LEGAL /
Privacy &
policies.
How 10XF handles personal information, payments and website choices.
Privacy Policy
Last updated: 16 September 2026
10XF LTD, trading as 10XF Productions, is the controller for personal information we decide how and why to use. Company number 16667634. Registered in England and Wales. Registered office: 2nd Floor College House, 17 King Edwards Road, Ruislip, London, HA4 7AE, United Kingdom.
We may collect contact and business details, project and enquiry information, correspondence, files supplied for a project, payment records and limited technical information needed to run and protect the website.
We use this information to respond to enquiries, prepare and perform projects, manage client relationships, take and record payments, meet legal obligations, protect our business and improve the website when you have chosen optional analytics. Our lawful bases depend on the context and may include taking steps towards or performing a contract, legitimate interests, legal obligations and consent where required.
We may share information only where needed with authorised personnel, contractors and production partners, hosting, email, storage, payment, accounting and professional-service providers, or authorities where required by law. We keep information only for as long as needed for the relevant purpose, legal record-keeping or resolving a dispute.
You may ask about your personal information or exercise applicable data-protection rights by emailing privacy@10xfproductions.com. Privacy enquiries sent there may receive a reply from another authorised 10XF business email address. You may also complain to the UK Information Commissioner’s Office.
Please do not send passwords, full payment-card details, identity documents or sensitive personal information through the website contact form unless we have specifically asked for it through an appropriate route.
Payment & Security
Payment terms, currencies, cancellations and refunds are set out in the Terms & Conditions. We do not ask clients to send full payment-card details by email or through the contact form. Where a third-party payment provider is used, that provider processes payment information under its own security and privacy terms.
10XF does not operate a public website checkout. After the project scope is agreed, we normally send a quote and then an invoice or third-party payment link directly to the client. Before requesting payment, we obtain written acknowledgement of the project terms, including that the services are being bought wholly or mainly for business or professional purposes and that the client accepts the Refund & Cancellation terms. We keep appropriate project records such as the client or company, quote or project reference, accepted Terms version, acceptance correspondence and payment reference.
Cookie Policy
We use a session-only preference record so the site can remember your analytics choice while your browser session remains open. It is essential to applying that choice. Optional Google Analytics is not loaded unless you choose “Accept all” or enable Analytics in Cookie settings.
You can accept all, reject non-essential technologies or manage your choice at any time through Cookie settings. Rejecting optional analytics does not stop the website or contact form working.
Google Calendar is not embedded on page load. It opens only after you actively choose to book an appointment. The Work page loads YouTube thumbnails; on compatible pointer devices, hovering may load a muted preview, while clicking or tapping loads the full player. When you interact with the contact form, Cloudflare Turnstile runs as part of the security check alongside server-side validation, a honeypot, timing checks, rate limiting and duplicate-submission protection. It helps prevent bots and other abuse and may process technical, browser and network information needed to assess whether a submission is legitimate.
Current technology inventory
| Name | Provider | Purpose | Category | Party | Retention |
tenxf.analyticsConsentSession | 10XF | Remembers the current-session analytics choice | Essential preference | First-party session storage | Browser session |
_ga | Google Analytics | Distinguishes website visitors for measurement | Optional analytics | First-party cookie set by the Google Analytics tag | 400 days from set or update |
_ga_TPZMKDC7KZ | Google Analytics | Stores session state for this GA4 measurement stream | Optional analytics | First-party cookie set by the Google Analytics tag | 400 days from set or update |
Fresh-browser audit on 16 September 2026: no Google Analytics cookies were present before consent. After acceptance, only the two Google Analytics cookies listed above were recorded. The Contact page loads Cloudflare Turnstile for security and abuse prevention.