Privacy policy

How we handle personal information from enquiries, clients, freelancers and visitors to this website.

Exell Film Ltd, trading as EXF.STUDIO. Company number 12112829. Last updated 26 October 2026.

Who we are

This website is run by Exell Film Ltd, trading as EXF.STUDIO ("EXF", "we", "us"). We are a company registered in England and Wales under number 12112829. Our registered office is c/o Russell & Co Partnership LLP, Station Approach, East Horsley, Surrey KT24 6QX and our studio is at 16 Red Lion Square, London WC1R 4QH.

We are the data controller for the personal information described in this policy. If you have a question about it, email josh.e@exf.studio.

What we collect

Enquiries: your name, work email, company, phone number and anything you tell us in a brief, an email or a call.
Bookings: the name, email and time you give when you book a call with us.
Clients: contact details for the people we work with, plus contracts, invoices and project correspondence.
Freelancers and crew: contact details, rates, availability, bank details for payment, and any information needed for insurance or safety on set.
Website: our hosting provider records basic technical data (such as IP address, browser and pages requested) to keep the site running and secure. We do not run advertising trackers on this site.

People who appear in our films and photographs are covered by our separate contributor privacy notice.

Why we use it, and our lawful basis

To reply to enquiries and prepare proposals: legitimate interests, or steps before entering a contract.
To deliver projects, pay people and keep accounts: performance of a contract and legal obligations such as tax records.
To keep people safe on productions: legal obligations and legitimate interests.
To send occasional updates about our work to business contacts: legitimate interests. Every email has an easy way to opt out.
To run and secure this website: legitimate interests.

Who we share it with

We share personal information only where we need to, and with providers who act on our instructions. These include our website host and form provider (Netlify), email and file storage providers, our calendar booking tool, our accountants, insurers and professional advisers. On productions we share necessary details with crew, locations and clients. We never sell personal information.

International transfers

Some of our providers store data outside the UK, including in the United States. Where they do, we rely on UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or the UK International Data Transfer Agreement or Addendum to protect it.

How long we keep it

Enquiries that do not become projects: up to 2 years, then deleted.
Client and project records: 7 years after the project ends, for tax and legal reasons.
Freelancer records: for as long as we work together, then 7 years for payment records.

Your rights

You can ask to see the personal information we hold about you, correct it, delete it, restrict or object to how we use it, or receive a copy to move elsewhere. Email josh.e@exf.studio and we will respond within one month.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put it right first.

Changes

We will update this page if anything changes. Last updated 26 October 2026.