Privacy Policy



Hello. This is our Privacy Notice. Please take some time to read it through.

Blackstar London is required under the General Data Protection Regulation 2016/679 (the “GDPR”) to notify you of how it collects and uses your personal data. 

This Privacy Notice sets out the basis upon which we collect personal data from you, or which you may provide it to us, why we need it and how we will use it, in respect of your relationship with us as a visitor to our website, or as a client of ours, or as a consultant of Blackstar London.  It also sets out what measures we have in place to ensure your data is safe.


In this Privacy Notice

Blackstar” or “we” or “us” means Blackstar London Limited (company number 08002552) registered office address Osborn Works Unit 4a, Rutland Way, Sheffield, S3 8DG, trading office address 49 Brixton Station Rd, Brixton, London, J4Y 0B5 

You” means any individual, business / organisation or consultant whose personal data is controlled and / or processed by Blackstar. 



Blackstar acts as a "data controller” and “data processor”, which means that we are responsible for deciding how to hold and use personal data about you.   

We will take all reasonably necessary steps to ensure that your data is treated securely and in accordance with the GDPR, and also in accordance with the Privacy & Electronic Communications Regulations 2003 (“PECR”).

Lawful bases for controlling and processing your Personal Data

Under GDPR, Blackstar must identify a lawful basis for controlling and / or processing of your personal data.  We have identified the following bases:

  1. Performance of a contract agreed project and / or provision of creative, digital or social media services for you. If you are a business / organisation or consultant or other individual with a direct contractual relationship with Blackstar, we are entitled to control and / or process the personal data we require in order to fulfil our obligations to you under such contract or requested project for creative, digital and social media services. 


  1. The legitimate interests of Blackstar or a third party:  Blackstar may control and / or process your personal data on the lawful basis that it is in its legitimate interests and/or those of a third party to do so.  This will primarily apply when Blackstar provides services to its clients and/or in the management of its business.  The proper performance of its role in providing creative, digital and social media services to its clients, the effective management of its business and compliance with Blackstar’s legal obligations includes:


What Personal Data do we collect from you?  

Blackstar may collect, store, and use personal data about you, which will vary in nature depending on the basis of our relationship with you e.g. as a creative, digital and social media agency and supplier of services to you, or as a business where you are engaged as a consultant to us. 

The types of personal data that we may collect, store and use are:

such as your interest in working with us, your name, title, home and work addresses, telephone numbers, email addresses, emergency contact information. If you contact us online, we may keep a record of your email or other correspondence, and if you call us by telephone, we may record pertinent information relating to business opportunities, such as budget information and sign off processes regarding the call for account management reasons. 

such as date of birth, gender, nationality. 

such as your driving licence, passport, utility bill(s), electronic signatures, photographs, videos or voice. 

such as bank account details, VAT numbers 

such as your career history including work /engagement/project records, job titles, work history, details of the projects / engagements you are or have been involved in, including contracts. 

such as a contract of business or consultancy, copies of right to work documentation, references, samples of work, information included in a CV or cover letter or interview for a consultancy role with us, or material provided to us for use in any of our digital and social media services (in any form including without limitation, images, video and documents). 


How do we obtain your Personal Data?

Most of the personal data we collect, store and use about you will be provided directly by you (or third parties authorised on your behalf) including, but not limited to: 


Why does Blackstar need to collect and use your Personal Data?


IF YOU ARE CLIENT, the controlling and / or processing of your personal data will be necessary to fulfil our obligations to you as your creative, digital and social media agency and supplier of services pursuant to our contract for services with you  or to enable us to take steps to provide our creative, digital and social media services to a business / organisation at your request prior to agreeing its terms of business, including but not limited to in the following ways:

     to provide creative, digital and social media services to you. 


     for your business requirements



     website or agreed publicity sent to third party industry publications so that Blackstar can   

     demonstrate its work for future prospective clients.



     of an agreed scope of work, to deduct our costs and to account to you.




      one another. 


















IF YOU ARE A CONSULTANT, the controlling and / or processing of your personal data will be necessary to fulfil Blackstar’s obligations to you as your contracting partner including, without limitation:

      and third parties which may contain your personal data and disclosing such 

      correspondence and documents to various parties in furtherance of our mutual   



Change of purpose 

We will only use your personal data for those situations listed above, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.  If Blackstar needs to use your personal data for an unrelated purpose, you will be notified, and we will explain the legal basis which allows us to do so. 


Collection and Processing of your personal data – some points.

  1. We may disclose your personal data to any member of our team.


  1. When you give your personal data to Blackstar, some of the personal data you provide will need to be given to and processed and stored by relevant third parties and may also be shared with other companies for the purposes of providing services to you (or directly to your fans, followers, or customers if applicable) including but not limited to, the operation and maintenance of social media pages and websites. Blackstar requires such third parties to respect the security of your data and to treat it in accordance with GDPR and we will not share or use your personal data in a way you would not expect under our contractual relationship with you. 


  1. Some of these third parties may be based outside of the EEA.


  1. When we transfer your information outside of the EEA in this way, we take steps to ensure that your personal information will be subject to one or more appropriate safeguards set out in data protection law including imposing contractual obligations on the recipient of your personal information or ensuring that the recipients are subscribed to ‘international frameworks’ that aim to ensure adequate protection, such as the US ‘Privacy Shield’ scheme.


  1. These parties can be categorised, but are not limited to, those third parties set out in the table below.


Recipient / Relationship to us Industry Sector (& subsector) Location travel
Agency Clients Media (marketing, advertising & PR departments of various industries including but not limited to music and entertainment services sectors)EEA & USA 
Cloud based hosting & storage services, marketing platforms, social & digital & email marketing tools & technologies, business management & file management platforms & tools, software system providers including database, email and document management providers. IT (Cloud Services)EEA & USA
Social Media PlatformsMedia (Social Media)EEA & USA


  1. Blackstar will seek and secure your explicit consent for transferring your personal data outside the EU in circumstances where (a) the transfer is not necessary for the fulfilment of our obligations to you under any relevant agreement; (b) the EU Commission has not made an adequacy decision in respect of the country in which the recipient of the personal data is based; (c) the transfer of the personal data is not subject to appropriate safeguards as set out in Article 46 of the GDPR; (d) there are no binding corporate rules in place; or (e) no other derogation is applicable.


Sensitive Personal Data  

Some of data held by us may fall within a so-called "special category" of more sensitive personal data such as: (a) information about your race or ethnicity, religious beliefs, sexual orientation and political opinions; (b) information about your health, including any medical condition, health and sickness records; (c) genetic information and biometric data. 

The legal bases for Blackstar collecting, storing and/ or using more sensitive personal data and the circumstances in which this is permitted are:


Keeping your Personal Data secure

  1. The transmission of information via the internet is not completely secure, and although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted, therefore any transmission is at your own risk.  


  1. Blackstar has put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. 


  1. We limit access to your personal data to our consultants and contractors and other third parties who have a business need to know. They will only process your personal data on Blackstar’s instructions.


  1. All the information you provide to us is stored securely on cloud-based servers via central / shared systems or under Blackstar consultant password protected email accounts and file systems provided by Google services, whereby each user has to enter a two factor authentication for added security.


  1. Email accounts and IT systems are password protected and Blackstar consultants (and no one else) have access to those systems and accounts to which we have given them specific authorisation. 


  1. Blackstar has put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where it is legally required to do so. 


  1. Blackstar provides creative, digital and social media services for businesses / organisations, which include, but are not limited to, social media pages and websites which may contain external links or use of third parties. If you follow a link or otherwise use any of these other websites or third parties, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies or for these third party services. Please check these policies before you submit any personal data to these websites.


  1. We may need to request specific information from you to help confirm your identity and ensure your right to access the information (or to exercise any of your other rights – see below). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.


Personal Data retention  

  1. We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of our contractual relationship with you and for satisfying any business, legal, accounting, or reporting requirements.  Please refer to our Data Retention & Erasure Policy.


  1. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we control and / or processes your personal data and whether or not we can achieve those purposes through other means.  


  1. In some circumstances Blackstar may anonymise your personal data so that it can no longer be associated with you, in which case we may use such information without further notice to you.


  1. Notwithstanding that you may no longer be a client or consultant of Blackstar, we may retain your personal data, but for no more than the time required for the specific purposes for which it is controlled and / or processed by us, as set out in this Privacy Notice or where required by applicable laws and regulations.  We will ensure that such data will continue to be treated in accordance with this Privacy Notice. 



Please refer to our Cookie Policy (insert link).


Your duty to us

It is important that the personal data we hold about you is accurate and current. Therefore, please keep us informed if your personal data changes so that we can update our records.  Please inform your usual contact at Blackstar, or email us at [ ].    

Your rights regarding your Personal Data 

You have the right to:  

  1. Request access to your personal data. You are entitled to receive a copy of the personal data we hold about you and to check that we are in fact lawfully processing it. 


  1. Request correction of the personal data that we hold about you. 


  1. Request erasure of your personal data. You may ask us to delete or remove personal data where there is no good reason for us to continuing to process it. 


  1. Object to us controlling and / or processing your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to controlling and / or processing on this ground. 


  1. Object to us controlling and / or processing your personal data for direct marketing purposes.


  1. Request that we suspend controlling and/ or processing of your personal data in certain circumstances such as you want us to establish to you the reason for processing it.


  1. Request the transfer of your personal data to another party. 

If you wish to do any of the above, please email us your request to [ ].  

You will not normally have to pay a fee to access your personal data (or to exercise any of the other rights).  However, we may charge a reasonable fee if your request for access appears to be unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances. 

You do not have to share your personal data with us. However, if you fail to provide certain information when requested, we may not be able to honour our obligations to you, whether contractual, legal or otherwise, such as paying you if you are a consultant or, if you are a client, providing creative, digital and social media services to you. 


Your right to withdraw consent

Where you may have provided your consent to the collection, controlling, processing and transfer of your personal data for a specific purpose, you have the right to withdraw your consent for that specific purpose at any time. 

To withdraw your consent, please contact your usual contact at Blackstar or email [ ]. Once we receive notification that you have withdrawn your consent, we will no longer control and / or process your personal data for the purpose or purposes you originally agreed to, unless we have another legal ground for doing so in law. 


Updates to this Privacy Notice

We may change, revise, update this Privacy Notice at any time.  We may also notify you in other ways from time to time about the controlling and / or processing of your personal data.  


Questions, concerns, complaints

If you have any questions about this Privacy Notice, or questions or concerns or complaints about the way Blackstar controls and / or processes your data, please email us at [ ]. 

You may also address a complaint to the Information Commissioner, who can be contacted the following address:  Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF or at or on Helpline number 0303 123 1113.


Thank you!




This Privacy Notice was last updated in November 2019.