PRIVACY AND DATA POLICY

Green Oat Studios (“the Company”, “we”, “us”, or “our”) is an independent production company headquartered in Jersey, Channel Islands. We produce professional media content for global brands, broadcasters, and digital platforms.

We are committed to protecting the privacy and security of all personal information we handle. This policy explains how we collect, store, and use data in compliance with the Data Protection (Jersey) Law 2018 and the UK GDPR.

1. WHO WE ARE & DATA GOVERNANCE

Green Oat Studios is the ‘data controller’ for the personal information we process.

  • Jurisdiction: Our "mind and management" is based in Jersey, a jurisdiction formally recognized by the UK Government and European Commission as providing a level of data protection equivalent to the UK GDPR.

  • Operational Reach: While based in Jersey, we operate as an agile, international production company. Our production model is designed to execute projects on-location worldwide. To support our growth, we maintain a flexible network of global production resources and are evaluating the formal establishment of a UK-registered subsidiary as our domestic project volume scales.

  • Registration: We are registered with the Jersey Office of the Information Commissioner (JOIC).

2. DATA WE COLLECT

We collect personal information necessary for the development, production, and distribution of our content:

  • Contributors & Talent: Name, contact details, image, voice, and biographical data provided during filming (including members of the public in vox pops, professional talent, and subject-matter experts).

  • Clients & Suppliers: Business contact details and financial information required for project management and billing.

  • Production Network: Professional credentials and contact details for our network of freelance partners and collaborators.

  • Website Visitors: IP addresses and usage statistics collected automatically via our website hosting and analytics partners.

3. SPECIAL CATEGORY DATA

Where strictly necessary for production safety, insurance requirements, or diversity monitoring, we may occasionally process sensitive information (such as health data or ethnicity).

Our Policy: We only process this data with your explicit consent or where we have a clear legal obligation to do so.

4. OUR LAWFUL BASIS FOR PROCESSING

We rely on the following legal grounds to process your data:

  • Contractual Necessity: To manage your participation in a production or fulfill our agreements with brand clients.

  • Legitimate Interests: To create, edit, and archive our productions. We have a legitimate interest in maintaining an archive of our work for portfolio and distribution purposes.

  • Consent: Primarily for public contributions (vox pops) and website cookies.

  • Special Purposes: We may rely on legal exemptions for processing data for the purposes of journalism, art, and literature where it is in the public interest.

5. DATA STORAGE & THE "PRODUCTION NETWORK"

We utilize enterprise-grade digital infrastructure to ensure client assets are protected:

  • Infrastructure: We utilize secure cloud platforms including Google Drive and Frame.io.

  • Security: Access is restricted via Multi-Factor Authentication (MFA).

  • Frictionless Transfers: Because Jersey holds a formal Adequacy Ruling, data moves between Green Oat Studios and our UK/EU clients with total legal alignment and without the need for additional complex contractual safeguards.

  • Network Security: All freelance collaborators are contractually bound to our internal data security and confidentiality protocols.

6. DATA RETENTION

  • Master Productions: We may retain final productions and the personal data therein indefinitely where required for ongoing broadcast, distribution, historical archiving, and the protection of our intellectual property.

  • Project Assets: Raw rushes and project files may be retained for the duration of a project and beyond to support future re-edits or client requirements, unless a specific deletion schedule is agreed upon in a client contract.

  • Business Records: Records are kept for the statutory period required by Jersey law (typically 6–10 years).

7. YOUR RIGHTS

Under the Data Protection (Jersey) Law 2018, you have the right to access, correct, or request the deletion of your personal data.

Note on Production Content: Once a contribution has been incorporated into a finished production, the right to erasure may be limited by our legitimate interests and the "Special Purposes" (Artistic/Journalistic) exemptions under data protection law.

8. CONTACT US

If you have any questions about this policy or our data practices, please contact us at katy@greenoatstudios.com.

Last Updated: March 6, 2026