Privacy
policy.

Who we are

We Should Create Ltd is a content production company registered in England and Wales.

We operate the website https://www.weshouldcreate.com and are the data controller responsible for your personal information collected through this site.

If you have any questions about this policy or how we handle your data, contact us at team@weshouldcreate.com.

What information we collect

We collect information in the following ways:

• Information you give us: when you fill in a contact form, book a call, or email us directly. This may include your name, email address, phone number, company name, the shoot date and options you choose when booking, plus any details you share about your project.
• Information we collect automatically: when you visit our website we may collect your IP address, browser type, pages visited and time spent on the site through analytics tools.
• Information from third parties: if you interact with us on social media, we may receive information based on your activity and privacy settings on those platforms.

We do not collect sensitive personal data such as health information, financial details, or government identification numbers.

How we use your information

We use the information we collect to:

• Respond to enquiries and communicate with you about your project
• Send you information about our services where you have asked us to
• Improve our website and understand how visitors use it
• Meet our legal and regulatory obligations

We will never sell, rent, or trade your personal information to third parties for marketing purposes.

Our lawful basis for processing your data is either your consent, our legitimate interests in running our business, or the performance of a contract where we are working together.

Cookies

We do not use tracking cookies. Our analytics works without storing anything on your device and does not identify you. The only things the site keeps in your browser are there to make it work: the booking calendar remembers the open days for a few minutes. If you sign in to the client portal, your sign-in is kept so you stay signed in.

By using the site you accept this. If you would rather we held no data about you at all, email us at team@weshouldcreate.com and we will delete what we have. If we ever add cookies that need your permission, we will ask first.

Third parties

We share only what is needed with the companies that run our website and content delivery, our booking diary, our analytics, our email and our accounts. They use it only to do that work for us. We never sell your details.

Most of these companies hold data in the UK or the EU. Our booking diary provider is in the United States; transfers to it are covered by the UK's international data transfer addendum.

Your rights

Under UK GDPR you have the following rights regarding your personal data:

• Right to access: you can request a copy of the data we hold about you.
• Right to rectification: you can ask us to correct any inaccurate data.
• Right to erasure: you can ask us to delete your data where there is no legitimate reason to keep it.
• Right to restrict processing: you can ask us to limit how we use your data.
• Right to data portability: you can request your data in a structured, machine-readable format.
• Right to object: you can object to us processing your data for direct marketing purposes.
• Right to withdraw consent: where we rely on your consent, you can withdraw it at any time by emailing us.

To exercise any of these rights, email us at team@weshouldcreate.com. We will respond within 30 days. If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Data retention

We only keep your data for as long as necessary. In practice this means:

• Enquiry and contact data is kept for up to 2 years after last contact
• Client project data is kept for up to 6 years in line with UK tax and legal requirements
• Analytics data is retained for 14 months before being automatically deleted

After these periods your data is securely deleted or anonymised.

Changes to this policy

We may update this privacy policy from time to time. When we do, we will update the “last updated” date at the top of this page. We encourage you to review this page periodically.

Continued use of our website after any changes constitutes acceptance of the updated policy.