VID helps marketing teams produce consistent, sales-aligned video. From one essential video asset to a fully installed video operating system. We build it, run it, or teach you how.
Effective date: April 7, 2026
Organization: VID, operated by Content Supply LLC
Website: vid.co
Contact: support@contentsupply.com
Introduction
VID (vid.co), operated by Content Supply LLC, is committed to protecting the personal data of every individual who interacts with our website, our services, and our team. This Data Protection Policy sets out how we collect, store, use, protect, and dispose of personal data — and the responsibilities we hold as a data controller under applicable data protection law.
This policy applies to all personal data processed by VID, whether collected through vid.co, our client portal at app.vid.co, our email communications, our service engagements, or any other channel through which individuals interact with our business.
This policy should be read alongside our Privacy Policy, which is available at vid.co/privacy.
Who This Policy Applies To
This Data Protection Policy applies to:
Our Commitment
VID is committed to the following principles in all data processing activities:
Personal data is collected and processed lawfully, fairly, and transparently. We do not collect data for any purpose that is not documented and disclosed.
Personal data is collected only for specified, explicit, and legitimate purposes. We do not use data in ways that are incompatible with the purpose for which it was originally collected.
Personal data collected is adequate, relevant, and limited to what is necessary for the purpose. We do not hold data we do not need.
Personal data is kept accurate and up to date. Where we become aware that data we hold is inaccurate, we take reasonable steps to correct or delete it without delay.
Personal data is kept only for as long as is necessary for the purpose for which it was collected. We do not retain data indefinitely.
Personal data is processed in a manner that ensures appropriate security — including protection against unauthorised or unlawful processing and against accidental loss, destruction, or damage.
Data Controller
Content Supply LLC is the data controller for all personal data collected and processed through VID's website, services, and communications. As data controller, Content Supply LLC determines the purposes and means of processing personal data and is responsible for ensuring that processing activities comply with applicable data protection law.
Data controller contact:
Content Supply LLC
vid.co
Legal Bases for Processing
VID processes personal data only where a lawful basis exists under Article 6 of the General Data Protection Regulation (GDPR). The legal bases we rely on are:
Consent — Where an individual has given clear, informed consent for us to process their personal data for a specific purpose. Examples include subscribing to VID's email list, downloading a resource or guide, or submitting an enquiry form. Consent can be withdrawn at any time by contacting support@contentsupply.com or using the unsubscribe mechanism in any marketing email.
Contractual necessity — Where processing is necessary to perform a contract with the individual or to take steps at their request before entering a contract. Examples include onboarding a new client, delivering a service engagement, or processing payment information.
Legal obligation — Where processing is necessary to comply with a legal obligation to which VID is subject. Examples include retaining financial records for tax compliance purposes.
Legitimate interests — Where processing is necessary for the purposes of VID's legitimate business interests, provided those interests are not overridden by the rights and interests of the individual. Examples include using contact data to follow up on a service enquiry, or processing analytics data to improve the performance of our website.
Categories of Personal Data We Process
VID collects and processes the following categories of personal data:
Identity data — First name, last name, job title, company name, and LinkedIn profile information provided through forms, applications, or direct communication.
Contact data — Email address, phone number, and business address provided through forms, applications, client onboarding, or direct communication.
Financial data — Payment information, billing address, and invoice details collected for the purpose of processing payments for VID's services. Payment card data is processed through PCI-compliant third-party payment processors. VID does not store full payment card numbers.
Usage data — Information about how individuals use vid.co, including pages visited, time spent on pages, content downloaded, and navigation patterns — collected through cookies and analytics tools.
Communications data — The content of emails, messages, and form submissions sent to VID, retained for the purpose of responding to enquiries and maintaining a record of client communication.
Service engagement data — Information collected and produced as part of delivering VID's services, including strategic documents, brand frameworks, production briefs, and project records.
Preference data — Information about an individual's communication preferences, content interests, and marketing opt-in status.
How Personal Data Is Collected
VID collects personal data through the following channels:
Directly from individuals — When they complete a form on vid.co, submit a service application, download a guide or resource, subscribe to email communications, contact VID directly by email, or engage with VID through social platforms.
Through service delivery — When a client engages VID for a service, additional data is collected as part of the onboarding, strategy, and production process.
Automatically through the website — Usage data is collected automatically when individuals visit vid.co through cookies, analytics tools, and server logs.
Through third-party platforms — When individuals interact with VID through platforms such as LinkedIn, where VID's content or direct communication generates contact or engagement data.
How Personal Data Is Used
VID uses personal data only for the purposes for which it was collected. Those purposes include:
Responding to enquiries and applications submitted through vid.co or direct communication channels.
Delivering contracted services — including strategy sessions, production engagements, and ongoing operations — to current clients.
Processing payments and maintaining financial records for completed engagements.
Sending marketing communications — newsletters, resource notifications, and service updates — to individuals who have opted in to receive them.
Improving the performance and user experience of vid.co through analytics data.
Maintaining the security of vid.co and app.vid.co and preventing fraudulent or unauthorised activity.
Complying with legal obligations, including tax and financial reporting requirements.
Data Retention
VID retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law.
Enquiry and lead data — Retained for 24 months from the date of the most recent interaction, after which it is securely deleted unless the individual has entered a client relationship or remains an active subscriber.
Client engagement data — Retained for the duration of the client engagement and for five years following the close of the engagement for legal, financial, and reference purposes.
Financial records — Retained for seven years in accordance with standard accounting and tax compliance requirements.
Marketing subscriber data — Retained for as long as the individual remains an active subscriber. Upon unsubscribe, contact data is removed from active marketing lists within 30 days. Suppression records are retained to prevent re-subscription without explicit re-consent.
Website analytics data — Retained in aggregate, anonymised form. Individual-level session data is not retained beyond 26 months.
When data is no longer required, it is securely deleted or anonymised in a manner that prevents reconstruction of individual identity.
Data Storage and Security
VID stores personal data on secure servers and uses industry-standard security measures to protect it from unauthorised access, loss, destruction, or disclosure.
Security measures in place include:
Encrypted data transmission via HTTPS across all VID web properties.
Password-protected access to all systems containing personal data, with multi-factor authentication required for administrative access.
Role-based access controls ensuring that personal data is accessible only to employees and contractors who require it to perform their specific responsibilities.
Regular review of third-party platforms and service providers to confirm that their data security standards are appropriate for the data shared with them.
Confidentiality obligations for all employees and contractors who have access to personal data, enforceable through employment and contractor agreements.
Prompt investigation and response to any suspected or confirmed data security incident, including notification to affected individuals and relevant supervisory authorities where required by law.
While VID takes all reasonable precautions to protect personal data, no internet transmission or electronic storage system is completely secure. We cannot guarantee absolute security but commit to managing risks responsibly and responding to incidents promptly.
Data Sharing and Third Parties
VID does not sell personal data to third parties under any circumstances.
VID may share personal data with third parties only in the following circumstances:
Service providers and processors — Third-party platforms and tools used to deliver VID's services or operate its business, including payment processors, email marketing platforms, project management systems, customer relationship management tools, and website analytics providers. All third-party processors are required to handle personal data in accordance with applicable data protection law and VID's data processing requirements.
Legal requirements — Where disclosure is required by law, court order, or regulatory authority.
Legal proceedings — Where disclosure is necessary to establish, exercise, or defend legal rights.
Business transfer — In the event that Content Supply LLC is acquired, merged, or sold, personal data held by VID may be transferred to the acquiring entity as part of the transaction. Individuals will be notified of any such transfer and their rights under applicable law will be preserved.
Where VID engages third-party data processors, data processing agreements are in place confirming the processor's obligations regarding data security, purpose limitation, and compliance with applicable law.
International Data Transfers
Where personal data is transferred outside the European Economic Area (EEA) or the United Kingdom, VID ensures that appropriate safeguards are in place to protect the data in accordance with GDPR requirements. These safeguards may include standard contractual clauses approved by the European Commission, adequacy decisions, or other legally recognised transfer mechanisms.
Your Rights
Under the GDPR and applicable data protection law, individuals have the following rights in relation to their personal data:
Right to be informed — You have the right to be told how your personal data is being collected and used. This policy, together with our Privacy Policy, fulfils that obligation.
Right of access — You have the right to request a copy of the personal data VID holds about you, along with information about how it is being used. Requests will be responded to within 30 days.
Right to rectification — You have the right to request that inaccurate or incomplete personal data held by VID be corrected or completed.
Right to erasure — You have the right to request that VID delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where no other lawful basis for processing exists.
Right to restrict processing — You have the right to request that VID restrict the processing of your personal data in certain circumstances — for example, while a complaint about the accuracy of your data is being resolved.
Right to data portability — Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transfer that data to another controller.
Right to object — You have the right to object to the processing of your personal data where VID relies on legitimate interests as the legal basis, and to object to processing for direct marketing purposes at any time.
Rights related to automated decision-making — VID does not make decisions about individuals using solely automated processing that produce legal or similarly significant effects. Where any automated processing is used, individuals retain the right to request human review.
To exercise any of these rights, contact VID's Data Protection Officer at support@vid.co. We will respond to all requests within 30 days. In complex cases, we may require an additional 60 days and will notify you of any extension within the initial 30-day period.
We may request proof of identity before fulfilling any data subject rights request to ensure that personal data is not disclosed to an unauthorised party.
Cookies
VID uses cookies on vid.co to improve the user experience, analyse site performance, and support marketing activities. A full description of the cookies used on vid.co, their purposes, and how to manage your cookie preferences is set out in our Privacy Policy and in the cookie consent notice displayed when you first visit the site.
You can manage or withdraw your consent to non-essential cookies at any time through your browser settings or the cookie preference centre on vid.co.
Children
VID's website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that personal data has been collected from a child under 16 without verifiable parental consent, that data will be deleted promptly. If you believe a child under 16 has provided personal data to VID, please contact us at support@contentsupply.com.
Data Breach Response
In the event of a personal data breach, VID will:
Contain and assess the breach as promptly as possible following discovery.
Notify the relevant supervisory authority within 72 hours of becoming aware of a breach that poses a risk to the rights and freedoms of individuals, in accordance with GDPR Article 33.
Notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms, in accordance with GDPR Article 34.
Document all breaches — including those that do not require notification — in VID's internal breach register, recording the facts of the breach, its effects, and the remedial action taken.
All suspected or confirmed data breaches should be reported immediately to support@contentsupply.com
Policy Review and Updates
This Data Protection Policy is reviewed annually and updated as necessary to reflect changes in applicable law, regulatory guidance, or VID's data processing activities. The effective date at the top of this policy indicates the date of the most recent review.
Material changes to this policy will be communicated to active clients and subscribers by email. All users are encouraged to review this policy periodically.
Complaints
If you have a concern about how VID handles your personal data and we have not resolved it to your satisfaction, you have the right to lodge a complaint with the relevant supervisory authority:
United Kingdom: Information Commissioner's Office (ICO) — ico.org.uk
Ireland: Data Protection Commission — dataprotection.ie
European Union: The supervisory authority in your country of residence or the country where the alleged infringement occurred.
VID welcomes the opportunity to resolve concerns directly before a formal complaint is made. Please contact us at support@contentsupply.com in the first instance.
Contact
All data protection enquiries, subject access requests, consent withdrawals, and complaints should be directed to:
Data Protection Officer
Content Supply LLC — VID
VID helps marketing teams produce consistent, sales-aligned video. From one essential video asset to a fully installed video operating system. We build it, run it, or teach you how.