Last updated: 26 June 2025
JK Media Creative (“we”, “us”, “our”) is the data controller for personal data collected through this website and our services. We are committed to handling your data responsibly and in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy explains what data we collect, why we collect it, how long we keep it, and your rights. If you have any questions, contact us using the contact form on this website.
When you create an account we collect your email address and a password (stored as a one-way hash — we never have access to your plain-text password). You may optionally set a display name. We also record the date your account was created and the date you last logged in.
Lawful basis: Contract — this data is necessary to provide you with an account and to secure it.
When you purchase a production pack or buyout plugin we record the items bought, the amount paid, the currency, the order status, and the Stripe session and payment intent identifiers that link the order to your Stripe transaction. For production pack purchases we also record the licensed station name you provide, as this forms part of the licence agreement.
Card and payment details are handled entirely by Stripe and never pass through or are stored on our servers.
Lawful basis: Contract (fulfilling your purchase) and Legal obligation (retaining financial records as required by HMRC).
Each time a file is downloaded we log the item name, download type, a reference to your account (if logged in), your IP address, your browser user agent, and the timestamp. This log is used to enforce download limits, detect abuse, and to assist with support queries.
Lawful basis: Legitimate interests — enforcing licence terms and preventing unauthorised use of our content.
We operate two analytics systems:
Lawful basis: Legitimate interests — understanding how our website is used so we can improve it.
When you submit the contact form we collect your name, email address, station name, and your message. This information is forwarded to us by email and is not stored in our database. We use it solely to respond to your enquiry. The contact form is protected by Cloudflare Turnstile (see Third Parties below).
Lawful basis: Legitimate interests — responding to business enquiries.
We use a strictly necessary session cookie to keep you logged in during your visit. It contains only an anonymous session identifier — no personal data is stored in the cookie itself — and is removed when you log out or close your browser.
Google Analytics sets additional cookies to distinguish users and sessions across visits. These persist for up to two years. See the Google Analytics section above for opt-out options.
We use the following third-party services, each of which may process your data according to their own privacy policies:
Under UK GDPR you have the right to:
To exercise any of these rights, contact us via the contact form on this website. We will respond within one calendar month.
Passwords are stored using a strong one-way hashing algorithm and are never stored or transmitted in plain text. Sessions are protected against common attack vectors. Payment card data never passes through our servers. We take reasonable technical and organisational measures to protect your data, but no system can guarantee absolute security.
We may update this policy from time to time. The “Last updated” date at the top of this page will reflect any changes. Continued use of our website and services after a change is published constitutes acceptance of the revised policy.