Privacy Policy

Last updated: October 2026

This policy explains how Dragon Forge Studios, a trading style of RGL Holdings Ltd ("we", "us", "our"), collects, uses and protects personal data when you visit our website, contact us, book the studio or take part in a recording. It is written to meet the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).

1. Who we are

The data controller is RGL Holdings Ltd, trading as Dragon Forge Studios.

• Registered in England and Wales, company number 09428609
• Trading address: Florence House, Bromfield Lane, Mold, CH7 1JW
• Registered office: 14 Harlech Avenue, Connah's Quay, Deeside, Wales
• Email: hello@dragonforgestudios.co.uk · Telephone: 07889 063885

We are not required to appoint a Data Protection Officer. Questions about this policy can be sent to the email address above.

Recording, editing and delivery of podcasts are carried out on our behalf by our production partner, Take the Cake Productions, managed by Michael Roberts.

2. The information we collect

Information you give us

• Contact details: name, email address, phone number and, where relevant, your company name
• Enquiry and booking details: the package, dates and anything you tell us about your podcast
• Billing details: invoice name and address, and records of payments made (we do not store payment card details)
• Correspondence with us by email, phone, form or social media

Recordings made in the studio

When you record with us, we capture video and audio of everyone taking part. This includes your image, voice and anything said during the session, which can include personal information about you or other people.

Information collected automatically

• IP address, browser type and version, device information and operating system
• Pages visited, time spent on the site and how you arrived

Some of this is collected using cookies and similar technologies (see section 9).

Special category data

We do not ask for special category data (for example, health, religion or political opinions). If such information comes up in a recording, it forms part of the content our client controls (see section 4) and we handle it only to produce and deliver that recording.

3. How we use your information and our lawful basis

Where we rely on legitimate interests, we have balanced those interests against your rights. You can ask us for details of that assessment.

4. Recordings: who is responsible

When a client books the studio, the client decides what is recorded, who takes part and how the finished podcast is published. For that content the client is the controller and we act as their processor, handling the recordings only on their instructions and to deliver the service. Our production partner, Take the Cake Productions, captures, edits, stores and delivers recordings for us as a sub-processor under a written agreement, and may only use them for that purpose. Our Terms of Booking require clients to obtain the agreement of everyone who appears.

If you appeared as a guest on someone else's podcast and have a question about how it is published, please contact the podcast's owner. We will help where we can.

We, and Take the Cake Productions for its own showreel, act as controller only where footage is used for our own purposes, such as a portfolio, and only with consent.

5. Who we share data with

We only share personal data where necessary, and never sell it. Recipients may include:

• Take the Cake Productions, our production partner, who records, edits, stores and delivers podcasts for us
• Service providers who act on our behalf, such as website hosting (IONOS), any analytics provider we use, email, cloud storage and file-transfer services used to deliver recordings
• Our accountants, insurers, banks and professional advisers
• Police, courts, HMRC or other authorities where the law requires it
• A buyer or successor if all or part of our business is sold or reorganised

Our service providers act under written contracts, must keep data secure and may only use it on our instructions.

6. International transfers

Some of our providers may store or process data outside the UK. Where this happens we make sure the transfer is protected, for example by relying on UK adequacy regulations or using the ICO's International Data Transfer Agreement or Addendum.

7. How long we keep data

• Enquiries that do not lead to a booking: deleted once we have dealt with them. We do not keep them on file.
• Client, booking and invoice records: six years after the end of the financial year they relate to, to meet tax and accounting rules
• Raw footage and edited recordings, including copies held by Take the Cake Productions: up to 90 days after delivery, unless agreed otherwise in writing
• Portfolio material: until consent is withdrawn
• Marketing preferences: until you unsubscribe, after which we keep a suppression record so we don't contact you again
• Analytics data: no longer than 14 months

When data is no longer needed we delete it securely or anonymise it.

8. How we protect your data

We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss or misuse. These include access controls, password-protected devices and accounts, encrypted transfer of files and limiting access to people who need it. If a data breach is likely to put you at risk, we will tell you and the ICO as the law requires.

9. Cookies

Cookies are small files stored on your device. We use:

• Strictly necessary cookies that make the website work and remember your cookie choices. These do not need consent.
• Analytics cookies, if we use an analytics service, that tell us how the site is used so we can improve it
• Third-party content: if we embed content such as videos or maps, those providers may set their own cookies

Non-essential cookies are only set if you accept them in our cookie banner. You can change your choice at any time using the "Cookie settings" link in the footer, or block cookies in your browser settings.

10. Your rights

Under UK data protection law you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data erased in certain circumstances
• Restrict how we use your data
• Object to processing based on legitimate interests, and object at any time to direct marketing
• Receive your data in a portable format, where processing is based on consent or contract
• Withdraw consent at any time, without affecting processing already carried out

We do not make decisions about you based solely on automated processing. To use any of these rights, email hello@dragonforgestudios.co.uk. We will respond within one month, usually free of charge. We may ask you to confirm your identity first.

11. Children

Our website and services are aimed at adults and businesses. We do not knowingly collect data from children through this website. Anyone under 18 taking part in a recording must have the consent of, and be accompanied by, a parent or guardian.

12. Links to other websites

Our website may link to other sites. We are not responsible for their content or privacy practices, so please read their policies.

13. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.

14. Complaints

If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the UK data protection regulator, the Information Commission (formerly the Information Commissioner's Office):

• Website: ico.org.uk/make-a-complaint
• Telephone: 0303 123 1113
• Post: Information Commission, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF