Privacy Policy
How Mistry Arts collects, uses and protects your information.
Last updated: 25 August 2026
Who we are
This website is operated by Mistry Arts Ltd, a company registered in England and Wales (Company No. 13861026, VAT No. GB403601938). Registered office: 128 City Road, London, EC1V 2NX, United Kingdom. Mistry Arts Ltd is the data controller for the personal data described in this policy.
For any question about this policy or your personal data, contact: contact@niteshmistry.co.uk or +44 (0)7383 282848.
What information is collected
Personal data is only collected when you choose to provide it — by filling in the Start a Project form, or by emailing, calling or messaging directly. This may include:
- Name, email address and phone number
- Company or organisation name
- Details of the project you're enquiring about, including budget range and service required
- Any other information you choose to include in a message
If a project goes ahead, this may extend to invoicing and correspondence details needed to deliver and be paid for the work. Browsing the site without submitting a form or sending a message does not share any personal data, and no account, login or payment details are collected through this website.
Why this information is used, and on what basis
UK GDPR requires a lawful basis for each use of personal data. Here's what's used and why:
- Responding to your enquiry — legitimate interests (running a freelance video and photography business, and answering the enquiries it receives).
- Discussing, quoting and delivering a project you go ahead with — performance of a contract, or steps taken at your request before entering one.
- Invoicing, bookkeeping and tax records — legal obligation (UK company and tax law requires these records to be kept).
Information is never sold, rented, or used for anything beyond these purposes. There is currently no email newsletter or marketing list on this site, so no marketing communications are sent unless separately agreed with you.
Providing your name and contact details is necessary for an enquiry to be answered — without them, a reply isn't possible. You're never obliged to provide anything beyond what's needed to respond to your specific enquiry.
Who this information is shared with
Personal data is shared only where it's genuinely needed to run the business:
- Web3Forms — processes and forwards Start a Project form submissions by email; see web3forms.com/privacy.
- Cloud storage and backup services — used to store and back up project files (footage, images, audio) during and after production.
- Editing and post-production software — used to process footage and images, some of which may include AI-assisted features such as noise reduction, upscaling or automated transcription.
- Accountancy or bookkeeping support, where used, for invoicing and tax purposes.
These are all processors acting on Mistry Arts Ltd's instructions, not independent recipients of your data — none of them are permitted to use it for their own purposes, and it's never sold to anyone.
International transfers
Some of the services above — particularly cloud storage and editing software — may store or process data outside the UK, including in the United States. Where this happens, it's covered by one of the safeguards UK GDPR recognises: a UK adequacy decision, the UK International Data Transfer Agreement, or equivalent standard contractual clauses used by the provider.
How long information is kept
Enquiry details that don't lead to a booking are kept only for as long as needed to respond and follow up, then deleted. Where a project goes ahead, invoicing and accounting records are kept for at least 6 years from the end of the relevant financial year, in line with UK company and HMRC record-keeping requirements. Project files (footage, images, audio) are kept for up to 6 years from project completion, to support delivery, revisions and any future licensing needs, after which they're archived or securely deleted.
How enquiries are processed
The Start a Project form is handled by Web3Forms, a third-party form-processing service that forwards submissions by email — it does not store form data itself beyond what's needed to deliver that email.
Cookies & analytics
This site does not currently run any analytics, advertising or tracking scripts, and does not set cookies of its own. Video content on the Portfolio page is embedded using YouTube's privacy-enhanced mode, which does not set cookies until a video is actually played — once you press play, YouTube/Google may set their own cookies in line with their privacy policy.
Filming, photography & personal data
Photographs and video recordings of identifiable people can count as personal data under UK GDPR. For commissioned project work, the client is responsible for obtaining any necessary permissions or consent from people who appear in the footage — including employees, contributors or members of the public — unless otherwise agreed in writing. When filming in public spaces, people may appear incidentally in the background; consent isn't generally required for this, but signage or notice will be used where appropriate.
Automated decision-making
No automated decision-making or profiling takes place using your personal data. Every enquiry is read and responded to by Nitesh personally.
Your rights
Under UK GDPR, you have the right to:
- Ask what personal data is held about you, and get a copy of it
- Have inaccurate data corrected
- Ask for data to be deleted, in certain circumstances
- Object to, or ask to restrict, how your data is used
- Receive certain data in a portable format, where it's been provided to enable a contract
- Withdraw consent at any time, where consent is the basis for processing
To exercise any of these rights, email contact@niteshmistry.co.uk. If you believe your data hasn't been handled properly, you also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).
Changes to this policy
This policy may be updated from time to time to reflect how the site or business actually operates. The latest version will always be on this page.