Privacy Policy

Last updated: 28 September 2026

Identity and Role of the Data Controller

headlyft acts as the data controller for the purposes of this privacy policy. We are responsible for determining the purposes and means of processing personal data collected through our website, which provides a headline and media presentation resource focused on editorial structure, story planning, studio reports, and polished workflows for news content. Our registered address is 37 Alexander Close, Abingdon, Oxfordshire, OX14 1XA and we can be contacted at [email protected].

Scope of the Notice and the People It Covers

This notice applies to all visitors to our website who are based in the United Kingdom. It covers personal data we collect when you browse our site, submit enquiries through the contact form, or otherwise interact with our services. It does not cover data processed by third parties linked from our site or data collected offline.

Categories of Personal Data and Sources

We collect personal data directly from you when you use the contact form, including your name, email address, and any message content you provide. We may also collect technical data such as IP address, browser type, and usage information through server logs and cookies. No data is obtained from third-party sources unless you explicitly authorise it.

Purpose-by-Purpose Explanation of Processing and Legal Basis

We process your data to respond to contact form enquiries under the legal basis of legitimate interest. Technical data is processed to maintain site security and functionality under legitimate interest. Where consent is obtained via the cookie banner, we process data for analytics under consent. Each purpose is limited to what is necessary for operating a commercial resource on editorial and media workflows.

Whether Providing Data Is Required and Consequences

Providing your name and email via the contact form is optional but necessary if you wish to receive a response. Failure to provide this information will mean we cannot process your enquiry. Technical data collection occurs automatically and cannot be declined without disabling essential site features.

Cookies and Similar Technologies

We use cookies and similar technologies for essential functionality and, where consented, for analytics. Please refer to our separate Cookie Policy for full details on the types of cookies used and how to manage your preferences. The cookie banner allows you to control non-essential cookies at any time.

Processors, Service-Provider Categories, Recipients, and Disclosures Required by Law

We engage service providers such as hosting companies, email delivery services, and analytics platforms as processors. These parties receive only the data necessary to perform their functions and are bound by contractual safeguards. We may disclose data if required by law or to protect our legal rights.

International Transfers and Safeguards

Some processors may be located outside the United Kingdom. In such cases we rely on standard contractual clauses or other approved safeguards under UK GDPR to ensure an adequate level of protection for your personal data.

Specific Retention Periods or Criteria

Contact form data is retained for up to two years after the last interaction to handle follow-up enquiries. Technical logs are kept for twelve months for security purposes. Cookie data follows the durations set out in our Cookie Policy. Data is deleted or anonymised once the retention period ends.

Security and Data-Minimisation Practices

We implement appropriate technical and organisational measures including encryption in transit, access controls, and regular security reviews. Data collection is limited to what is strictly necessary for the stated purposes. While we take reasonable steps to protect data, no system can guarantee absolute security.

All Applicable Data-Subject Rights and Exercising Them

You have the right to access, rectify, erase, restrict processing, and port your personal data. You may also object to certain processing. To exercise these rights please contact us at [email protected] with sufficient information to verify your identity. We will respond within one month as required by law.

Right to Withdraw Consent and Object to Direct Marketing or Profiling

Where processing relies on consent you may withdraw it at any time by adjusting your cookie settings or contacting us. We do not engage in direct marketing or profiling. If this changes we will update this policy and provide an easy opt-out mechanism.

Right to Complain to the Competent Supervisory Authority

If you are not satisfied with our handling of your data you have the right to lodge a complaint with the Information Commissioner's Office, the UK supervisory authority. Contact details are available on their website.

Children or Age Restrictions

Our website is intended for users aged eighteen and over. We do not knowingly collect personal data from children. If we become aware that data from a child has been collected we will delete it promptly.

Automated Decision-Making and Profiling

We do not use automated decision-making or profiling that produces legal or similarly significant effects. Any analytics are used solely for improving site performance and content relevance.

Policy Changes and Effective Date

We may update this policy from time to time to reflect changes in law or our practices. The last updated date appears at the top of this page. Continued use of the site after changes constitutes acceptance of the revised policy. headlyft | Company Registration Number: 05448561 | Registered in England and Wales | Registered Office Address: 37 Alexander Close, Abingdon, Oxfordshire, OX14 1XA