Privacy Policy
Last updated: 7 June 2026
1. Who we are
PRISM Agency ("PRISM", "we", "us", "our") is a UK-based experiential staffing agency, registered company number 15904998, with its registered office in London U.K. We act as a data controller for personal information collected through our website, client intake and crew roster.
2. Data we collect
We collect information you provide directly — including name, contact details, company, project briefs, billing information and any data submitted via our contact forms — as well as limited technical data (IP address, device type, pages viewed, referral source) gathered through standard analytics. For crew applicants we additionally collect work history, identification, right-to-work documentation, banking details for payment, photographs and language skills.
3. How we use your data
Personal data is used to respond to enquiries, deliver and invoice for staffing services, vet and pay crew, maintain our talent roster, send operational updates relating to live bookings, comply with UK tax and employment law, and improve our website. We will only contact you for marketing purposes where you have opted in, and you can withdraw consent at any time.
4. Legal bases
We rely on (a) performance of a contract — to deliver staffing you have booked; (b) legitimate interests — to run, secure and improve the agency; (c) legal obligation — for tax, payroll, right-to-work and accounting records; and (d) consent — for optional marketing communications.
5. Sharing
We share limited information with vetted crew confirmed on your project, payroll and accounting providers, our IT and hosting suppliers, professional advisors, and regulators or law-enforcement bodies where legally required. We do not sell personal data. International transfers are protected by Standard Contractual Clauses or equivalent safeguards.
6. Retention
Client and crew records are retained for the duration of our relationship and for up to 7 years afterwards to satisfy HMRC and contractual obligations. Enquiry data from non-clients is deleted within 24 months of last contact. Roster profiles are removed on request or when a crew member becomes inactive for 24 months.
7. Your rights
Under UK GDPR you have the right to access, rectify, erase, restrict, port or object to processing of your personal data, and to withdraw consent. To exercise any of these rights email hello@prism-agency.co.uk. You may also lodge a complaint with the Information Commissioner's Office (ico.org.uk).
8. Cookies
Our site uses strictly necessary cookies to run, and anonymised analytics to understand traffic. No advertising or cross-site tracking cookies are set. You can disable cookies in your browser settings without affecting core site functionality.
9. Security
We use industry-standard technical and organisational controls — encrypted storage, access controls, vetted staff and NDAs — to protect personal data. No system is perfectly secure; we will notify affected individuals and the ICO of any qualifying breach within 72 hours.
10. Contact
Questions about this policy or our data practices? Email hello@prism-agency.co.uk or write to PRISM Agency, London U.K.