top of page

PRIVACY POLICY - UK GDPR

Last updated: 1 January 2026

This Privacy Policy explains how WonderLust Ltd  (“we”, “us”, “our”) collects, uses, stores and protects your personal data when you engage our services.
 

1) Who we are (Data Controller)

WonderLust Ltd is the “data controller” for the personal data we process.
Contact email: hellomoviementor@gmail.com
 

2) Personal data we collect

We may collect and process the following categories of personal data:

(a) Information you provide

  • Name, email, phone number, location/time zone

  • Professional information (CV, portfolio links, credits, LinkedIn)

  • Project-related information you share (scripts, decks, treatments, budgets, schedules, pitch materials)

  • Messages and communications with us

  • Booking and purchase details

(b) Payment data

Payments are typically processed by third-party payment providers. We do not normally store full payment card details. We may receive limited transaction records (e.g., payment confirmation, invoice details).

(c) Website usage data

  • IP address, device/browser type, pages visited, referral source

  • Cookies and analytics data (see Cookie Policy)
     

3) How we use your data (purposes)

We use your personal data to:

  • provide and deliver mentoring/consultancy services;

  • manage bookings, scheduling, client administration;

  • communicate with you about sessions, deliverables and updates;

  • issue invoices and manage payments;

  • maintain records of engagements and deliverables;

  • improve our website and services;

  • comply with legal obligations;

  • protect our legal rights and prevent fraud/abuse.
     

4) Our lawful bases for processing

Under UK GDPR, we rely on the following lawful bases:

  • Contract: to provide services you book/purchase.

  • Legitimate interests: to operate and improve our business, maintain records, prevent fraud, and protect legal rights (balanced against your rights).

  • Legal obligation: to comply with tax, accounting and regulatory requirements.

  • Consent: where required (e.g., certain marketing communications and non-essential cookies).
     

5) Marketing communications

We may send service-related communications (administrative emails) as part of delivering the services.

For marketing (e.g., newsletters), we will only send such communications where we have your consent or another lawful basis. You can opt out at any time by using the unsubscribe link or emailing hello@wonderlustpictures.co.uk.
 

6) Sharing your data

We may share personal data with:

  • Service providers we use to run our business (e.g., scheduling, email, cloud storage, document tools, analytics, video conferencing).

  • Payment processors for billing and transactions.

  • Professional advisers (accountants, lawyers) where necessary.

  • Authorities if required by law or to enforce our legal rights.

We do not sell your personal data.
 

7) International transfers

Some third-party providers may process data outside the UK. Where international transfers occur, we ensure appropriate safeguards are in place (e.g., adequacy regulations, standard contractual clauses, or equivalent safeguards).
 

8) Data retention

We retain personal data only as long as necessary for the purposes set out above, including:

  • client records and invoices: typically six years for tax/accounting compliance (or longer if legally required);

  • project materials and communications: retained for the duration of the engagement and a reasonable period afterwards, unless you request deletion and we are not legally required to retain it.

You may request deletion of certain materials; we will comply where we can, subject to legal obligations.
 

9) Security

We take reasonable technical and organisational measures to protect your data. However, no method of internet transmission or storage is completely secure. You share information with us at your own risk.
 

10) Your rights

You have rights under UK GDPR, including:

  • access to your personal data;

  • correction of inaccurate data;

  • deletion (in certain circumstances);

  • restriction of processing;

  • data portability (where applicable);

  • objection to processing (in certain circumstances);

  • withdrawing consent (where processing is based on consent);

  • lodging a complaint with the UK Information Commissioner’s Office (ICO).

To exercise your rights, contact: hello@wonderlustpictures.co.uk.
 

11) Children’s data

Our services are intended for adults. If you are under 18, you must have a parent/guardian’s permission to contact us or purchase services. We do not knowingly collect data from children without appropriate consent.
 

12) Changes to this policy

We may update this policy from time to time. The updated version will be posted on our website with a revised “Last updated” date.

bottom of page