Privacy policy

Last updated: 1 September 2026

Who I am

I am Ting Lok Lau, trading as Lokky Lau. I am responsible for deciding how the personal information covered by this policy is used.

This policy covers lokkylau.com and personal information handled in connection with my acting work, creative and theatre projects, arts project support, professional enquiries, registrations of interest, digital resources and other products.

For questions about this policy or how your personal information is used, please contact me at:

Email: hello@lokkylau.com
Website: https://lokkylau.com

Personal information I may collect

Depending on how you contact or work with me, I may collect:

• your name, email address, telephone number and other contact details;
• details of your enquiry, registration of interest, booking or purchase;
• professional and project information, including briefs, applications, plans, budgets, timelines, biographies, meeting notes and supporting documents;
• your postal or billing address where needed;
• invoice, payment and transaction information, including bank details where required to make or receive a payment;
• emails and other correspondence, including enquiries, feedback, concerns and records of decisions;
• your preferences and records of consent where you choose to receive updates; and
• technical information recorded by the website or hosting provider, such as your IP address, browser or device information, pages requested and the date and time of a request.

I do not collect card details through this website.

The website does not provide public visitor accounts, public comments or a public contact form. Contact is primarily by email.

Project materials may contain professional or contact information about collaborators and other people involved. I use that information only for the agreed work and where it has been shared appropriately.

I do not ask for special category personal information through this website. If this information is provided or discussed as part of agreed project work, I will process it only as necessary for the agreed purpose and where data protection law permits.

How and why I use personal information

I may use personal information to:

• communicate with you and respond to your enquiry;
• record your interest and provide updates you have chosen to receive;
• discuss your enquiry and make the necessary arrangements before we agree to work together;
• arrange and deliver acting, creative or arts-project services and agreed project work;
• provide digital resources or other products;
• manage bookings, project materials, correspondence, budgets, schedules and professional relationships;
• prepare invoices, receive payments and maintain accounting and tax records;
• operate, maintain and protect the website and related accounts;
• consider feedback and respond to concerns, complaints, disputes or legal claims; and
• comply with legal, tax, accounting or regulatory requirements.

Lawful bases

UK data protection law requires a lawful basis for using personal information. You can choose whether to provide it. Certain information may be needed for me to respond fully or provide an agreed service or product. Depending on the circumstances, I rely on:

Contract: where information is needed to take steps you have requested before an agreement is made or to provide a service or product that you and I have agreed. An agreement may be written, verbal or otherwise clearly established.

Legal obligation: where information must be kept or used to comply with tax, accounting or other legal requirements.

Legitimate interests: where using information is reasonably necessary to respond to non-contractual enquiries, manage professional relationships, improve how services are organised and delivered, protect the website and related accounts, maintain proportionate records or establish, exercise or defend legal claims. I consider why the information is needed and how its use may affect you. I will not rely on legitimate interests if using your information would unfairly affect your privacy or other rights.

Consent: where you choose to register an interest or receive updates. You may withdraw your consent at any time by emailing hello@lokkylau.com.

Registrations of interest and updates

If you register an interest in a service or future release, I may retain your name, email address, the subject of your interest and a record of your consent. I use this information only for the updates you requested, and you may unsubscribe at any time by emailing hello@lokkylau.com.

I do not buy or use third-party marketing lists.

Website operation, cookies and technical information

This website does not use third-party visitor analytics, advertising pixels or behavioural advertising. It does not provide public accounts, public comments or a public contact form. Essential technical cookies or similar technologies may be used where needed for website security or basic operation.

The website is hosted by Hostinger UK Limited. Hostinger may process technical information, including IP addresses and server or security logs, to host, secure and operate the website.

LiteSpeed Cache is used to improve performance by temporarily caching copies of public pages.

Showreel and YouTube

The showreel is initially presented using a thumbnail image stored on this website. Simply viewing the page does not load the YouTube player or make a request to YouTube.

If you select Play, a YouTube player loads within this website using YouTube’s privacy-enhanced mode. Google and YouTube may then receive and process information such as your IP address, browser and device information, viewing activity, information associated with your Google account if you are signed in, and cookies or similar technologies.

If you follow a link from the player to YouTube, you will leave this website.

For more information, see the Google Privacy Policy.

Email and external links

Emails sent to hello@lokkylau.com are transmitted and stored using Zoho’s business email service. Emails may contain your contact details, message content and attachments.

This website includes links to external websites, professional profiles and email addresses. If you follow one of these links or email another person or organisation, you are communicating directly with that recipient. Their own privacy information explains how they use and protect anything you provide to them.

Where personal information comes from

Most personal information comes directly from you when you contact me with an enquiry, register an interest, engage a service or purchase a resource or product.

Occasionally, a professional contact may provide information relevant to an enquiry or agreed work, for example, an agent forwarding casting or booking details or a project lead sharing contact details for a collaborator. I use it only for the purpose for which it was provided.

Technical website information may be recorded automatically by the website and its hosting infrastructure.

Who personal information may be shared with

Where necessary, personal information may be shared with:

• Hostinger UK Limited, for website hosting, storage, backups, security and technical infrastructure;
• Zoho Corporation Limited, for business email hosting and the storage and transmission of correspondence;
• Google LLC, through Google services including Google Drive, Google Docs and Google Sheets, where project documents, correspondence, budgets, invoices and other working files may be stored, shared or collaboratively edited;
• Google LLC, when you choose to load and play the embedded YouTube showreel, as explained above;
• agents, producers, casting professionals, arts organisations, funding bodies, venues or project collaborators where sharing is necessary for an agreed service or project, or has been authorised;
• professional advisers, insurers, regulators, HM Revenue and Customs, courts or other organisations where sharing is required by law or reasonably necessary to handle a legal claim; and
• the public through this website, professional profiles or social media where publication has been appropriately agreed, for example, project credits, photographs or testimonials.

I do not sell personal information. Information is shared only where it is relevant and proportionate to the purpose.

International transfers

Where personal information is transferred outside the UK, the relevant provider uses safeguards permitted under UK data protection law. Depending on the destination and provider, these may include UK adequacy regulations, recognised data bridges or appropriate contractual safeguards. Further information is available in Hostinger Data Processing Addendum, Zoho UK Privacy Policy and Google Data Transfer Frameworks.

How long personal information is kept

The following are standard maximum retention periods. Information may be deleted earlier when it is no longer needed or retained longer where required by law or because of an unresolved dispute or active legal claim.

• General enquiries that do not lead to work: up to twelve months after the last meaningful contact.
• Registrations of interest and update preferences: until you withdraw consent, the relevant list is discontinued or there has been no meaningful engagement for twenty-four months.
• Service, client and project records: up to six years after the service or project ends.
• Orders and digital-product records: up to six years after the transaction or customer relationship ends.
• Invoices, payment and tax records: up to six years after the end of the relevant tax year.
• Complaints, disputes and legal claims: up to six years after the matter is resolved, or longer while legal proceedings remain active.
• Website security and technical logs: according to the retention period applied by the relevant provider, or for as long as needed to investigate a security incident.

Information about other people is kept for the same period as the relevant enquiry or project. If you unsubscribe or withdraw your consent, I may keep the minimum information needed to ensure that no further updates are sent.

How personal information is protected

I take practical and proportionate steps to protect the information I handle. These include password-protected accounts, restricted file sharing, software updates, reputable service providers and limiting access to what is needed for an agreed purpose.

No method of internet transmission or electronic storage can be guaranteed to be completely secure. If I become aware of a personal data breach, I will assess it and take any action required by data protection law.

Your data protection rights

Depending on the circumstances and the lawful basis being used, you may have the right to:

• ask for a copy of your personal information;
• ask for inaccurate or incomplete information to be corrected;
• ask for information to be deleted;
• ask for the use of information to be restricted;
• receive certain information you provided in a reusable electronic format; and
• withdraw consent at any time where information is used on the basis of consent.

Your right to object: You may object to the use of your information where it is based on legitimate interests. You may object to direct marketing at any time.

These rights are subject to legal conditions and exemptions. For example, some information may need to be retained for tax requirements or legal claims.

If you would like to exercise any of these rights, please contact me at hello@lokkylau.com. I may ask for enough information to confirm your identity before acting on your request. I will respond within one calendar month. If the law allows additional time, I will explain why and confirm the revised response date.

Changes to this policy

I will review this policy when the website, services or use of personal information changes. The date at the top shows when it was last updated.

If personal information is to be used for a materially different purpose, this policy and any information provided when the information is collected will be updated before that use begins.

Questions, concerns and complaints

If you have a question, concern or data protection complaint, please contact me at hello@lokkylau.com. I will acknowledge receipt of a data protection complaint no later than thirty days after receiving it, investigate it without undue delay, keep you informed of progress and explain the outcome.

If you remain unhappy with how your information has been handled, you can also make a complaint to the Information Commissioner’s Office.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: Make a data protection complaint