Privacy Policy - Thinking Actors

Last updated: January 10th 2026

1) Who we are

Thinking Actors (“we”, “us”, “our”) is the data controller for the personal data we process.

Legal entity: Peter Carroll T/A Thinking Actors.

We are registered with ICO - Information Commissioner's Office.

Email: [info@thinkingactors.co.uk]
Phone: [+44 (0)7970 828092]

If you have any questions about this policy or want to exercise your data rights, email us with “Privacy” in the subject line.

2) What this policy covers

This Privacy Policy explains how we collect, use, store and share personal data when you:

visit our website
contact us (email/forms/social)
book classes, workshops or 1-2-1 coaching
purchase products/services from our shop
attend sessions where filming/photography may take place

It also explains your rights under data protection law.

3) The personal data we collect

We may collect and process the following categories of data:

A) Identity and contact data

Name, email address, phone number, social handles (if you provide them), and basic contact preferences.

B) Booking and service data

Details of what you book or buy (class/workshop/coaching), attendance records, scheduling notes, and relevant service history.

C) Payment and transaction data

Purchase details, invoices/receipts, payment status and refund/credit information.
Card details are not stored by us — they’re handled securely by our payment providers.

D) Communications

Messages you send us (email, web forms, DMs), and our replies.

E) Photo/video/audio (media content)

If we film or photograph sessions, we may process images/video/audio that include identifiable people (see Section 8).

F) Technical and usage data

IP address, device and browser info, pages visited, and how you interact with the website. This is usually collected via cookies and analytics tools (see Section 11).

G) Special category data (only if you choose to share it)

Occasionally, you might share information about health/access needs (e.g., injury, disability accommodations). We only use this to support you appropriately and safely.

4) How we use your data and our lawful bases

We only use personal data where the law allows us to. Common lawful bases include:

Contract (to deliver what you booked/bought)
Legitimate interests (to run and improve our business in a way you’d reasonably expect)
Consent (e.g., marketing emails, certain types of media use)
Legal obligation (e.g., tax/accounting requirements)

Typical uses

We use your data to:

process bookings and payments
deliver classes, workshops, coaching and filming services
respond to enquiries and provide customer support
send service messages (e.g., schedule changes, venue info)
manage safeguarding, safety, and reasonable adjustments (where relevant)
improve our website, services and marketing effectiveness
prevent fraud and protect our business and users
comply with legal and regulatory obligations

5) Marketing preferences

We may send you marketing emails/texts only if:

you opted in, or
you’re an existing customer and the message relates to similar services (where permitted), and you were given a clear chance to opt out.

You can opt out at any time by:

using the unsubscribe link in emails, or
emailing us with “Unsubscribe”.

6) Who we share your data with

We share data only when necessary, including with:

Service providers (processors)

Trusted third parties who help us run the business, such as:

website hosting and site management (e.g., Wix)
payment processors (e.g., Stripe/PayPal/GoCardless or your provider)
email marketing tools
analytics tools (e.g., Google Analytics)
video/meeting platforms (e.g., Zoom) for online coaching/classes
file storage/collaboration tools (where used for delivering services)

They are only permitted to process data on our instructions and must keep it secure.

Legal and compliance

We may share data if required by law, regulation, legal process, or to protect rights/safety.

Other parties you request

If you ask us to share something (e.g., sending materials to a third party), we’ll do so based on your instruction.

7) International data transfers

Some of our providers may store/process data outside the UK. When this happens, we use appropriate safeguards (such as UK GDPR-approved transfer mechanisms and contractual protections) to keep your data protected.

8) Filming, photography and media use

We may film or photograph parts of classes/workshops for:

learning review (e.g., performance playback)
documentation of training activity
promotion of Thinking Actors and our services (website/social/ads)

Your choices

If you don’t want to be filmed/photographed, tell us before the session (or on arrival). We’ll take reasonable steps to accommodate this (e.g., positioning, avoiding identifiable shots, excluding you from published content).
Where we plan to capture close-up/feature content of you specifically for marketing, we will aim to request clear consent.

9) How long we keep your data (retention)

We keep data only as long as needed for the purpose collected, including:

Bookings, invoices, payments: typically up to 6 years (tax/accounting requirements)
Enquiries: typically 12–24 months after last contact
Marketing lists: until you unsubscribe (or we routinely clean inactive contacts)
Session media: typically up to 3 years, unless it remains relevant for showreel/proof-of-work/promotional use and you haven’t objected/withdrawn consent where applicable

You can request deletion in many cases (see Section 10), but we may need to keep certain records for legal reasons.

10) Your rights

Under UK GDPR, you may have the right to:

access your data
correct inaccurate data
request deletion (in certain circumstances)
restrict processing
object to processing (especially where we rely on legitimate interests)
data portability (where applicable)
withdraw consent (where consent is the basis)

To make a request, email us. We may need to confirm your identity.

11) Cookies and analytics

We use cookies and similar technologies to:

make the site work properly (essential cookies)
understand site performance and improve usability (analytics)
support marketing/advertising measurement (where enabled)

You can manage cookies via:

our cookie banner/settings (where available)
your browser settings (block/delete cookies)

If you disable cookies, parts of the site may not function as intended.

12) Security

We take appropriate technical and organisational measures to protect your data. No system is 100% secure, but we work to prevent unauthorised access, loss, misuse or disclosure.

13) Complaints

If you’re unhappy with how we handle your data, please contact us first - we’ll try to resolve it quickly.

You also have the right to complain to the UK regulator:

Information Commissioner’s Office (ICO).

14) Changes to this policy

We may update this policy from time to time. The latest version will always be posted on our website with the “Last updated” date.