Last updated: 12 October 2026
This policy explains how Defy Studios Ltd collects and uses personal information when you visit our website, get in touch, work with us, appear in our productions or receive emails from us. We've kept it as short and plain as we can.
Defy Studios Ltd (“Defy Studios”, “we”, “us”) is a video, CGI, aerial and AI production company. We are the controller of the personal information described in this policy.
We are not required to appoint a Data Protection Officer. Please send any privacy questions or requests to the email address above.
We do not intentionally collect special category data (such as health, ethnicity or religious beliefs), and we ask you not to send it to us.
UK data protection law requires us to have a lawful basis for each use of your information. These are ours:
| What we do | Lawful basis |
|---|---|
| Reply to your enquiry and prepare quotes or proposals | Taking steps at your request before a contract, or our legitimate interest in responding to business enquiries |
| Deliver projects, manage our relationship with clients and suppliers, and invoice | Performance of a contract |
| Keep accounting and tax records | Legal obligation |
| Send our newsletter to people who opted in | Consent |
| Contact businesses that may be interested in our services (see section 4) | Legitimate interests |
| Film, edit and publish productions featuring contributors | Consent or legitimate interests, as set out in your release form |
| Understand how our website is used so we can improve it | Legitimate interests |
| Protect our website and forms from spam and abuse | Legitimate interests |
| Establish, exercise or defend legal claims | Legitimate interests |
Where we rely on legitimate interests, we have weighed our interests against your rights. You can object at any time (see Your rights).
We use software tools, including AI tools, to help research companies and draft personalised emails, but a person at Defy Studios reviews them before they are sent. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
Newsletter: we only send our newsletter if you have opted in, and every email includes an unsubscribe link.
New business emails: we sometimes email people at businesses we think could benefit from our work, usually with an example of a relevant video. We only use work contact details, we keep these emails relevant to your role, and every email tells you how to opt out. If you reply asking us to stop, or object at any time, we will add your details to a suppression list so you are not contacted again.
If you appear in a production we will normally ask you to sign a release form. That form explains how the footage will be used, for example in an advert, on our client's channels or in our portfolio. We keep the release form for as long as the footage is in use.
When we film in public places, including aerial filming with drones, members of the public may be captured incidentally. We plan shoots to avoid recording identifiable people where we can, and we blur or remove people where appropriate. If you think you appear in our footage and want it reviewed, please contact us.
Cookies are small files stored on your device. Our website uses the following:
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _ga, _ga_* | Google Analytics | Measures how visitors use our website so we can improve it | Up to 2 years |
| _GRECAPTCHA | Google reCAPTCHA | Protects our contact form from spam | 6 months |
| vuid, __cf_bm, cf_clearance | Vimeo | Plays the embedded videos and records basic playback statistics for Vimeo | Session to 2 years |
We use Google Analytics only to produce statistics about how our website is used. We do not use it for advertising or to build profiles of individual visitors. You can opt out at any time by installing the Google Analytics opt-out browser add-on. You can also block or delete cookies in your browser settings, although some parts of the site, such as the videos and the contact form, may not work properly without them.
We do not sell your personal information. We share it only with service providers who process it on our behalf and under contract, including:
We may also share information with clients and collaborators to deliver a project, if the law requires it, or with a buyer or investor if our business is sold or restructured.
Some of our service providers, including Google, Mailchimp, Vimeo and Apollo.io, store or process data in the United States. Where personal information is transferred outside the UK, we rely on one of these safeguards:
We protect personal information with technical and organisational measures. These include encrypted (HTTPS) connections to our website, password-protected business accounts, and limiting access to the people who need it. No system is completely secure, but if a breach that puts your rights at risk does happen, we will tell you and the Information Commissioner's Office (ICO) where the law requires it.
Our website and services are aimed at businesses and adults. We do not knowingly collect personal information from children, except for contributors under 18, who only take part with the consent of a parent or guardian.
Under UK data protection law you have the right to:
To use any of these rights, email hello@defy-studios.com. We will respond within one month. This is usually free, and we may ask you to confirm your identity first.
If you're unhappy with how we've handled your information, please email us at hello@defy-studios.com first. We will acknowledge your complaint within 30 days and keep you updated until it is resolved.
You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk/make-a-complaint or by calling 0303 123 1113.
We will update this policy when our services or the law change, and we will show the date of the latest version at the top of the page. If we make significant changes that affect you, we will let you know.
