Last updated: 12 August 2026
This privacy notice explains how Tomorrow’s Creative Ltd (“Tomorrow’s Creative”, “we”, “us” or “our”) collects and uses personal information when you visit our website, contact us, subscribe to our mailing list, or work with us.
1. Who we are
Tomorrow’s Creative Ltd is the controller of the personal information described in this notice. Our company number is 09718382 and our VAT number is 219885562.
Privacy contact: info@tomorrowscreative.com
Telephone: 0204 572 3207
Correspondence address: 4th Floor, Silverstream House, 45 Fitzroy Street, Fitzrovia, London W1T 6EB
2. Information we collect
Depending on how you interact with us, we may collect:
- Enquiry information, including your name, email address, telephone number, company, project details, budget, deadlines and anything you include in a message or file.
- Client, supplier and freelancer information, including contact details, contracts, invoices, payment records, production information, CVs, showreels and professional correspondence.
- Mailing-list information, including your first name, email address, consent choice, sign-up time and unsubscribe status.
- Technical information, such as IP address, browser and device details, approximate location, referral page, server logs and security events.
- Analytics information, such as pages viewed, interactions and visit duration, but only where the required consent has been given.
Please do not send us special-category information (for example, health, biometric, political or religious information) unless it is necessary for a project and we have agreed an appropriate way to handle it.
3. How we use information and our lawful bases
- To respond to enquiries, prepare proposals and take steps before a contract: taking steps at your request before entering a contract and our legitimate interests in developing our business.
- To deliver productions and manage client, supplier and freelancer relationships: performance of a contract, our legitimate interests and legal obligations.
- To send our mailing list: your consent. You can withdraw consent at any time by using the unsubscribe link in an email or contacting us.
- To operate, secure and improve the website: our legitimate interests in running a secure and effective website and, where required, your consent for optional cookies.
- To measure website use with Google Analytics: your consent. Analytics remains subject to your cookie choice.
- To maintain tax, accounting and legal records or deal with disputes: our legal obligations and legitimate interests.
Where we rely on legitimate interests, we consider the impact on your rights and do not use that basis where your interests override ours.
4. Mailing list and marketing
When you join our mailing list, we use your first name and email address to send occasional production insights, company news and offers. Joining is optional and is not a condition of making an enquiry. Every marketing email will include an unsubscribe method. We may retain a minimal suppression record after you unsubscribe so we can respect your choice.
We do not buy email lists and we do not sell your personal information.
5. Cookies, Analytics and embedded media
Necessary cookies support core site functions and security. Optional statistics and marketing technologies are used only in line with the choice made in our cookie banner. Google Analytics is implemented through Google Site Kit with consent controls. Pages may also contain Vimeo, YouTube or Instagram content; these services can receive information when their content is allowed to load.
You can accept, reject or choose individual categories in the banner, and change your choice later using the Cookie settings control displayed on the site. Full details are in our Cookie Policy (UK).
6. Who we share information with
We use trusted service providers only where needed to operate our business and website. These may include:
- website hosting, security, content-delivery and backup providers, including WordPress, LiteSpeed/QUIC.cloud and UpdraftPlus-related services;
- website form and popup tools, including WPZOOM Forms and Popup Maker;
- Google services, including Site Kit and Google Analytics, where consent applies;
- video and social platforms such as Vimeo, YouTube and Instagram, where their content is enabled;
- email, communications, CRM, project-management, accounting and professional-adviser services;
- production partners, crew, freelancers, venues and suppliers where necessary for a project; and
- regulators, courts, law-enforcement bodies or other parties where disclosure is required by law or necessary to protect legal rights.
Our suppliers act under their own privacy terms or under contracts requiring appropriate data protection. We do not share personal information for another organisation’s unrelated marketing.
7. International transfers
Some suppliers may process information outside the UK. Where UK data-protection law requires it, we use an adequacy decision, the UK International Data Transfer Agreement or UK Addendum, or another approved safeguard. You can contact us for more information about the safeguards relevant to your information.
8. How long we keep information
- Enquiries and prospective-client records: normally up to 24 months after the last meaningful contact, unless the enquiry becomes a client relationship or we need the information for a legal reason.
- Client, supplier, contract, invoice and accounting records: normally up to six years where needed for tax, contractual or legal purposes.
- Mailing-list records: until you unsubscribe, the address becomes invalid or the list is retired; a minimal suppression record may then be kept.
- Freelancer and recruitment material: normally up to 12 months, unless we work together, you ask us to retain it for future opportunities, or a longer period is legally necessary.
- Analytics and security data: for the period configured in the relevant service and only for as long as reasonably needed for measurement, security or troubleshooting.
We may delete information sooner when it is no longer required, or retain it longer where a legal obligation, dispute or investigation requires this.
9. Security
We use proportionate technical and organisational measures designed to protect personal information, including access controls, encryption in transit, security monitoring, backups and limiting access to people who need it. No online service can guarantee absolute security.
10. Your data-protection rights
Depending on the circumstances, you may have the right to:
- ask for a copy of your personal information;
- correct inaccurate or incomplete information;
- ask us to delete information;
- restrict or object to processing;
- receive certain information in a portable format;
- withdraw consent at any time; and
- complain to a data-protection regulator.
To exercise a right, email info@tomorrowscreative.com. We may need to verify your identity. Withdrawing consent does not affect processing that was lawful before withdrawal.
You can also complain to the UK Information Commissioner’s Office. Visit ico.org.uk/make-a-complaint or call 0303 123 1113. We would appreciate the opportunity to address your concern first.
11. Children and automated decisions
Our services and website are directed at businesses and professionals, not children. We do not knowingly use website data to make decisions about people solely by automated means that have legal or similarly significant effects.
12. Links and updates
Our website may link to third-party sites whose privacy practices we do not control. We may update this notice when our services, suppliers or legal obligations change. The latest version will remain on this page and the “Last updated” date will be revised.