Effective date: [INSERT EFFECTIVE DATE]
Last updated: 29/09/2026
Twisted Entertainment Limited respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, disclose and protect personal data when you:
- visit or use our website;
- contact us;
- request information, a quotation or our services;
- become a customer or supplier;
- subscribe to our marketing communications;
- interact with us through social media or other online channels; or
- otherwise provide personal data to us.
This Privacy Policy should be read alongside any other privacy information or fair-processing notices we may provide to you in specific circumstances.
1. Who we are
Twisted Entertainment Limited is the controller responsible for your personal data where we determine why and how your personal data is processed for our own business purposes.
Registered office:
Untitled Studio
Astor Road
Salford
M50 1BB
Principal place of business:
Untitled Studio
Astor Road
Salford
M50 1BB
Company registration number: 115 472 01
Telephone: 07946850413
You can contact us using the contact details published on our website or by post at the address above.
Data Protection Officer
Where we have appointed a Data Protection Officer, their contact details are:
Email: [email protected]
If we are not legally required to appoint a DPO and have not voluntarily appointed one, this section should instead identify the appropriate person responsible for data-protection enquiries.
2. The data protection laws that apply
We process personal data in accordance with applicable data-protection legislation, including the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (“PECR”), and other applicable UK data-protection and privacy legislation as amended from time to time.
Where applicable, we will also comply with other data-protection laws that apply to particular individuals, services or processing activities.
3. What personal data do we collect?
Depending on how you interact with us, we may collect the following categories of personal data.
Identity and contact information
This may include:
- name;
- job title;
- employer or organisation;
- postal address;
- email address;
- telephone number; and
- other contact details.
Business and enquiry information
This may include:
- information contained in enquiries;
- details of services you are interested in;
- information contained in correspondence;
- quotation and proposal information;
- customer and supplier information;
- project information; and
- information required to provide our services.
Technical and usage information
When you use our website, we may collect information such as:
- IP address;
- browser type and version;
- device type;
- operating system;
- approximate geographical location derived from technical information;
- referring website;
- pages visited;
- interactions with our website;
- date and time of visits;
- website navigation information; and
- information relating to website performance and security.
Some of this information may constitute personal data under applicable law.
Marketing information
Where applicable, we may process:
- marketing preferences;
- records of consent or objections;
- details of communications sent to you;
- responses to marketing communications;
- information about your interests in our services; and
- information used to segment or personalise marketing communications.
Information you provide to us
We may also process any personal data that you voluntarily provide when communicating with us, submitting forms, requesting services, participating in surveys, providing feedback or otherwise interacting with Twisted Entertainment Limited.
Please do not provide sensitive or special category personal data unless we specifically request it and explain why it is required.
4. How we collect personal data
We may collect personal data:
- directly from you;
- from your employer or organisation;
- when you submit a website form;
- when you communicate with us by email, telephone or post;
- when you use our website;
- through cookies and similar technologies, where permitted;
- from publicly available sources;
- from professional networking platforms or business directories;
- from referrals;
- from our customers, suppliers or business partners; and
- from third-party service providers where permitted by law.
Where we obtain personal data from another source, we will provide the information required by applicable data-protection law, including information about the source where required.
5. How we use your personal data
We may use personal data for the following purposes.
Responding to enquiries
We may process your personal data to:
- respond to enquiries;
- provide information about our services;
- arrange consultations or meetings;
- prepare quotations and proposals; and
- communicate with you about your enquiry.
Depending on the circumstances, the lawful basis may be:
- taking steps at your request before entering into a contract;
- performance of a contract;
- our legitimate interests in responding to business enquiries; or
- consent, where consent is specifically required.
Providing our services
We may use personal data to:
- deliver and manage services;
- communicate with customers;
- administer projects;
- provide technical support;
- maintain websites, systems and integrations;
- provide hosting or related services;
- administer accounts; and
- manage our relationship with customers.
Where appropriate, the lawful basis will be performance of a contract or our legitimate interests in administering and delivering our business services.
Administration and business management
We may process personal data to:
- manage our business;
- maintain business records;
- manage suppliers and professional advisers;
- process invoices and payments;
- maintain accounting records;
- manage insurance;
- obtain professional advice;
- establish, exercise or defend legal claims; and
- comply with legal and regulatory obligations.
The lawful basis may include compliance with a legal obligation, performance of a contract and our legitimate interests.
Website operation and security
We may process technical information to:
- operate and maintain our website;
- protect our website and systems;
- detect and prevent fraud, abuse and security incidents;
- investigate suspected security breaches;
- troubleshoot technical problems; and
- improve website performance.
Where appropriate, the lawful basis will be our legitimate interests in operating a secure and effective website or compliance with a legal obligation.
Analytics and website improvement
Where we use analytics or similar technologies, we may use information about website visitors to understand how our website is used and improve its performance and content.
Where the relevant technology requires consent under PECR, we will obtain consent before using it.
Marketing
We may use personal data to send information about our services, news, events and other marketing communications where permitted by law.
Where consent is required, we will only send marketing communications where you have provided valid consent.
Where PECR permits marketing without consent, we may rely on the applicable legal basis and requirements, including providing an appropriate opportunity to opt out.
You can object to direct marketing at any time and free of charge.
6. Lawful bases for processing
We will only process personal data where we have a lawful basis to do so.
Depending on the circumstances, these may include:
Consent
We may process personal data where you have given valid consent.
You can withdraw consent at any time. Withdrawal will not affect the lawfulness of processing carried out before withdrawal.
Contract
We may process personal data where this is necessary to enter into or perform a contract with you.
Legal obligation
We may process personal data where necessary to comply with a legal or regulatory obligation.
Legitimate interests
We may process personal data where necessary for our legitimate interests, or those of a third party, provided that those interests are not overridden by your interests, rights or freedoms.
Our legitimate interests may include:
- running and managing our business;
- providing and improving our services;
- communicating with customers and prospective customers;
- maintaining information-security measures;
- preventing fraud and misuse;
- managing business relationships;
- developing and improving our website and services;
- maintaining appropriate business records; and
- establishing, exercising or defending legal claims.
Where we rely on legitimate interests, we will consider whether the processing is necessary and balance our interests against your rights and freedoms.
Vital interests
In limited circumstances, we may process personal data where necessary to protect someone’s vital interests.
7. Special category and sensitive personal data
Special category personal data includes information such as health information, biometric information used for identification, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership and information concerning sex life or sexual orientation.
We do not generally seek to collect special category personal data through our website.
If we need to process special category personal data, we will only do so where permitted by law and where an appropriate additional condition under applicable data-protection legislation applies.
We will apply appropriate safeguards to such information.
8. Criminal offence data
Where applicable, we will only process information relating to criminal convictions or offences where permitted by applicable data-protection law and where the required conditions and safeguards are satisfied.
9. Who we share personal data with
We may share personal data where necessary for the purposes described in this Privacy Policy.
Recipients may include:
- employees and authorised personnel;
- group companies, where applicable;
- website hosting providers;
- IT and software providers;
- CRM providers;
- email and communications providers;
- analytics and website-performance providers;
- marketing service providers;
- payment and accounting providers;
- professional advisers;
- insurers;
- legal advisers;
- regulators and government authorities where legally required;
- suppliers and subcontractors providing services to us; and
- third parties where you have asked us to share information or have otherwise provided permission.
We require service providers processing personal data on our behalf to comply with applicable data-protection requirements and to implement appropriate security measures.
Where a third party acts as an independent controller, that organisation will be responsible for its own processing and privacy information.
10. Lead generation and third-party enquiries
Where you submit an enquiry relating to a product or service supplied by a third party and we are authorised to pass your details to that third party, we may share the information required to respond to your enquiry.
Where the third party acts as an independent data controller, it will be responsible for its subsequent processing of your personal data and should provide you with its own privacy information.
We will not share personal data for these purposes unless we have a lawful basis for doing so and, where required, appropriate consent.
11. When Twisted Entertainment Limited acts as a data processor
In some circumstances, Twisted Entertainment Limited may process personal data on behalf of a customer.
For example, a customer may instruct us to [INSERT RELEVANT PROCESSING ACTIVITIES, E.G. HOST, MANAGE, INTEGRATE, TRANSFER, ANALYSE OR OTHERWISE PROCESS] personal data contained within that customer’s [WEBSITE / CRM / BUSINESS SYSTEMS / OTHER].
In these circumstances, the customer may be the data controller and Twisted Entertainment Limited may act as a data processor.
The controller determines why the data is processed, while the processor processes the data on the controller’s documented instructions.
Where we act as a processor, our processing will be governed primarily by the relevant contract or data-processing agreement with the customer.
Individuals whose personal data is processed on behalf of our customers should normally contact the relevant customer/controller regarding their data-protection rights.
12. International transfers
Some of our service providers or technology providers may process personal data outside the United Kingdom.
Where personal data is transferred outside the UK, we will ensure that the transfer is made in accordance with applicable UK data-protection law.
Depending on the destination and circumstances, this may include:
- a UK adequacy regulation or other applicable adequacy decision;
- the UK International Data Transfer Agreement;
- the UK Addendum to the EU Standard Contractual Clauses;
- another lawful transfer mechanism; or
- another transfer permitted by applicable data-protection legislation.
Where required, we will undertake appropriate assessments and implement supplementary safeguards.
A current list of relevant international transfers and safeguards can be obtained by contacting us.
13. How long we keep personal data
We will retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including where necessary to satisfy legal, accounting, contractual, regulatory or reporting requirements.
Retention periods will depend on the type of information and why we hold it.
For example:
- enquiry information will normally be retained for as long as reasonably necessary to manage the enquiry and our business relationship;
- customer and contractual information will normally be retained for the duration of the relationship and for an appropriate period afterwards;
- financial and accounting records will be retained for the period required by applicable law;
- marketing information will be retained while there is an appropriate lawful basis for marketing, subject to objections, opt-outs and applicable retention procedures;
- consent and marketing preference records may be retained where necessary to demonstrate compliance; and
- information required for legal claims or regulatory purposes may be retained for as long as reasonably necessary for those purposes.
We periodically review the personal data we hold and securely delete or anonymise information when it is no longer required.
Backups may retain deleted information for a limited additional period where necessary for security, disaster recovery and business continuity.
14. Security
We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Depending on the circumstances, security measures may include:
- access controls;
- authentication;
- encryption;
- secure hosting;
- security monitoring;
- backups;
- staff training;
- contractual controls with suppliers;
- restricted access to personal data; and
- procedures for responding to security incidents.
No method of transmitting or storing information is completely secure. However, we will take reasonable and appropriate steps to protect the personal data entrusted to us.
15. Personal data breaches
We maintain procedures for identifying, assessing, containing, investigating and responding to personal-data breaches.
Where required by law, we will notify the Information Commissioner’s Office and/or affected individuals within the applicable statutory timescales.
16. Cookies and similar technologies
Our website uses cookies and similar technologies.
Cookies are small files or pieces of information stored on your device that can help websites operate, remember preferences and understand how visitors use them.
We distinguish between technologies that are strictly necessary for the operation or security of the website and technologies used for purposes such as analytics, advertising or personalisation.
Where consent is legally required, we will obtain consent before placing or using non-essential cookies or similar technologies.
You can manage your preferences through our cookie-consent mechanism.
Strictly necessary technologies
These may be used where necessary to:
- operate the website;
- provide requested functionality;
- maintain security;
- remember cookie preferences; or
- provide a service you have specifically requested.
Analytics technologies
Where used, analytics technologies help us understand website usage and improve our website and services.
Marketing/advertising technologies
Where used, marketing technologies may help us measure marketing campaigns, personalise content or understand interactions with our advertising.
These technologies will only be used where permitted by applicable law and, where required, following valid consent.
Cookie schedule
We will maintain a current cookie schedule identifying, for each cookie or similar technology:
- name;
- provider;
- purpose;
- first-party or third-party status;
- session or persistent status;
- duration; and
- whether consent is required.
This schedule should be made available to website visitors through the cookie settings or cookie policy.
17. Google Analytics and other third-party technologies
If we use Google Analytics or another analytics provider, the relevant configuration, cookies and data-sharing settings will be reviewed regularly.
Current analytics providers: Google Analytics
Where an analytics technology requires consent, it will not be activated until the required consent has been obtained.
Third-party providers may process information in accordance with their own privacy policies and applicable contractual arrangements.
18. Direct marketing
We may contact you about our services where permitted by applicable electronic-marketing and data-protection laws.
You can unsubscribe from marketing emails using the unsubscribe mechanism included in our communications or by contacting us.
You may also object to direct marketing at any time.
If you object to direct marketing, we will stop processing your personal data for that purpose, subject to limited circumstances permitted by law, such as retaining suppression records to ensure that we do not inadvertently contact you again.
19. Your data protection rights
Depending on the circumstances and applicable law, you may have the following rights:
Right of access
You can ask us for a copy of your personal data and certain information about how we process it.
Right to rectification
You can ask us to correct inaccurate or incomplete personal data.
Right to erasure
In certain circumstances, you can ask us to delete your personal data.
This is sometimes known as the “right to be forgotten”.
The right is not absolute and does not apply where we have a lawful reason to retain or process the information.
Right to restrict processing
In certain circumstances, you can ask us to restrict how we use your personal data.
Right to object
You may object to processing based on legitimate interests or certain other lawful bases where applicable.
You have an absolute right to object to the processing of your personal data for direct marketing purposes, including related profiling.
Right to data portability
In certain circumstances, you may have the right to receive personal data you have provided to us in a structured, commonly used and machine-readable format, or ask us to transmit it to another controller.
Right to withdraw consent
Where we rely on consent, you can withdraw that consent at any time.
Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Rights relating to automated decision-making
Where applicable, you may have rights concerning solely automated decision-making, including profiling, where the decision produces legal effects or similarly significant effects.
20. Automated decision-making and profiling
We may use information to understand customer or prospective-customer interests and to personalise marketing communications or website content.
This may include profiling for marketing purposes where permitted by law.
We do not intend to make solely automated decisions producing legal or similarly significant effects about you through our website.
If this changes, we will update this Privacy Policy and provide the additional information required by applicable law.
21. How to exercise your rights
You can exercise your data-protection rights by contacting us:
Email: [email protected]
Post:
Twisted Entertainment Limited
Untitled Studio
Astor Road
Salford
M50 1BB
Telephone: 07946850413
You do not normally have to pay a fee to exercise your rights.
We may need to request reasonable information to verify your identity before releasing personal data, particularly where this is necessary to protect against unauthorised disclosure.
We will normally respond to valid requests without undue delay and within the period required by applicable data-protection law.
Where legally permitted, the response period may be extended for complex or numerous requests. If we need to extend the response period, we will explain why.
22. Complaints
If you have concerns about how we have handled your personal data, we encourage you to contact us first so that we can investigate the issue.
Complaints can be sent to:
Twisted Entertainment Limited
Untitled Studio
Astor Road
Salford
M50 1BB
Email: [email protected]
You do not need to use a particular form of words or refer to specific legislation.
If you remain dissatisfied, you have the right to complain to the Information Commissioner’s Office (“ICO”), the UK’s independent regulator for data protection.
Information Commissioner’s Office
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113
Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
You may also have the right to complain to another data-protection supervisory authority where applicable, particularly if you live or work in the European Economic Area or another jurisdiction with applicable data-protection legislation.
23. Third-party websites
Our website may contain links to third-party websites, services or platforms.
We are not responsible for the privacy practices, security or content of third-party websites.
You should review the privacy information provided by those organisations before providing them with personal data.
24. Children’s privacy
Our services are intended primarily for BUSINESSES / ADULTS
We do not knowingly seek to collect personal data from children through our website.
If you believe that we have inadvertently collected personal data relating to a child, please contact us so that we can investigate and take appropriate action.
25. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements or data-processing practices.
The latest version will be published on our website.
Where changes are significant, we may take additional steps to bring them to your attention where appropriate.
We recommend reviewing this Privacy Policy periodically.
26. Contact us
If you have any questions about this Privacy Policy or our use of personal data, please contact:
Twisted Entertainment Limited
Untitled Studio
Astor Road
Salford
M50 1BB
Telephone: 07946850413
Email: [email protected]
Registered office:
Untitled Studio
Astor Road
Salford
M50 1BB
Company registration number: 115 472 01
ICO registration number: [INSERT ICO REGISTRATION NUMBER, IF APPLICABLE]