Privacy & Cookie Policy

Last updated: 19 August 2026

This policy explains how Fair Game Media Ltd, trading as Laid Bare Productions, collects, uses, stores and protects personal information when you visit our website, contact us, apply for a casting opportunity or use our photography and videography services.

1. Who we are

Fair Game Media Ltd trading as Laid Bare Productions

Company number: 09846716

ICO registration reference: ZC126858

Registered office:

25 Capswell Court

Hitchin

Hertfordshire

SG5 1ET

United Kingdom

Email: hello@laidbareproductions.com

Fair Game Media Ltd is the data controller unless we explain otherwise, such as where we are working on behalf of a commercial client.

2. Information we collect

Depending on how you interact with us, we may collect:

• Your name, email address, telephone number and postal address
• Enquiry, booking, contract and correspondence details
• Session preferences, boundaries and accessibility information
• Payment, transaction and invoice information
• Photographs, video, audio and associated file information
• Gallery selections, downloads, print orders and delivery information
• Marketing preferences and unsubscribe records
• IP address, browser information, device information and website usage data
• Information supplied by another person booking on your behalf
• Call recordings, transcripts, summaries and related notes
• Notes, correspondence and other material created with AI assistance

For casting or model applications, we may also collect:

• Age confirmation
• General location or postcode
• Availability, experience and application answers
• Social media usernames or profiles you choose to provide
• Photographs submitted with your application
• Photographs of a proposed shoot location or property

3. Intimate and special category information

Boudoir, couples and adult-industry photography can involve particularly private information.

Some photographs, messages, application answers, session details or conversations may reveal or concern a person’s health, sex life or sexual orientation. This may be special category information under UK data protection law.

Where this information is genuinely necessary, we will identify an appropriate lawful basis under Article 6 and an additional condition under Article 9 of the UK GDPR. This will normally include explicit consent where required.

We will not treat attendance at an adult venue, submitting an enquiry or participating in a photography session as automatic permission to publish identifiable intimate images.

Our intimate photography services are only available to adults aged 18 or over.

4. How we use your information

We may use personal information to:

• Respond to enquiries and take steps towards a booking
• Plan, manage and deliver photography or videography services
• Confirm age, availability and suitability for casting opportunities
• Create, edit, store and deliver photographs and video
• Provide private galleries, downloads, prints and other products
• Process payments and issue invoices
• Maintain contracts, permissions and model releases
• Protect clients, models, business systems and property
• Handle complaints, disputes and legal claims
• Meet tax, accounting and other legal obligations
• Improve our website, services and working practices
• Send marketing where an appropriate marketing basis applies
• Record and transcribe agreed telephone or video calls
• Maintain records of instructions, permissions, boundaries and arrangements
• Draft correspondence and summarise communications
• Create notes, summaries, task lists and administrative records
• Obtain AI-assisted business, communication and workflow support
• Use AI-assisted features to edit, organise and manage photographs and video

We do not sell personal information.

5. Our lawful bases

Depending on the purpose, we may rely on:

• Contract or steps before entering a contract - to respond to enquiries and deliver an agreed service
• Legal obligation - for accounting, tax, regulatory and legal requirements
• Legitimate interests - to administer and protect the business, maintain appropriate records, communicate efficiently and improve our services
• Consent - for optional marketing, publication, call recording and other processing where we have asked for agreement
• Explicit consent - where required for special category information

Where we rely on legitimate interests, we consider whether the processing is necessary and whether the person’s rights and privacy override our interests.

6. Photography, publication and model releases

Creating photographs as part of a booked service does not automatically give us permission to publish them.

We do not require ordinary paying clients to agree to portfolio or marketing use as a condition of booking.

Use of identifiable images for our website, portfolio, social media, advertising, press, awards, exhibitions or other promotional purposes will be covered by separate permission, a model release or another lawful basis explained at the time.

A casting application is not a model release. Selected applicants will receive a separate agreement before photography takes place.

Where consent is our basis, it may be withdrawn for future processing. Withdrawal does not make earlier lawful processing unlawful. We may still retain limited information where necessary for contractual, legal or evidential purposes.

For event, venue and commercial commissions, the commissioning client or event organiser is responsible for informing attendees, guests, staff, performers and other affected people that photography or videography will take place.

Unless otherwise agreed in writing, the organiser is responsible for providing appropriate notices, including information within booking or registration communications, displaying notices at the venue, obtaining any permissions or consents required and telling us about anyone who must not be photographed.

We rely on the organiser to provide accurate instructions and confirm that these responsibilities have been handled. We are not responsible for the organiser’s failure to provide the required information or obtain required permissions, except where data protection law places a responsibility directly on us.

7. Service providers and sharing

We only share information where necessary for a legitimate business or legal purpose.

Providers may include:

• Pixieset for website hosting, private galleries, image delivery and print fulfilment
• Light Blue for enquiries, bookings, contracts, questionnaires and business administration
• Stripe, banks or other approved payment providers
• Google Workspace for business email, documents and administration
• Google Analytics for website statistics, subject to cookie choices
• Cloudflare and other security or website-delivery providers
• Professional image-editing, backup and storage providers
• Email marketing providers where you have joined a mailing list
• Telephone, video-call and call-recording service providers
• Professional printers or product suppliers where you place an order
• Accountants, insurers, legal advisers, regulators or authorities where necessary

Where we work for a commercial client, information may also be shared with that client in accordance with the agreed commission and privacy responsibilities.

8. AI-assisted tools

We use AI-assisted services within our photography, communications and business administration.

These may include OpenAI’s ChatGPT, Plaud’s recording and transcription features, and AI-assisted features within professional image-editing, gallery, customer-management and administrative software.

We may use these services to:

• Draft or improve emails and other correspondence
• Summarise enquiries, email threads, recorded calls and transcripts
• Create notes, task lists and administrative records
• Obtain general business, workflow or communication advice
• Assist with image selection, editing, retouching, organisation and delivery
• Support contracts, complaints, disputes and business decision-making

Information processed through these services may include identifiable information such as names, email addresses, telephone numbers, correspondence, booking information and the content of calls or transcripts.

It is not always practical or appropriate to remove every identifier. Where context is reasonably necessary, information may be processed in identifiable form.

We limit the information used to what is reasonably relevant to the task. Where a service provides a model-training choice, we configure available controls so that private business content is not used for that purpose.

AI-generated material may be incomplete or inaccurate. We review relevant output before relying on it or using it in communications.

We do not use AI to make solely automated decisions that have legal or similarly significant effects on clients, applicants or models.

We do not upload identifiable intimate photographs to a general-purpose generative AI service unless the person has been informed, an appropriate lawful basis and Article 9 condition apply, and any required explicit consent has been obtained.

9. Payments

Payments may be processed through Stripe, bank transfer or another approved payment provider.

We do not store full payment card details on our own systems. Payment providers process those details under their own privacy terms.

10. How long we retain information

We retain personal information for as long as we reasonably need it for the purposes described in this policy.

We do not automatically delete information across every system. We may retain some information long term where continuing business, contractual, legal, evidential, or archival purposes apply.

We conduct proportionate periodic reviews of the categories of information we retain. We will also consider retention when systems change, when information is no longer useful or when someone makes a valid request concerning their information.

Enquiries and correspondence

We may retain enquiry details, emails, messages, and correspondence as part of our long-term business history.

This helps us manage repeat enquiries, understand previous discussions, maintain records of instructions and permissions, resolve complaints or disputes and prevent misuse of our services.

We do not routinely delete enquiry records solely because a fixed period has passed.

Accounting and contractual records

Information required for accounting, tax or contractual purposes will normally be retained for at least six years from the end of the relevant company financial year, or longer where legally required.

Photographs and video

Photographs, video, RAW files, edited files and working files may be retained as part of our long-term private photographic archive.

We retain these files for purposes including:

• Replacing or redelivering previously supplied images
• Producing further edits or products requested by a client
• Maintaining backup and business continuity
• Keeping evidence of the work supplied and relevant permissions
• Dealing with complaints, disputes, copyright matters or legal claims
• Maintaining an authorised creative or portfolio archive

We do not routinely delete photographic files solely because a fixed period has passed.

Because boudoir and intimate photographs are particularly private, archived material is not published merely because we retain it. Publication remains subject to the separate permissions and lawful bases explained in this policy.

You may ask us to delete photographs or other personal information. We will consider the request under UK data protection law.

The right to deletion is not absolute, and we may retain limited information where necessary for legal, contractual, evidential or overriding legitimate reasons.

Casting applications

Casting applications, correspondence, submitted photographs and property photographs may be retained as part of our casting records.

This helps us document applications, permissions and decisions, respond to complaints or disputes and consider applicants for relevant future opportunities.

We do not apply an automatic deletion period to every casting record. Applicants may ask not to be considered for future opportunities and may request deletion of their application information.

Marketing

Marketing details are retained until you unsubscribe, object or withdraw consent.

We may retain a minimal suppression record after you unsubscribe so that we do not accidentally contact you again.

Call recordings

Call recordings, transcripts, summaries and related notes may be retained where they document instructions, permissions, boundaries, bookings, agreements, complaints or disputes.

We do not apply one automatic deletion period to every recording or transcript. Retention depends on the content, its sensitivity and its continuing relevance to the business relationship or legal record.

We may retain a transcript, summary or written note after the original audio is no longer required.

A person may request deletion of a recording or transcript. We will consider the request under applicable data protection law.

11. Telephone and video call recording

We may record telephone or video calls where this is useful for maintaining an accurate record of instructions, permissions, boundaries or arrangements.

We will tell you at the beginning of the call that recording is taking place and explain its purpose.

Plaud may store the recording using cloud services and create a transcript, summary, speaker labels, notes or action points using AI-assisted technology.

Relevant parts of a recording or transcript may also be processed using OpenAI’s ChatGPT for summarisation, administration, correspondence or business advice.

Where a call is likely to include information about health, sex life, sexual orientation or another special category, we will ask for any required explicit permission before continuing with the recording.

If you do not want the call recorded, you can ask us to stop. We can continue without recording or communicate by email instead.

Recordings are treated as confidential information. They are not used for advertising, entertainment or publication.

12. International transfers

Some providers may process or store information outside the United Kingdom.

Where required, we rely on an applicable UK adequacy regulation, contractual safeguards or another legally recognised transfer mechanism.

You may contact us for further information about safeguards relevant to your information.

13. Security

We use reasonable technical and organisational measures appropriate to the sensitivity of the information we handle.

These include limiting access, using password-protected business systems, secure connections, controlled gallery access and appropriate backup arrangements.

No storage or transmission system can be guaranteed completely secure. Please contact us promptly if you believe your information or gallery access has been compromised.

14. Marketing

We will only send marketing emails or messages where:

• You have agreed to receive them; or
• The limited existing-customer exception applies and you were given a clear opportunity to opt out.
• You can unsubscribe at any time using the link in a marketing email or by contacting us.

Service messages concerning an enquiry, booking, payment, gallery or contract are not marketing messages.

15. Cookies and website technologies

Our website uses cookies and similar technologies.

These may include:

• Strictly necessary cookies used for website operation, security, forms and cookie preferences
• Analytics cookies used to understand website traffic and performance
• Personalisation cookies used to remember visitor choices
• Advertising cookies, but only if an advertising service is enabled

We use Google Analytics to understand how visitors use the website. Analytics and other non-essential cookies will only be used where you have accepted the relevant category through our cookie banner.

You can review or change your choices using the website’s cookie settings.

You can also delete cookies through your browser, although this may affect website functionality.

Embedded services, including Light Blue forms, may use cookies necessary to display and submit the service you have requested.

16. Your rights

Depending on the circumstances and lawful basis, you may have the right to:

• Access your personal information
• Correct inaccurate or incomplete information
• Request deletion
• Restrict processing
• Object to processing
• Receive certain information in a portable format
• Withdraw consent
• Complain about how your information has been handled



These rights are not absolute. We may need to retain or continue processing limited information where a legal, contractual or overriding lawful reason applies.

You may object at any time to the use of your information for direct marketing.

You may also object to processing based on legitimate interests. We may continue where we can demonstrate compelling lawful grounds.

17. Data protection complaints

You can make a data protection complaint by emailing:

hello@laidbareproductions.com

Please include enough information for us to understand and investigate the issue.

We will:

• Acknowledge your complaint within 30 days
• Investigate it appropriately
• Keep you informed where the investigation takes time
• Explain the outcome without undue delay

You also have the right to complain to the Information Commissioner’s Office. The ICO recommends giving us an opportunity to address the issue first.

Website: https://ico.org.uk/make-a-complaint/

Telephone: 0303 123 1113

18. Changes to this policy

We may update this policy when our services, providers or legal obligations change.

The current version and its last-updated date will be published on this website.