Privacy & Cookies

1. Who we are and how to contact us

365 Media House is owned and operated by Enterprise 365 Ltd, company number 15698263. Enterprise 365 Ltd is the controller responsible for deciding how personal information collected through this website is used. This notice covers 365 Media House and its divisions: 365 House Press, 365 House Entertainment and 365 House Creative.

For a privacy question, rights request or complaint, use our Contact us form and select “Privacy request or complaint”, or write to our registered office:

This notice applies to www.365mediahouse.com, 365mediahouse.com and our hosted 365 Media House website. Specific client, publishing, creator or artist services may have additional privacy information relevant to that service.

2. Information we collect

Enquiries. When you submit the contact form, we receive your name, email address, selected subject or division, your message and any organisation details you choose to provide. We record a submission reference, the time received and whether the enquiry is open or resolved. We may receive further information when we correspond with you.

Please include only information relevant to your enquiry. Do not send passwords, payment-card details, identity documents or sensitive information about yourself or other people through this form.

Technical and security information. Your browser sends request information, including an IP address and details of the page requested, to our hosting service so that it can deliver and protect the website. To limit contact-form abuse, our application uses a short-lived, keyed security code derived from a network address, together with submission counts. It does not put raw IP addresses in the enquiry record.

Hosting sign-in. Where access to the website requires a hosting-platform sign-in, that platform processes the information needed to authenticate you. Access to the enquiry-management area is restricted to the authorised site owner. We do not request your ChatGPT password.

3. Why we use information and our lawful bases

• Responding to a request for work or a quotation. Where you ask us to take steps towards a contract with you, we use the information necessary to take those steps. If work is agreed, necessary processing may continue to perform that contract.
• Handling general enquiries and business contacts. We rely on our legitimate interests in communicating with people who contact us, understanding their requests and managing business relationships. This includes enquiries from someone representing an organisation.
• Operating and protecting the website. We rely on our legitimate interests in providing a reliable service, preventing misuse, protecting information and investigating technical problems.
• Privacy requests, legal duties and disputes. We use relevant information to meet legal obligations, including responding to applicable data-protection rights, or for our legitimate interests in establishing, exercising or defending legal claims.

Sending an enquiry does not subscribe you to a mailing list. We do not sell enquiry information or use it for advertising profiles.

You are not legally required to contact us. A name, working email address, subject and enough detail about your request are needed to handle an online enquiry; organisation details are optional. Without the necessary contact details or context, we may be unable to respond.

We do not use enquiries to make decisions that have legal or similarly significant effects on people based solely on automated processing.

4. The project-brief tool

The project-brief builder prepares text in your browser. Creating a brief does not submit it to us. Copying it or downloading a text file happens only when you choose that action, and a downloaded copy remains under your control.

The builder does not deliberately retain your brief in cookies or persistent browser storage. If you choose “Enquire about this brief”, the text is placed in the contact form for you to review. It is sent to us only when you press “Send enquiry” and the server accepts it.

5. Who can access information

Submitted enquiries are saved in a protected website inbox. Only authorised people who need the information to handle your enquiry or provide the relevant service should have access. The form does not publish your message or automatically subscribe you to another service.

We use OpenAI Sites and Cloudflare to host, deliver and secure the website. Enquiry records are stored using Cloudflare’s D1 database through the hosting service. These providers process information needed to operate their services. Business communication providers may process subsequent correspondence when we reply to you.

We may share relevant information with professional advisers, regulators, courts or other bodies when required by law or necessary to protect legal rights. If an enquiry develops into a project involving other people or providers, we will handle any further sharing in the context of that work.

Music services, creator websites and social networks linked from this website are independent services. Their own privacy and cookie notices apply when you visit them. This website does not automatically send your enquiry to those destinations.

6. International processing

Our hosting providers operate internationally, including in the United States. Website and enquiry information may therefore be processed outside the United Kingdom; this service is not presented as storing all information only in the UK.

The providers’ published data-processing terms describe safeguards for these transfers. OpenAI’s terms provide for UK data transfers using standard contractual clauses amended by the UK International Data Transfer Addendum. Cloudflare’s terms describe applicable adequacy arrangements, including the UK extension to the EU–US Data Privacy Framework, and contractual safeguards using the UK Addendum where required.

You can read the OpenAI data-processing terms and Cloudflare data-processing terms, or contact us using the details above to request further information or a copy of relevant safeguards.

7. How long we keep information

We keep enquiries for as long as reasonably needed to respond, carry out agreed follow-up and maintain an appropriate record of the discussion. In deciding whether information remains necessary, we consider whether the enquiry is active, whether work has been agreed, any outstanding issue and applicable legal requirements.

If an enquiry leads to a working relationship, relevant information may become part of our client or project records. Information needed for a legal obligation or an existing dispute may be retained longer. We review records and delete or anonymise information when it is no longer needed; marking an enquiry “resolved” does not itself delete it.

The contact form’s security codes expire after one to two hours. Expired records are removed when the next enquiry is submitted or the inbox is opened. Hosting providers may retain their own operational or security records under their applicable policies. Copies of project briefs downloaded to your device are controlled by you.

8. Protecting information

We use HTTPS, restrict access to the enquiry inbox, validate submissions and apply abuse controls. We aim to limit the information collected to what is needed for the enquiry. No online service can guarantee complete security.

If you believe information submitted to us has been exposed or misused, contact us using the details in section 1. Please avoid sending additional sensitive information while explaining the concern.

9. Cookies and similar technologies

Cookies are small pieces of information that a website or service can store in your browser. Similar technologies can store or access information on your device.

The project-brief builder and contact form do not use cookies or local storage to retain their contents. Contact details are sent to the server only when you submit the contact form; they are not stored in a tracking cookie.

The hosting platform’s access-control or security features operate separately. If you sign in to a restricted page, essential authentication technologies may keep you signed in and protect access. Information about the platform’s cookies is available in its cookie policy and during its sign-in process.

For Sites-hosted access, OpenAI’s current cookie policy lists the following necessary cookies. Which ones appear depends on the hosting address and sign-in route:

You can manage cookies through your browser settings. Blocking essential technologies may affect features that depend on them. If we introduce additional storage or tracking technologies, we will update this notice and provide the information and choices required before using them.

10. Your privacy rights

Depending on the circumstances and the lawful basis for the processing, you can ask us to:

• give you access to your personal information and information about how we use it;
• correct inaccurate or incomplete information;
• delete information we no longer need or have no lawful reason to keep;
• restrict how we use information; or
• provide certain information in a portable format, where the legal conditions apply.

If we rely on your consent for a particular use, you can withdraw it without affecting processing that was lawful before you withdrew consent.

To exercise a right, contact us using section 1. Requests are normally free. We may need proportionate information to confirm your identity. We will explain any applicable exception or permitted extension. Subject-access requests are normally answered within one calendar month.

11. Concerns and complaints

Please tell us if you are unhappy with how we handle your information. Select “Privacy request or complaint” in our contact form, or write to us. We will acknowledge a data-protection complaint within 30 days, investigate, keep you appropriately informed and communicate the outcome without undue delay.

You also have the right to complain to the UK’s Information Commissioner’s Office. Visit ico.org.uk/make-a-complaint or telephone 0303 123 1113.

12. Changes to this notice

We will update this notice when our services or use of personal information change. The date at the top identifies the latest version. Where required, we will bring material changes to your attention.