be communicated via email or website notice.