PRIVACY POLICY
Last updated 8th October 2026
1. What this Privacy Policy covers
We are NOTHING TO SEE HERE LTD (company number: 1732829) (“NOTHING TO SEE HERE”, “we”, “us”), a talent management agency. We are committed to being open and transparent about how we handle personal data.
For the purposes of UK data protection law, NOTHING TO SEE HERE is the “data controller” of personal data we collect through our website. This means we determine what personal data is collected through the website, how it is used and how it is protected, as described in this Privacy Policy (the “Website Privacy Policy”).
This Website Privacy Policy applies to personal data collected through your use of our website, including information submitted through website enquiry forms and, where enabled, information collected automatically through cookies, analytics and similar technologies.
Where we provide talent management services to talent and creators, the processing of personal data in connection with those services is governed by a separate Talent Privacy Policy, which is made available to the relevant individuals.
2. What personal data we collect
Our website is primarily informational. We do not operate user accounts. Depending on how you interact with our website, we may collect the following personal data:
o Name
o Email address
o Information you include in your enquiry
o Website usage and technical information, such as pages visited, interactions with our website, IP address and device information, where analytics tools are enabled
This information may be collected through:
o Contact and enquiry forms submitted through our website
o Website hosting and content management systems
o Website analytics and performance tools, including Google Analytics where enabled
o Essential cookies or similar technologies used to operate the website
Certain information collected through our website, such as your name, email address and the information included in an enquiry, may directly identify you. We use this information only for the purposes described in this Website Privacy Policy.
3. Why we collect your data
We only process your personal data where applicable law permits or requires it, including where the processing is necessary for the performance of our employment contract with you, where the processing is necessary to comply with a legal obligation that applies to us as your employer, for our legitimate interests or the legitimate interests of third parties, to protect your vital interests, or with your consent if applicable law requires consent. Where we rely on legitimate interests as our lawful basis, we have balanced those interests against your rights and freedoms.
We may process your personal data for the following legitimate business purposes and for the purposes of performing the employment contract with you:
Employee administration, including payroll and benefits administration, processing work related claims, conducting performance reviews and assessing qualifications for a job, gathering evidence for disciplinary action.
Business management, such as accounting and auditing.
Complying with applicable laws, including confirming entitlement to work in the UK.
Training, such as education, training, and development requirements.
Managing your employment relationship with us, including administering working arrangements, annual leave, performance, training, workplace matters and the end of your employment.
We will only process your personal data for the purposes we collected it for or for compatible purposes. If we need to process your personal data for an incompatible purpose, we will provide notice to you and, if required by law, seek your consent. We may process your personal data without your knowledge or consent where required by applicable law or regulation.
We may also process your personal data for our own legitimate interests, including for the following purposes:
To prevent fraud.
To ensure network and information security, including preventing unauthorized access to our computer and electronic communications systems and preventing malicious software distribution.
To manage, improve and support internal administration or business operations.
At present, we do not have any additional HR policies that we need to specifically reference in this Privacy Notice. We may update this Privacy Notice if relevant policies or processes are introduced.
4. Our lawful bases for processing
We only use your personal data where we have a valid legal reason to do so under applicable data protection laws. Our primary lawful basis for using information submitted through our website enquiry form is our legitimate interests in responding to enquiries and managing our business communications. Where we use non-essential analytics cookies or similar technologies, we will rely on consent where required by applicable law. We may also process personal data where necessary to comply with a legal obligation.
5. Sharing your data
We may share your personal data with carefully selected third parties where this is necessary for our operations. We never sell your personal data. We may share your information with:
o Service providers that support the operation of our website, including website hosting and platform providers
o Analytics and website performance providers, including Google Analytics where enabled
o Professional advisers or other service providers where reasonably necessary for the operation of our business or to comply with our legal obligations
6. How long we keep your data for
We keep your personal data only for as long as reasonably necessary for the purposes for which it was collected, including responding to and managing enquiries and meeting any legal, accounting or reporting requirements. In deciding how long to retain information, we consider its nature, the purposes for which it is processed and any applicable legal requirements. Once personal data is no longer required, we will delete it, anonymise it or store it in a form that no longer identifies you.
7. Data security
We take the security of your personal data seriously and use appropriate and reasonable measures to protect it from loss, misuse, unauthorised access, alteration or disclosure. These measures, including the secure storage of data and associated tools, are designed to provide a level of security appropriate to the nature of the data we hold, and the risks involved in our processing activities.
8. Cookies and analytics
Our website may use cookies or similar technologies to function properly and, where enabled, to understand how visitors interact with the site. Cookies are small text files placed on your device when you visit a website. Some are essential, while others help us understand and improve website performance and user experience.
We use essential cookies where necessary for the website to function securely and correctly. These cookies do not require consent where they are strictly necessary for the operation of the website.
We may use analytics cookies, including Google Analytics, to understand how visitors use our website and improve website performance. Where required by applicable law, we will ask for your consent before placing non-essential analytics cookies. You can manage or reject non-essential cookies through any cookie controls made available on our website and can also control cookies through your browser settings.
9. Your rights
If you are based in the United Kingdom (UK) or the European Economic Area (EEA), you have certain rights in respect of your personal data. In certain circumstances, you have the right to:
o Request access to the personal data we hold about you.
o Request correction of any inaccurate or incomplete personal data.
o Request deletion of your personal data in certain circumstances.
o Request that we restrict certain processing operations.
o Request a copy of your personal data in a portable format (the right to data portability).
o Withdraw your consent at any time where we rely on consent as the legal basis for processing.
o Request human review of certain decisions based solely on automated processing and object to profiling where applicable.
o Lodge a complaint with the relevant data protection supervisory authority if you believe your rights have been infringed.
If you want to exercise any of these rights, please contact us using the email address set out in Section 12 below. We may need to verify your identity before responding.
10. Marketing
We do not currently send marketing communications by email or SMS to website users. If this changes in the future, we will ensure that any marketing communications are sent in accordance with applicable data protection laws and that appropriate opt-out mechanisms are provided.
11. International transfers
Some of the third-party service providers we use to operate our website, including analytics providers such as Google Analytics where enabled, may process or store personal data outside the UK.
Where personal data is transferred outside the UK, we will take appropriate steps to ensure it is protected in accordance with applicable data protection laws. Depending on the destination country and circumstances of the transfer, this may include relying on UK adequacy regulations or implementing appropriate contractual safeguards, such as the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses (SCCs).
12. Contact us
If you have questions, concerns or complaints regarding this Website Privacy Policy or our use of your personal data, you can contact us by emailing info@thereisnothingtoseehere.com.
NOTHING TO SEE HERE will acknowledge any complaint within 30 days of receipt and will investigate and respond without undue delay. If you remain dissatisfied, you have the right to complain to the Information Commissioner’s Office (ICO).
We may update this Website Privacy Policy from time to time to reflect changes in our activities, legal requirements or how we handle personal data. When we make changes, we will update the “Last updated” date at the top of this page. If the changes are significant, we may also notify you directly or through our usual communication channels.
