TEN. Privacy Policy

Last updated: 1 October 2026

Created By TEN Ltd respects your privacy and is committed to handling personal data fairly, securely and transparently. This policy explains how we use personal data when you visit our website, contact us, work with us or take part in a project.

1. Who we are

Created By TEN Ltd is incorporated in England and Wales under company number 09798541.

Registered and trading office:
Workspace 28, Phoenix Square
4 Midland Street
Leicester, LE1 1TG

For privacy enquiries or to exercise your rights, contact studio@createdbyten.com.

TEN is usually the data controller for its website, enquiries, business contacts and its own administration. On some client projects, a client decides why and how personal data is used and TEN processes that data on the client’s documented instructions. The relevant contract will clarify those roles where needed.

2. Personal data we may collect

Depending on how you interact with us, we may collect:

  • your name, organisation, job title and contact details;
  • information you provide through forms, emails, calls, meetings or project documents;
  • commercial and administrative information relating to proposals, contracts, invoices and payments;
  • images, video, audio, interview material, contributor details, permissions and release information created or supplied for productions;
  • technical data such as IP address, device, browser, pages visited, approximate location and website logs;
  • records of preferences, consent and communications with us.

We do not ask for special category data through the website. A production may involve sensitive information where it is necessary for the agreed story or production, in which case we will identify an appropriate lawful basis, apply suitable safeguards and obtain consent where required.

3. How we collect personal data

We collect personal data directly from you when you contact us, join a call, provide material, sign a release, engage us or take part in a production. We may also receive data from a client, agency, production partner, contributor, publicly available professional source or service provider. Website data may be collected through cookies, analytics and hosting logs.

4. How and why we use personal data

We may use personal data to:

  • respond to enquiries and develop potential projects;
  • plan, produce, edit, deliver, archive and promote agreed work;
  • manage contributors, crew, suppliers, locations, permissions and project safety;
  • administer contracts, payments, records and legal obligations;
  • operate, secure and improve our website and services;
  • keep appropriate records and establish, exercise or defend legal claims.

We do not sell personal data or share it with third parties for their own marketing.

5. Lawful bases

Our lawful bases under UK data protection law may include:

  • Contract: where processing is needed to take steps at your request or perform an agreement.
  • Legitimate interests: to respond to enquiries, run and improve our business, produce and safeguard work, maintain relationships and protect our systems and rights, where those interests are not overridden by your rights.
  • Consent: where we ask for a clear choice, including certain contributor uses, marketing or non essential cookies. You may withdraw consent at any time.
  • Legal obligation: where we must keep or disclose information to comply with the law.

6. Website analytics and cookies

We use essential technologies to operate and secure the website. Subject to the choices available to you and where consent is required, we may use Google Analytics 4 to understand website use. Analytics may record device and browser information, approximate location, pages visited, interactions and time spent on the site.

We also use tools such as Google Search Console and All in One SEO to monitor search visibility and website performance. You can manage cookies through the options presented on the website and through your browser settings. Disabling some cookies may affect website functionality.

7. Service providers and data sharing

We only share personal data where there is a valid reason. Recipients may include clients and their agencies, contributors, crew, production partners, professional advisers, insurers, regulators and authorities, and trusted providers supporting our work.

Our providers may include website hosting and security services, Google Workspace and Google Drive, Dropbox, Vimeo, WeTransfer, Adobe services and approved production, storage, communication and accounting tools. We may also use OpenAI tools to help structure, summarise or analyse working information. We apply access controls, minimise the data shared and use contractual protections where required. We do not use AI to make solely automated decisions that have legal or similarly significant effects on individuals.

8. International transfers

Some providers may store or process personal data outside the UK. Where this happens, we use providers and transfer arrangements designed to comply with UK data protection law, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses, as applicable. You may contact us for more information about the safeguards relevant to your data.

9. Retention

We keep personal data only for as long as needed for the purpose for which it was collected, including project delivery, agreed archiving, relationship management, insurance, accounting and legal requirements. The period depends on the type of record, the project agreement, contributor permissions, client instructions and any legal limitation or retention period.

Unsuccessful enquiry information is normally reviewed and deleted when it is no longer useful for a genuine business relationship. Contract, tax and accounting records are kept for the period required by law. Production material is retained in line with the relevant agreement, our records schedule and any continuing rights or permissions.

10. Security

We use proportionate technical and organisational measures, including access controls, device security, encryption where available, secure cloud services and controlled sharing. No system or internet transmission can be guaranteed completely secure.

11. Your rights

Depending on the circumstances, you may have the right to request access, correction, erasure, restriction, objection or data portability, and to withdraw consent. Rights can vary according to the lawful basis and may be subject to legal exceptions.

You have the right to object to processing based on legitimate interests and to direct marketing. Contact studio@createdbyten.com to exercise your rights. We may need to verify your identity before responding.

You may also complain to the Information Commissioner’s Office. We would welcome the opportunity to address your concern first.

12. Children and contributors

Our website is intended for business and general audiences and is not directed at children. Where a production involves a child or young person, we use appropriate consent, safeguarding and access arrangements and work with the responsible parent, guardian, school, organisation or client as required.

13. Third party links

This website may link to third party websites. We do not control their privacy practices and recommend reading their policies.

14. Changes to this policy

We may update this policy when our services, tools or legal obligations change. The latest version will appear on this page with its updated date.