On this page you will find our Data Handling Policy, our Recruitment Policy and our Confidentiality Policy regarding disclosures, reports and feedback made to us.

Data Handling Policy

Cactus City Studio CIC is a Data Controller. We are registered with the information commissioner's office ( This privacy notice explains how we handle data and how your DATA will be used. You have the right to decide how your data is used. 



We may use your data for research, marketing, feedback and enquiries, and improve and provide our products and services. 

When you give your CONSENT for your DATA to be used you are able to withdraw your CONSENT at any time by emailing - you can also email to correct, or restrict how we use your DATA, 

You can unsubscribe from marketing by emailing UNSUBSCRIBE to 

What information we collect

We may collect your name, email address, telephone number, home address, age, for events and communications, as well as a delivery address (for purchases). 

On occasions we may collect sensitive data, such as your ethnic or racial background or sexual orientation for the purposes outlined above. However, we will require your CONSENT to PROCESS and use this DATA. 

What will the data be used for

Your DATA will allow us to communicate with you about events you have enquired about, or from time to time we may send you marketing communications. 

If you apply for a role at Cactus City Studio CIC via our website we will handle your DATA in line with this policy and our Recruitment Policy. 


We are only allowed to use your data with proper reason to do so:

To fulfil a contract we have with you;

With legitimate interest;

When you consent to it; or

 To comply with law.

A legitimate interest is when we have a business or commercial reason to use your DATA. This involves us making an assessment of when we can rely on our legitimate interests.

We have set out below how and why we may use your personal information and the legal basis we rely on. This is also where we tell you what our legitimate interests are.

  • We take information to communicate with you, check your identity, take payment, and provide products and services.

  • To run our business and pursue our legitimate interests, we use your information.

  • Our legitimate interests include keeping our records up to date, fulfilling our legal, compliance and contractual duties, working out which of our products and services may interest you, improving our site and apps, and services, developing new products and services, and telling you about them and conducting market research.

  • To comply with law, assess and uphold legal or contractual rights and claims, and for monitoring, auditing and training on compliance matters:

  • We keep records of your data.

  • We may monitor, and record call communications, including incoming and outgoing calls and emails, as well as contact made via social media. 

When the law requires us to process your data we will do so. This can include legal, compliance, regulatory and investigative purposes, including for government agencies and law enforcement. When you exercise your rights under data protection legislation, including when you ask to subscribe or unsubscribe from our marketing communications.

Data retention

We keep your data to enable us to fulfil our contract with you or to provide services, whilst you are an active user of our site, where required by law or to protect legal rights.

We always look to keep your data for the minimum time in line with data protection principles and our processes. For example, we keep:

  • DATA about our studio users

  • Records of payment information in line with tax law and audit requirements.

  • Customer feedback and correspondence with our customer services teams for up to 4 years afterwards, depending on the nature of the interaction and any applicable law, such as health and safety. This enables us to respond to any questions or complaints.

  • Information to maintain records according to rules that apply to us.

  • If you unsubscribe from marketing communications we keep a record of this request indefinitely to ensure we do not send you direct marketing again unless you ask us to do so. 

  • We may keep your data for longer if we cannot delete it for legal, regulatory or technical reasons.

Your Rights


You have rights in regards to your personal data. You can:

  • Ask us for a copy of the data we have about you

  • Ask for your DATA to be corrected

  • Ask for your DATA to be deleted

  • Ask us to limit or restrict the PROCESSING of your DATA. The right to object does not apply if we must process the data to meet a contractual or legal requirement.

  • Ask us to send you a copy in a structured digital format or ask for us to send it to another party.

Some rights, however, may be limited. We may be obliged by law or regulation to keep information. We must respect other people’s privacy as well, which means we may need to redact or remove information where it includes personal data about someone else, even if it is connected to your data. On occasion there may be a compelling legitimate interest to keep processing data.

If you want a copy of your data, to object to how we use your data, or ask us to delete it or restrict how we use it or, please see ‘Contact details’ below. To process a request from you, we may need to confirm your identity to ensure we’re accessing the right data.

You have a right to complain to an EU data protection authority. This can be where you live, work or where the matter occurred. In the UK, the authority is the Information Commissioner’s Office (the “ICO”). Our ICO registration number is ZB020488.

Contact Details 

To exercise any of your rights email

Recruitment Policy

We will handle your DATA in line with our Data Handling Policy. 

Cactus City Studio CIC is an equal opportunities employer. We may ask for SENSITIVE DATA when recruiting. This information won't be used in the interview and recruitment process, but we may use it in anonymised statistical data to monitor our status. 

When recruiting we will store your CV for 3 months from the date of receipt, or longer if we have not completed recruiting at this point. We won't keep your CV and personal details for any longer than necessary to complete the recruitment process. 

If you apply by the website we will STORE and PROCESS your DATA electronically. We may also STORE and PROCESS your DATA physically should you be invited for an interview. 

If you apply by post store we may store your DATA physically and PROCESS electronically in our database. 

Job offers are sent via a third party company, Citrus HR and will be accessible to senior members of staff only. 

Should you be successful in securing a role at Cactus City Studio CIC, then we will handle your DATA in line with our employment policies and in adherence with the relevant employment laws provided by our HR Company "Citrus HR." 

We will only keep your CV for longer than needed if you give us your CONSENT. You are able to withdraw your CONSENT at any time by emailing, or the member of the team who has handled your recruitment. 


Our position is to believe the reports that are referred to us, compassionately and without judgement. You are not responsible for the actions that have been done to you by others. 

We will not pass on or share any reports you have made to us with your CONSENT. We do not take feedback via social media channels unless it is a necessary reasonable adjustment. 

Our staff are regularly trained in matters of confidentiality and sensitivity. 

We have a wellness policy which allows employees to actively decide whether or not they want to be a part of difficult discussions without judgement, as well as to take breaks whenever needed, especially when dealing with triggering and difficult topics. 

Our primary goal is to provide a supportive environment within the music industry for all women and gender minorities. At this time we are not able to provide counselling. However, we are actively working towards being able to provide this in the future, with fundraising efforts dedicated to this cause.