Privacy Policy

Last updated: 2 November 2026

Identity and Role of the Data Controller

trutharo acts as the data controller for the purposes of this privacy policy. We are responsible for determining how and why your personal data is processed when you visit our website or interact with our services related to professional video operation, live signal management, content distribution, camera work, and creating reliable high-quality feeds for news programs and television broadcasting. Our registered office is at 75 Millmarsh Lane, Enfield EN3 7UY, United Kingdom. If you have any questions about this policy or our data practices you may contact us using the details provided on our Contacts page or by emailing operations@subset.live or telephoning 0345 508 7460.

Scope of This Notice and the People It Covers

This privacy policy applies to all visitors to our website who are located in the United Kingdom and to any individuals whose personal data we process in connection with our commercial activities. It covers prospective clients, existing customers, suppliers, job applicants and anyone who contacts us through our contact form or otherwise provides personal information. The policy does not apply to third-party websites that may be linked from our site.

Categories of Personal Data and Sources

We collect personal data directly from you when you use our contact form or communicate with us. This may include your name, email address, telephone number, company name and any message content you provide. We also automatically collect technical information such as IP address, browser type, device identifiers and usage data through cookies and similar technologies. In limited cases we may receive information from professional networks or publicly available sources when assessing business relationships.

Purpose-by-Purpose Explanation of Processing and Legal Basis

We process personal data for several distinct purposes. To respond to enquiries submitted via our contact form we rely on legitimate interests and, where appropriate, consent. For providing our media feed services we process data under contract performance. Marketing communications are sent only with your consent or on the basis of soft opt-in where permitted by PECR. Analytics and website improvement activities are undertaken under legitimate interests. We never process data for purposes incompatible with those originally disclosed.

Whether Providing Data Is Required and Consequences of Not Providing It

Providing certain personal data is necessary to use our contact form or to receive responses from us. If you choose not to supply required information we may be unable to process your enquiry or deliver the requested service. Technical data collected automatically through cookies can often be managed via browser settings, although this may affect site functionality.

Cookies and Similar Technologies

We use cookies and similar technologies to ensure the website operates correctly, to remember your preferences and to understand how visitors interact with our content. A separate Cookie Policy explains the types of cookies used, their purposes and how you can manage your preferences. You can access the full Cookie Policy through the site-wide cookie banner or the footer links.

Processors, Service-Provider Categories, Recipients and Disclosures Required by Law

We engage carefully selected processors including web hosting providers, email delivery services, analytics platforms and cloud storage providers. These processors act only on our documented instructions and are bound by appropriate contracts. We may disclose personal data where required by law, regulation or court order, or to protect our legal rights and the safety of others.

International Transfers and Safeguards

Some of our processors are located outside the United Kingdom. When personal data is transferred to countries without an adequacy decision we rely on appropriate safeguards such as the UK International Data Transfer Agreement or binding corporate rules. We conduct transfer impact assessments where necessary to ensure an equivalent level of protection.

Specific Retention Periods or Defensible Criteria

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Enquiry data is typically kept for twelve months after the last interaction. Contract-related records are retained for six years to comply with statutory limitation periods. Technical logs are deleted after ninety days unless required for security investigations.

Security and Data-Minimisation Practices

We implement appropriate technical and organisational measures including encryption in transit, access controls and regular security reviews. We apply data minimisation principles so that only the information strictly required for each purpose is collected and processed.

All Applicable Data-Subject Rights and Practical Method for Exercising Them

Under UK GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and objection. To exercise any of these rights please contact us via the form on our Contacts page or by emailing operations@subset.live. We will respond within one month and may request identification to verify your identity.

Right to Withdraw Consent and Object to Direct Marketing or Profiling

Where processing is based on consent you may withdraw that consent at any time by using the unsubscribe link in our emails or by contacting us. You may also object to direct marketing at any time and we will cease such processing without undue delay.

Right to Complain to the Competent Supervisory Authority

If you are not satisfied with our response you have the right to lodge a complaint with the Information Commissioner’s Office, the UK supervisory authority. Contact details and guidance are available on the ICO website.

Children or Age Restrictions

Our services are intended for professional users and businesses. We do not knowingly collect personal data from children under the age of eighteen. If we become aware that such data has been collected we will delete it promptly.

Automated Decision-Making and Profiling

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals. Any analytics we perform are used only to improve service delivery and website performance.

Policy Changes and Effective Date

We may update this privacy policy from time to time to reflect changes in law or our practices. The date of the most recent update appears at the top of the page. Continued use of the website after changes constitutes acceptance of the revised policy.