Privacy policy

Last updated: October 2026

Who we are

Film Business School (filmbusinessschool.com) is run by Erroneous Wit Limited, a company registered in England and Wales (company number 09146758), registered office Second Floor, 201 Haverstock Hill, London NW3 4QG. We're responsible for your personal data, which makes us its 'controller'.

For questions or requests about your data, email [email protected].

What we collect, and where it comes from

From you:

• Your name and email address, when you register for the webinar, download something free, join a waiting list or buy a course.
• Anything you tell us in a form, such as which description fits you or how you heard about us.
• What you bought, when, for how much, and any refund, plus the billing details the checkout asks for. Payment goes through Kajabi's checkout to Stripe, and we never see your full card number.
• Emails you send us.

From the services we use:

• Kajabi: which pages and course material you've opened, whether our emails reached you and were opened, and which links you clicked.
• Zoom: the name and email you join with, whether you joined and for how long, and anything you type in the chat or Q&A.
• Technical details, such as your IP address and browser, which these services log to run and protect the site.

From other organisations:

• LinkedIn: if you fill in a LinkedIn form for one of our free downloads, LinkedIn passes us your name, email address, any answers you give (such as your job title) and whether you ticked the box asking for our emails.

We don't ask for sensitive information, such as health details. Please don't include any in forms or sessions.

Live sessions, the webinar and recordings

The webinar and the live course sessions run on Zoom and are recorded. Others in a session can see your name, and your face and voice if you turn your camera or microphone on. If you speak, ask a question out loud or turn your camera on, you'll appear in the recording.

If you'd rather not, keep your camera off, change your display name to your first name, and type your questions instead. We read typed questions out by first name only. Please don't share anything about your own projects that you wouldn't want the class to keep.

The class can refer back to the course recordings in the course area for 12 months after the last session, until Friday 28 January 2028. The webinar recording is emailed to everyone who registered. Until Friday 8 January 2027, anyone who signs up for the webinar or downloads our free report can watch it, and buyers also have it in the course area.

We may also use recordings in later runs of the course and in other Film Business School courses. Apart from the webinar recording that buyers of the January 2027 course get, any version used outside your own class or webinar shows only Stephen and Phil. We take out everyone else, and anything that would identify them or their project, unless they've agreed to stay in. If you agree and later change your mind, email us and we'll take you out of later versions.

Why we use your data, and the legal basis

The law asks us to give a reason, called a 'legal basis', for each use.

• To run the webinar or send the download you asked for: the joining link, reminders and the recording. Basis: legitimate interests (giving you what you asked for).
• To sell you a course and give you access: the checkout, receipt, course area, joining details, Foundations when it opens, and support. Basis: contract.
• To apply our refund terms. After the first 14 days, they depend on whether you've opened course material, watched a recording or joined a live session, so we check your course activity and Zoom attendance. Basis: contract.
• To record sessions, give the class and registrants the recordings, and use edited recordings in later courses. Basis: legitimate interests (letting people catch up and refer back, and building our courses). If you agree to stay in an edited recording, we rely on your agreement (consent) for that.
• To send you emails about our courses. Basis: consent, as explained under "Your choices about emails" below.
• To see which emails, pages, posts and ads lead to sign-ups and sales, using tracked links, the links you click and what you tell us about how you found us. We also group people by what they tell us, such as the budget of the film they're working on, so they get the emails that fit them. Basis: legitimate interests (spending our time and ad money where it works, and not sending people emails that don't fit).
• To leave buyers out of sales reminders for a course they already have. If you buy and you're on Stephen's newsletter list, we may use your email address there to leave you out of reminder emails about that course. Basis: legitimate interests (not pestering customers).
• To keep the site and forms secure and free of spam. Basis: legitimate interests (security).
• To keep a 'do not email' record after you unsubscribe, so we don't email you again by mistake. Basis: legitimate interests (respecting your choice).
• To keep the records the law requires, such as sales records for tax. Basis: legal obligation.
• To deal with complaints and legal claims. Basis: legitimate interests.

Where we rely on legitimate interests, we've weighed them against your rights, and you can object, as explained under "Your right to object" below.

Your choices about emails

Some emails are part of something you asked for or bought, such as the report, joining details, reminders, the webinar recording, receipts and course access. The report and webinar ones also mention our webinar and the course.

From this site, we only send other emails about our courses to people who've asked for them by ticking the box on a sign-up form, a LinkedIn form or the checkout. If the box said how long, such as until enrolment closes, we stop then. If you join a waiting list, you'll also get one email when that course opens.

Every marketing email has an unsubscribe link, or you can email us. Joining details for a course you've bought are always in your course area, whatever you choose about emails.

Our emails contain a tiny image and tracked links, which show us whether you opened an email and which links you clicked.

Stephen's newsletter is separate. It's sent through Substack, under Substack's own terms and privacy policy.

Who we share it with

We don't sell your data.

Organisations that work for us, only on our instructions and under contract:

• Kajabi: the website, forms, checkout, course area and course emails.
• Zoom: the webinar and live sessions, including recordings.
• Google Workspace: our email and documents.
• Our marketing agency and freelancers, who build and run the site, emails and ads and prepare our sales reports.
• Our accountant.

The people who teach:

• Phil Hunt, who teaches the course with Stephen. He sees who is in the sessions and what's said there, and uses it only for the course.

Organisations that also use data for their own purposes, under their own privacy policies:

• Stripe, which handles payments through Kajabi's checkout and uses payment details to prevent fraud and meet its legal duties.
• Google reCAPTCHA, which checks our sign-up forms for spam.
• Substack, which sends Stephen's newsletter. If you buy and you're on his newsletter list, we may use your email address there, only to leave you out of reminder emails about that course.
• LinkedIn, if you fill in a LinkedIn form, or if you accept cookies on this site (see Cookies below).

We may also share data with HMRC, other authorities or professional advisers where the law requires it, or to deal with a legal claim.

International transfers

Some of these organisations are in the US or store data there. Stripe, Zoom and Substack are certified under the UK Extension to the EU-US Data Privacy Framework (the 'UK-US data bridge'), and we rely on that. For the others, we rely on the same certification where they have it, or on contract terms the UK has approved (the International Data Transfer Agreement, or the UK Addendum to the EU standard contractual clauses). Email us for more detail or a copy of these safeguards.

How long we keep it

• Course emails: until you unsubscribe, or 2 years after you last clicked a link in one of our emails, whichever comes first.
• Webinar and download sign-ups who didn't ask for course emails, or whose box was only until enrolment closes: we keep your details until enrolment closes on Friday 8 January 2027, and delete them 3 months after that.
• Details from LinkedIn forms: as for the two lines above, depending on whether you ticked the box.
• 'Do not email' list: your email address only, for as long as we send emails.
• Buyers: your course account and course activity for as long as you have access to anything you bought. Purchase and refund records for 6 years after the end of the financial year they belong to, for tax.
• Recordings: the full recordings of the webinar and of the course sessions until Friday 28 January 2028. Edited recordings that show only Stephen and Phil (and anyone who has agreed to stay in) for as long as we run our courses.
• Zoom chat and attendance records: until Friday 28 January 2028.
• Emails you send us: 2 years, or 6 years if they're about a purchase or refund.

Do you have to give us your data?

We need your name and email address to register you or sell you a course. Without them we can't send joining details or give you access. Other questions on our forms are optional.

We don't make decisions about you by purely automated means that have legal or similarly significant effects.

Your rights

You can ask us for a copy of your data. You can also ask us to correct it, delete it, limit how we use it, or send it to you or another organisation in a usable format. Where we rely on your consent, you can withdraw it at any time, and this doesn't affect what we did before. Email [email protected]. It's free, and we'll normally reply within a month. If a request is complex and we need longer, we'll tell you why.

Your right to object

You can object at any time to us using your data for marketing, and we'll stop. You can also object to any use we base on legitimate interests. We'll stop unless we have a compelling reason that outweighs your interests, or we need the data for a legal claim. Unsubscribe from any email, or email [email protected].

Cookies

Kajabi uses cookies the site needs to work, such as keeping you logged in, running the checkout and protecting the site from bots. Stripe uses cookies at checkout to prevent fraud, and Google reCAPTCHA, which checks our forms for spam, uses them too. Our cookie banner, run by CookieScript, stores your choice in a cookie so it doesn't ask you again.

With your permission, we also use LinkedIn's Insight Tag. It shows us which of our LinkedIn ads brought people to this site, and lets us show our ads on LinkedIn to people who've visited. It's off unless you click Accept on the cookie banner, and you can change your mind at any time using the cookie icon in the corner of the page. LinkedIn explains how it uses this data at linkedin.com/legal/privacy-policy.

Complaints

Please tell us first at [email protected]. We'll acknowledge your complaint within 30 days and tell you what we've done about it. You can also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113). If you live in the EU, you can complain to your local data protection authority too.

Changes

If we change this policy, we'll update this page and the date at the top. If a change affects how we use data you've already given us, we'll email you first.