Who we are
CampusTV is the student TV station at the University of Bath, part of SU Bath Media. We run the booking form at campustv.co.uk/book and decide what is done with what you send us.
What we collect, and why
When you book, we ask for your name and email address, the event (its name, date, venue and the services you want) and, unless it is a personal shoot, your society or organisation. Your phone number, times, venue and notes are optional. We also keep the version of the coverage terms you accepted and when you accepted them.
We use these details to reply, decide whether we can cover the event, plan the crew and send you updates on the booking. Our basis for this is that you asked us to cover an event and we need the details to do it (UK GDPR Article 6(1)(b)).
We do not ask for your date of birth, home address, student number, payment details or anything sensitive. Please do not put other people’s personal details in the notes box.
Visit counting and abuse limits
We count visits to the booking page so we can tell whether a poster or QR code worked. A visit records the page, the website you came from (the host only), a source tag such as a poster name, and whether you used a phone, tablet or computer. Your visit is stored as a scrambled code made from your connection and browser with a value that changes every day, so we cannot tell who you are or link one day to the next. Nothing is stored on your device.
To stop the form being misused, we keep a record of your connection and the email address you entered for 1 day, so we can limit how many requests and receipts one connection or address can generate. The connection record is scrambled before it is stored. Our basis is our legitimate interest in running the service and protecting it from misuse (Article 6(1)(f)).
Who can see it
Only CampusTV team members who have been given access to booking requests. Your request is saved in a database in Ireland and the site runs on servers in London. We use a small number of providers to do this: Supabase (database), Oracle Cloud (hosting and backups), Cloudflare (network protection) and Resend (sending email). They process your details only to provide those services for us. Resend may handle email outside the UK. We do not sell your details or use them for marketing.
Your booking has a private status link. Anyone with the link can see how the request is going, but not our notes, prices or crew.
How long we keep it
- Requests we declined, that were withdrawn, or that never got a reply: deleted 12 months after the last change.
- Requests we accepted: deleted 24 months after the event date.
- Visit records: deleted after about 13 months.
- Abuse-limit records: deleted after 1 day.
- Backups: deleted after 60 days, so a deletion reaches the backups within that time.
Your rights
You can ask to see the details we hold about you, correct them, or have them deleted, and you can object to how we use them. Email ctv-manager@bath.ac.uk and we will reply within 1 month. If you are not happy with how we handled something, you can complain to the Information Commissioner’s Office at ico.org.uk. Footage and photographs are covered separately by clause 4.4 of the coverage terms.