Last Updated: 06/06/2025 | Effective Date: 06/06/2025

Introduction

Opal Media Agency (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and safeguard your information when you use our website opalskyagency.com and our services. We comply with UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller

Opal Media Agency is the data controller responsible for your personal data.

Personal Data We Collect

• Identity Data: Name, date of birth, gender.
• Contact Data: Email, phone number, address.
• Professional Data: CV, work history, performance videos (for talent registration).
• Financial Data: Bank details, payment information (for contract fulfilment).
• Technical Data: IP address, browser type, device information.
• Usage Data: Pages visited, session duration, interaction patterns.
• Marketing Data: Preferences for newsletters or promotions.

How We Collect Data

• Directly From You: When you register, submit enquiries, sign contracts, or contact us.
• Automated Technologies: Cookies, server logs, analytics tools (e.g., Google Analytics).
• Third Parties: Business partners, talent scouts, or social media (with your consent).

Legal Basis & Purposes for Processing

Under UK GDPR, we process data based on:

• Contractual Necessity: To fulfil talent bookings or client agreements.
• Legitimate Interests: Site optimisation, fraud prevention, business growth.
• Legal Obligation: Tax, accounting, or regulatory compliance.
• Consent: For marketing communications (you may withdraw anytime).

We use your data to facilitate artist bookings, process payments, respond to enquiries, improve our site, send marketing updates, and comply with legal/regulatory requirements.

Data Sharing

We may share data with service providers, business partners, legal authorities, or third parties (with explicit consent). All partners comply with UK GDPR.

International Transfers

If data is transferred outside the UK, we use safeguards such as UK-approved Standard Contractual Clauses (SCCs) or adequacy decisions.

Data Security

We implement encryption (SSL/TLS), access controls, authentication protocols, and regular security audits. Breach notifications are issued within 72 hours where legally required.

Data Retention

We retain data as long as necessary for outlined purposes, up to 7 years for financial/contract records, and until consent is withdrawn for marketing data.

Your Rights (UK GDPR)

You have the right to access, correct, delete your data, restrict or object to processing, request data portability, withdraw consent, and complain to the ICO.

To exercise these rights, contact us at info@opalmediaagency.com. We respond within 30 days.

Cookies & Tracking

We use cookies for functionality, analytics, and advertising. Manage preferences via your browser settings or our Cookie Banner.

Third-Party Links

Our Site may link to external sites. We are not responsible for their privacy practices.

Changes to This Policy

Updates will be posted here with a new effective date. Significant changes may be notified via email.