Privacy policy.

1. Important information and who we are

Under data protection law, we act as the data controller, meaning we decide how and why your personal data is processed.

Website: https://nickjohnson.tv

Contact email: privacy@nickjohnson.tv

Postal address: [Insert trading or registered business address]

If you have any questions regarding this policy or wish to exercise any of your legal rights, please contact us using the details above.

2. What personal data we collect

Personal data refers to any information about an individual from which that person can be directly or indirectly identified. We collect and process several distinct categories of information:

• Identity and contact data: your full name, email address, username, and any details you provide when you register an account or subscribe to newsletters and video updates.
• Behavioural and interaction data: the videos you watch, viewing duration, links clicked, content engagement, scroll depth, and interaction heatmaps.
• Technical data: your IP address, browser type and version, time zone setting, operating system, device identifiers, and platform configuration.
• Marketing and communications data: your stated preferences for receiving communications and updates from us.

3. How we track and map your activity

A core function of nickjohnson.tv involves monitoring and analysing how users navigate and consume content across the platform.

User activity mapping: when you browse the website or log in as a subscriber, we use automated tracking scripts, server logs and analytics software to map your pathway through our pages. This records video player interactions (play, pause, completion rate and rewatches), page navigation paths and dwell times, and user interface engagement to understand which features deliver value.

Cookies and similar technologies: we use first-party and third-party cookies, tracking pixels and local storage tags to distinguish you from other visitors, remember your subscriber preferences and compile statistical reports on activity. You can configure your browser to refuse non-essential cookies, though doing so may prevent certain video streaming features and interactive tools from functioning properly.

4. Why we process your data (lawful bases)

Under the UK GDPR, we must have a valid legal justification to handle your personal information. We rely on the following bases:

• Subscriber registration and account management (identity, contact) — contractual necessity: delivering the subscription service you requested.
• User activity mapping and platform optimisation (behavioural, technical) — legitimate interests: analysing viewer trends, improving production quality and ensuring system stability.
• Personalised content recommendations (behavioural, identity) — legitimate interests or consent: tailoring video delivery to audience interests.
• Direct email marketing (identity, contact) — consent: freely given permission when opting into subscriber newsletters, withdrawable at any time.
• Platform security and fraud prevention (technical, behavioural) — legal obligation and legitimate interests: securing user accounts and stopping malicious traffic.

5. Sharing your personal data

We never sell your personal information. We may share your data with trusted third-party service providers who assist our operations under binding data processing agreements:

• Cloud hosting and server infrastructure providers.
• Video hosting and content delivery network (CDN) platforms.
• Analytics, user tracking and heatmap services.
• Email service platforms used to dispatch updates and notifications.

6. International data transfers

If personal data is transferred outside the United Kingdom or the European Economic Area (EEA), we ensure equivalent protections are maintained by using countries deemed to provide an adequate level of protection by the relevant authorities, or Standard Contractual Clauses (SCCs) and the UK International Data Transfer Agreement (IDTA), requiring recipients to protect data to British standards.

7. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was gathered, including satisfying legal, accounting or reporting obligations.

• Active subscriber data: maintained throughout the duration of your active subscription.
• Tracked activity and behavioural logs: anonymised or deleted after [insert period, e.g. 24 months] to identify macro viewing patterns without profiling identifiable individuals indefinitely.
• Account deletion: should you cancel your subscription or request account closure, personal identifiers are removed from our primary databases within 30 days.

8. Data security

We have implemented robust technical and organisational security measures to safeguard your information from unauthorised access, accidental loss, alteration or disclosure. Access to your personal data is restricted to employees, contractors and partners with a genuine business need to know.

9. Your legal rights under UK GDPR

Under data protection laws, you possess substantial statutory rights regarding your personal information:

• Right of access: request a copy of the personal information we hold about you.
• Right to rectification: request correction of inaccurate or incomplete records.
• Right to erasure: request deletion of your personal data where there is no compelling legal reason for continued processing.
• Right to object: object to processing based on legitimate interests or direct marketing.
• Right to restrict processing: ask us to suspend the processing of your data in specific circumstances.
• Right to data portability: request transfer of your data to you or a third party in a structured, machine-readable format.
• Right to withdraw consent: where processing depends on consent, you may revoke that consent at any time.

10. Regulatory oversight and complaints

You have the right to lodge a complaint with the UK supervisory authority for data protection: the Information Commissioner's Office (ICO), https://ico.org.uk, helpline 0303 123 1113.

We would appreciate the opportunity to address any concerns directly before you contact the regulator, so please reach out to us in the first instance.