GDPR Compliance Policy

MJC Training Trust is the data controller responsible for your personal data. We determine the purposes and means of processing your personal information in connection with SPRIPT and this website.

Contact details for data protection enquiries will be published on this website when available.

We process your personal data under the following legal bases:

• Contractual necessity: To fulfil our obligations when you download, use, or purchase Pro features for SPRIPT
• Legitimate interests: To improve our services, prevent abuse, and maintain website and application security
• Consent: When you opt in to receive updates or marketing communications
• Legal obligation: When required to comply with legal requirements

We collect and process the following categories of personal data:

• Identity data: Name
• Contact data: Email address and other contact details you provide
• Technical data: IP address, browser type, time zone, device information, and cookies
• Usage data: Information about how you use this website and SPRIPT
• Payment data: Payment information for Pro purchases or subscriptions, processed securely by third-party payment processors

SPRIPT may access live comment data from connected third-party services (such as YouTube Live) to provide its core functionality. That content is used to display comments in your production workflow and is processed according to your use of the application and the terms of those third-party services.

We use your personal data for the following purposes:

• To provide, maintain, and improve SPRIPT
• To process Pro purchases, subscriptions, and related billing
• To communicate with you about your account and our services
• To send updates or marketing communications where you have consented
• To improve this website and our services
• To detect and prevent fraud and abuse
• To comply with legal obligations

Under GDPR, you have the following rights regarding your personal data:

1. Right to access

You have the right to request copies of your personal data. We may charge a reasonable fee where permitted by law.

2. Right to rectification

You have the right to request that we correct any information you believe is inaccurate or incomplete.

3. Right to erasure (right to be forgotten)

You have the right to request that we erase your personal data, under certain conditions.

4. Right to restrict processing

You have the right to request that we restrict the processing of your personal data, under certain conditions.

5. Right to data portability

You have the right to request that we transfer your data to another organisation, or directly to you, under certain conditions.

6. Right to object

You have the right to object to our processing of your personal data, under certain conditions.

7. Rights related to automated decision-making and profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

To exercise any of these rights, please use the contact details published on this website when available. We will respond to your request within one month, unless applicable law allows an extension.

We will retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process your personal data, and applicable legal requirements.

We have implemented appropriate technical and organisational security measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include:

• Encryption of data in transit and at rest where appropriate
• Regular security assessments and updates
• Access controls and authentication measures
• Staff training on data protection and security

Your information may be transferred to, and maintained on, computers located outside of your country or jurisdiction where data protection laws may differ. If you are located in the European Economic Area (EEA) and your data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the European Commission
• Transfer to countries with an adequacy decision by the European Commission
• Other legally approved mechanisms

We use cookies and similar tracking technologies to collect device and usage information on this website. You can control cookies through your browser settings. For more information, please see our Privacy Policy.

We may share your personal data with trusted third-party service providers who assist us in operating this website, processing payments, or providing SPRIPT. These parties are contractually obligated to keep your information confidential and use it only for the purposes we specify.

When you connect SPRIPT to third-party platforms such as YouTube Live, those platforms process data under their own privacy policies and terms.

Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe we have collected information from a child under 16, please contact us using the details published on this website when available.

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local supervisory authority. In the UK, this is the Information Commissioner's Office (ICO).

We encourage you to contact us first using the details published on this website when available so we can address your concerns directly.

We may update this GDPR Compliance Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Last updated” date below.

If you have any questions about this GDPR Compliance Policy or our data processing practices, contact details will be published on this website when available.

Data controller: MJC Training Trust