Privacy Policy


Keeping your data safe

At TotallyJustMe we are committed to keeping your personal data safe and secure, and handling it in accordance with our legal obligations. This Privacy Policy sets out in detail the purposes for which we process your personal data, who we share it with, what rights you have in relation to that data and everything else we think is important for you to know.


Legitimate Interest for Businesses

When providing services to a client, TotallyJustMe will ask that they require the necessary consent and offer all and every needed indemnity and protection to TotallyJustMe in respect to all contributors, participants and subjects, in the instance where consent is subsequently withdrawn from the individual.


The client/commissioner of TotallyJustMe will have lawful ground for processing of a business having a “legitimate interest” in the video/work content even when individuals might withdraw their consent. TotallyJustMe will rely on the onus for the legitimate interest to be solely with the business/ client/ commissioner that employs, instructs/partners with TotallyJustMe. For all purposes aforementioned, TotallyJustMe will have a legitimate interest in the video content created as they have been expressly commissioned to create this content for the business or client.


On commission of work, TotallyJustMe will confirm that the business/client/commissioner commissioning TotallyJustMe for any and all of its services have a “legitimate interest” in continuing to process personal data.


For TotallyJustMe led productions, projects and work TotallyJustMe, TotallyJustMe Commercial Production and TotallyJustMe Workshops for any and all of its services have a “legitimate interest” in continuing to process personal data where:


  1. i) there is a real business interest being pursued in continuing to process the personal data;
  2. ii) the processing is absolutely necessary in order for the business to pursue that interest (i.e. the interest cannot be pursued in another way which is proportionate); and


iii) the processing is balanced against the impact such processing will have on the fundamental rights and freedoms of data subjects.

TotallyJustMe requires that under the GDPR, the commissioners/ business/ organisation commissioning the services and work of TotallyJustMe show that they have considered the impact their control or processing will have on individuals, and that they have put preventative measures in place to limit such impact.


It is important that you understand who is responsible for keeping your data safe. We collect your personal data with your express consent for purposes set out in this Privacy Policy.


We have appointed a Data Protection Officer (DPO) who has ultimate responsibility within TotallyJustMe for making sure your data is treated in accordance with this Privacy Policy and the law. Our DPO can be contacted by emailing


What data do we collect and where from?

We collect some data directly from you when you are a client, register for the TotallyJustMe newsletter, become a participant on a TotallyJustMe workshop. This data includes the following:


  • your full name;
  • your email address;
  • Your Company/organisation/trading name
  • Landline and mobile numbers
  • Mailing and billing addresses
  • Social media handles
  • Titles
  • PA contact details (name, email, landline)
  • Short biography
  • Photos
  • Testimonials
  • Payment methods (encrypted)
  • Forms and survey responses
  • your date of birth; (if you choose to provide it)
  • your gender (if you choose to provide it);
  • your postcode and address (if you choose to provide them); and
  • your interests in filmmaking workshops
  • ethnicity and cultural background – grant funders often us us to collect this information for evaluation purposes (if you choose to provide it)
  • borough where you live (if you choose to provide it)
  • whether you have a disability – we ask this for our workshop programmes and productions to we are able to ensure that we can offer the most appropriate workshop or method of filming to suit your needs (if you choose to provide it)
  • Whether you have a mental health issue – we ask this for our workshop programmes and productions to we are able to ensure that we can offer the most appropriate workshop or method of filming to suit your needs (if you choose to provide it)


We collect information about how you use TotallyJustMe website and social media and similar technology. This includes your viewing history, IP addresses, device identifiers and information about how long you have stayed on certain pages or what pages you have clicked on (Behavioural Data).


We collect information from you on your consent forms to be filmed or recorded on video, film and audio visual for the purposes of a specific project, film, production, programme, online content and also for a specific workshop, educational programme, seminar, course or masterclass where the production or creation of a video or film materials is part of the process.


We collect information about you when you participate in competition, such as your contact information. This data is only used for the purposes of the relevant competition and will be subject to the terms and conditions of that competition, which will be notified to you when you enter the competition.


We also collect anonymised publicly available information from social networking sites such as Facebook, Youtube, Instagram and Twitter and others similar, for example likes, shares, tweets and posts about TotallyJustMe, TotallyJustMe Productions, TotallyJustMe Workshops This information is provided to us by a third party and is fully anonymised so we cannot see who has posted the information. This information is used for internal analysis purposes.


Other means of processing information:

Social Media:

We collect publicly available information from Twitter, Youtube, Facebook, Instagram, Snapchat and LinkedIn profiles, when users  mention our Twitter handle/Facebook, Youtube, Instagram, Snapchat and LinkedIn address, comment on or retweet our posts. We collect posts, handles, names and follower count.

We process this information, under the lawful basis of Legitimate Interest – tracking engagement.

We will use this information to manage our Twitter, Youtube, Facebook, Instagram, Snapchat and LinkedIn profiles, asses impact and recognise potential collaborators and prospects.



We collect information from emails sent to us. We collect names, job titles and contact details of contacts that may qualify as leads or can contribute to our policy work.


For clarity and transparency we refer to Data as information on an individual and footage, photography, audio and/ or visual recordings with the individual featured directly and in the forefront in this Data.


What do we use your data for?

It is important that you understand how and why we use the personal data that we collect about you. This section sets out the different purposes for which we process personal data and which types of personal data we need for each purpose.


Providing you with our services

We use your Data to confirm that we have received express consent from you to be the subject in the video content we create.


We use your Data to provide you with TotallyJustMe services that you request from us.


We use your Data to contact you occasionally with messages about services you have that you may be interested in.


We use your Voluntary Data to enable us to respond to queries, or comments that you have and to make sure that these are appropriately dealt with. If Voluntary Data you provide includes any special categories of personal data (such as information about your health, race or religion), you must make sure before you provide this that you are happy for us to use that Voluntary Data for the purposes set out in this Privacy Policy.


Competitions and surveys

We use Competition Data for the purposes of allowing you to participate in competitions and to carry out any activities required in relation to those competitions, for example contacting you to let you know you have won a prize and using your address to send your prize to you.

We use Survey Data for the purposes of analysing insights and information to enable us to improve our services.


Improving our services

We use Data to help us monitor, analyse and improve TotallyJustMe services. We use this data to help us understand  and make sure that we are providing you with the best possible services.


Marketing and advertising

We use Data for marketing and advertising purposes.



We use and combine all the data that we hold about you in order to build up a picture of you and the types of products and services which might be of interest to you (your Profile).


We use the data to:

  • enable us to assess our performance and to improve our products and services
  • inform our marketing and promotional activities;
  • enable us to notify you within information about workshops, screenings and productions that might be of interest to you
  • provide you with any prizes you have won if you enter any prize draws.



TotallyJustMe captures footage and hold on to work done for all clients. At TotallyJustMe we understand how valuable your footage can be, not just for this project but also for future projects. We therefore archive all of our projects and footage using a long-term data storage system. We archive projects indefinably, and will safely store footage for 15-20 years. However please note, we cannot guarantee your footage, so if you’d like to keep a back-up, please do send over a hard drive. We will work with our partners and clients to comply with their own specific GDPR policies and will observe these in order to remain consistent with their obligations to individuals.


We keep consent forms on file as evidence of receipt of active consent from all participants and contributors. These are kept during the course of the project that they relate to and for up to two years after this time, depending on whether they are still relevant to showing that TotallyJustMe have asked for active consent.


We archive all release forms to use for a social enterprise impact reports and evaluation for workshop programmes, projects and educational learning purposes. We will delete or anonymise your data held in the archive where we consider it is no longer of value or interest.


How do we use your data for marketing and advertising purposes?

At TotallyJustMe, our services are entirely funded by commissions from clients. Marketing and advertising are therefore key parts of our activities.


Promoting our own services on other platforms

We promote our own content and features via third party platforms, such as social media sites.


Our content might appear on third party sites based solely on your behaviours on these sites (for example, after liking our brand or its content on Facebook), or the behaviours of those within your networks (for example, a friend within your Facebook network likes our brand or its content on Facebook, so it appears in your News Feed).


What rights do you have?

You have a number of rights under data protection law. These rights and how you can exercise them are set out in this section. We will normally need to ask you for proof of your identity before we can respond to a request to exercise any of the rights in this section and we may need to ask you for more information, for example to help us to locate the personal data that your request relates to.

We will respond to any requests to exercise your rights as soon as we can and in any event within one month of receiving your request and any necessary proof of identity or further information. If your request is particularly difficult or complex, or if you have made a large volume of requests, we may take up to two months to respond. If this is the case we will let you know as soon as we can and explain why we need to take longer to respond.


A right to access your information

You can access all of your Data by emailing

You also have a right to ask us to send you a copy of your Data and all other personal data that we hold about you (subject to some exceptions). A request to exercise this right is called a “subject access request” and must be made in writing to: info@


A right to ask us not to market to you

You can ask us not to send you direct marketing or advertising. You can do this by opting out of the advertising you no longer want to receive. In relation to email marketing, you can also opt out by using the “unsubscribe” option in any of our email marketing communications.

Please note that it can take a short time for opt-out requests to take effect. The time taken to opt out of each type of marketing and advertising is detailed at above.


More information about opting out of marketing and advertising is provided at above.


A right to have inaccurate data corrected

You have a right to ask us to correct inaccurate data that we hold about you. If we are satisfied that the new data you have provided is accurate, we will correct your personal data as soon as possible.

You can update your own personal data at any time.


A right to have your data erased

You have a right to ask us to delete your personal data in certain circumstances, for example if we have processed your data unlawfully or if we no longer need the data for the purposes set out in this Privacy Policy.


We will fully anonymise any personal data we hold about you when you close your account, as set out under above. This means that it will no longer identify you and ceases to be “personal data”.


If you ask us to delete your personal data we will fully anonymise your personal data as set out above.


If you would like to make a request to exercise this right, please email If we are required by law to comply with your request, we will fully anonymise your data it so that it is no longer personal data and cannot be used to identify you.


How can you contact us?

If you have any questions or concerns about this Privacy Policy and/or our processing of your personal data, you can get in touch with our Data Protection Officer using:


What if this policy changes?

We may make changes to this Privacy Policy from time to time. Any changes we make will be posted on this page.


Aged 16 or under

We collect and process information in a number of areas to promote the welfare of our participants on our workshop and education programmes and creative engagement projects, we endeavour to help every participant fulfil her potential and manage our workshops and education programmes and projects effectively. We use personal data:


  • To safeguard and promote the welfare of our participants
  • To support our participants’ learning and help every participant fulfil their potential during the workshop or course we offer
  • To support participants with Special Educational Needs or Disability (SEND) on our workshops and programmes
  • To communicate with our network of TotallyJustMe alumnae ( participants that have been on our workshops)
  • To manage our workshops and engagement programmes effectively
  • For the employment and management of our staff
  • For development and fundraising for TotallyJustMe Workshops as a social enterprise


Please note that you need to be 18 or over to receive services from TotallyJustMe. As we regularly engage and work with young people that are under 18 we ask for parents/ guardians to provide consent for their dependents to receive workshops, courses, training and mentoring workshops and classes from us. In these cases, if you are aged 16 or under, please speak to your parent/guardian to get their permission before you provide any personal information to TotallyJustMe because without this consent, you are not allowed to provide us with personal information. We may also ask for your parent/guardian’s contact details so that we can check they are happy for you to engage with TotallyJustMe.


Parents provide information about themselves and their dependent when completing our release forms in order for their dependent to be involved with our workshops, as well as related documents such as registration forms and health record forms. Personal information is also collected directly from participants and parents by direct means such as meetings, discussions, through schools, colleges, community groups and other organisations and in general correspondence.


Whilst we collect most of our personal information from participants and parents directly, in some cases personal data may be supplied to us by third parties, for example another school, a local authority, or other professionals.


If we have been commissioned by a school, college or community group, we will ask for them to provide us with all consents for participants to be involved in our workshops and productions. The onus of responsibility will be on our client to provide these to us before we are able to commence our services.


We keep consent forms on file as evidence of receipt of active consent from all participants and contributors. These are kept during the course of the project that they relate to and for up to two years after this time, depending on whether they are still relevant to showing that TotallyJustMe have asked for active consent.

Does TotallyJustMe privacy policy apply to third party websites or social networking sites?

This policy only applies to our use of your information via TotallyJustMe only. Therefore, it does not apply to third party websites to which TotallyJustMe or might provide links or on which TotallyJustMe content is embedded.


Equally, it is important to note that when you access TotallyJustMe via a social networking site, such as Facebook or Twitter, that site may also collect and use your information. So, we would advise you to check the privacy policies for those social networking sites and applications to see how your information is being used.


How do I contact TotallyJustMe if have a question about privacy issues?

If you have any questions or concerns about privacy issues, you can use the form on our ‘Contact us’ page on


Changes to this policy

Our privacy policy may change from time to time. Any changes we may make to our privacy policy in the future will be posted on this page, and, where appropriate, notified to you by email.

Policy updated on 3 May 2019


What is this privacy policy for?

TotallyJustMe is committed to protecting your personal information, being transparent about what data we hold and giving you control over how we use it.


The purpose of this privacy policy is to give you a clear explanation about how TotallyJustMe uses personal and behavioural information we collect from you when you use our services.


This is the main privacy policy for TotallyJustMe.


Pin It on Pinterest

Share This