Privacy notice
Last updated 3 October 2026
Who we are
Granary Digital Ltd is a company registered in England and Wales, company number 14155621, with its registered office at Unit 3, The Old Grainstore, Adsdean Farm, Funtington, Chichester, West Sussex, PO18 9DN. We run a photography, film and podcast studio near Chichester, West Sussex, and the Granary Digital Academy at academy.granary.digital. For anything in this notice, email studio@granary.digital.
Waiting lists and Academy news
When you join a waiting list or Academy news, we keep your email address, the list you joined, when you joined, and how you reached the site: the page you landed on, the referring website and, if you came from one of our adverts, the click reference Google adds to the address bar. That tells us which adverts bring people who are interested.
We use your email address only to send what you asked for: an email when the course opens, or when each course opens for Academy news. The lawful basis is your consent. You can withdraw it at any time by replying to one of our emails or emailing studio@granary.digital, and we'll take you off the list.
Buying a course
Our checkout is run by Shopify. When you buy, Shopify collects your name, email address, billing details and payment, and passes your order to us. We never see your full card number. We use your order to deliver the course, to send you your access details, to deal with any problem or refund, and to keep the accounting records the law requires. The lawful bases are our contract with you and our legal obligations.
Getting your course
- Audio courses are delivered as a private podcast feed hosted by Transistor (transistor.fm). We give Transistor your email address so it can create your personal feed. Transistor emails you the feed link and can see when your feed is used.
- Video courses are delivered by a personal link that we email to you. When you open a lesson, our system checks that the link is valid and records when it was last used, so we can keep your access working and spot a link that has been shared. Your browser keeps the link in its local storage so you don't need the email every time; clearing your browser data removes it.
When days at the barn go on sale, we'll update this notice before we take any bookings for them.
Where your information is kept
Sign-ups and access records are stored on Amazon Web Services in the London region, and our emails are sent through AWS. Shopify, Transistor, Cloudflare, Google and Microsoft also process information for the purposes described here. Some of them process it outside the UK, under the safeguards UK law requires, such as the UK International Data Transfer Addendum. We don't sell your information to anyone.
How long we keep it
Waiting-list and Academy news sign-ups are kept while the list is in use, or until you ask us to remove you. Order records are kept for six years, because UK law requires businesses to keep their accounting records. Access records for a video course are kept for as long as you have the course.
Cookies and similar technology
Google Analytics, Microsoft Clarity and Google Ads measurement run on every visit to this site. The notice you see on your first visit tells you they are in use; it is there to inform you rather than to ask permission. If you would rather not be measured, block or clear cookies in your browser settings and the site works just the same. Each tool also has its own opt-out, linked below.
- Google Analytics 4 sets first-party cookies (typically _ga and _ga_FMQW7FDTC0) so we can see aggregate patterns, such as which pages are visited, in what order, on what kind of device and from which referring site. Data is processed by Google Ireland Limited and Google LLC. Opt out with the browser add-on at tools.google.com/dlpage/gaoptout.
- Microsoft Clarity sets two cookies (_clck and _clsk) and records anonymous interactions, such as clicks, scrolling and the order of pages, so we can see where the site is confusing or broken. Clarity masks what you type into forms. Opt out at clarity.microsoft.com/optout.
- Google Ads sets cookies (typically _gcl_au) and reads the click reference from the address bar, so Google can tell us that a sign-up followed one of our adverts. It tells us which advert worked, not who you are. Control personalised advertising at myadcenter.google.com.
- Cloudflare Turnstile runs on pages with a sign-up form to check that a person, not a bot, is filling it in. Cloudflare processes technical information such as your IP address and browser details for that check.
- Local storage: your browser keeps a note that you've seen the cookie notice, and on lesson pages your personal course link. Nothing in local storage is sent to advertisers.
Your rights
Under UK data protection law you can ask for a copy of the information we hold about you, ask us to correct it or delete it, object to how we use it, and withdraw your consent where we rely on it. Email studio@granary.digital and we'll sort it. If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.