Privacy and Cookie Policy

This Privacy & Cookie Policy explains how we collect, use, share and protect personal data when you use:

  • our websites (including lwks.com and related sites/pages);
  • Lightworks accounts and services (including app.lwks.com); and
  • the Lightworks software and any online features that connect to our services (together, the "Services").

If you use Lightworks on behalf of a company or organisation, your employer/organisation may also have its own policies that apply.

 

1. what data we collect

A) Data you give us

  • Account and contact data: name, email address, password (stored securely), organisation, country, and communication preferences.
  • Purchases and billing: purchase history, billing address, VAT details (where applicable), payment status/transaction references.
  • Support and communications: messages you send us (email/forms), support requests, and any files/logs you choose to provide for troubleshooting.
  • Content you store or share via Online Features (if you use them): files and related metadata (e.g., file names, timestamps, sharing settings, access controls, and sharing recipients).

 

B) Data we collect automatically (websites and services)

  • Device and usage data: IP address, browser type, device identifiers, pages viewed, referral URLs, timestamps, and performance data.
  • Cookies and similar technologies: see Section 9.

 

C) Software analytics (Lightworks application) - opt-in only

Lightworks application analytics are optional and off by default. We only collect analytics from the application if you explicitly opt in when presented with the choice during installation or in settings.

If you opt in, analytics may include:

  • app and system configuration: OS version, app version/build, language/locale;
  • device characteristics (to help diagnose performance and stability): for example CPU type/core count, RAM amount, GPU model/driver version, storage type, display configuration, and connected peripheral information relevant to media workflows;
  • feature usage and interaction patterns: which tools/features are used and general workflow signals;
  • stability/performance signals: crash reports, error codes, hang reports, load times; and
  • limited diagnostic logs necessary to improve reliability and security.

You can turn analytics off later in the Software settings. If you do not opt in (or later opt out), we do not collect application analytics.


2. how we use your data (purposes)

We use personal data for:

  • Providing the Services: creating and managing accounts, licensing/activation, downloads/updates, and enabling Online Features.
  • Processing purchases and managing subscriptions/perpetual licences: billing, invoicing, payment processing, fraud prevention, refunds (where applicable), and customer administration.
  • Support and troubleshooting: responding to requests, diagnosing issues, and providing customer service.
  • Improving and securing our products: service monitoring, security measures, preventing fraud/abuse, and product improvement (including analytics where enabled).
  • Marketing and communications (where permitted): sending product news, offers and updates by email where you've asked for them or where otherwise permitted by law. You can opt out at any time.
  • Legal and compliance: meeting legal obligations, enforcing our terms, and protecting rights, users and systems.


Data minimisation and accuracy: we aim to collect only what we need for the purposes above and to keep personal data accurate and up to date. If you believe we hold inaccurate data about you, please contact us. 

 

3. lawful bases (uk gdpr)

We rely on the following lawful bases depending on context:

  • Contract: to provide the Services you request (e.g., account, licensing, purchase fulfilment, Online Features).
  • Legitimate interests: to operate, improve and secure our Services, prevent fraud/abuse, and run our business responsibly (balanced against your rights).
    • Balancing statement: where we rely on legitimate interests, we assess that our interests are not overridden by your rights and freedoms. You can request information about this assessment by contacting us.
  • Consent: where required, such as for non-essential cookies and optional application analytics where you opt in.

Legal obligation: where we must comply with law (tax, accounting, lawful requests, etc.). 

 

4. how long we keep data (retention)

We keep personal data only as long as necessary for the purposes in this policy, including:

  • Account data: while your account is active, and for a reasonable period after closure for security, fraud prevention, dispute handling and compliance.
  • Purchase records: retained for statutory accounting and tax periods.
  • Support records: retained as needed to resolve issues and maintain service history.
  • Website analytics: retained according to our analytics settings and your cookie choices; aggregated reports may be kept longer.

Application analytics (opt-in only): retained for periods appropriate to product improvement and security; aggregated/de-identified insights may be kept longer. 

 

5. who we share data with

We may share personal data with trusted third parties, including:

A) Service providers (processors)

  • Website hosting, forms and CRM: our website is hosted on HubSpot, and we use HubSpot and Mailchimp forms and CRM tools for enquiries and customer relationship management.
  • Website analytics: Google Analytics (subject to your cookie choices - see Section 9).
  • Payments: Stripe and PayPal process payments. We receive transaction status and references; payment card details are handled by the payment provider and are not stored by us directly.
  • Email delivery, security, and infrastructure providers: for communications, security monitoring, and operating the Services.

 

B) Professional advisers

Lawyers, accountants, auditors and insurers where needed.

 

C) Authorities and legal requests

Where required by law, court order, or to protect rights and safety.

We do not sell, lease, or trade personal data. We share personal data only as described in this policy (for example with service providers, advisers, authorities, or in a corporate transaction). 

 

6. related lwks products and services (lightworks, iogates, qscan)

LWKS operates multiple products and services, including Lightworks, IOGates, and QScan.

  • If you create accounts across these services, each service may collect and process account and usage data as described in its own privacy information and terms.
  • Where services are integrated (for example, enabling sharing/collaboration, identity/account linking, licensing, or support), we may share necessary account identifiers and service metadata between LWKS products to provide the integration you request, to prevent fraud/abuse, and to support service delivery.
  • We will not share personal data between products for unrelated purposes without a lawful basis and appropriate transparency.

 

7. corporate transactions

If we undergo a merger, acquisition, reorganisation, financing, or sale of assets, personal data may be shared with relevant advisers and a prospective buyer, and transferred to a successor owner-subject to appropriate safeguards.

 

8. international transfers

Our services and providers may process personal data internationally, including in the EU and the United States.

Where personal data is transferred outside the UK, we use appropriate safeguards such as:

  • the UK International Data Transfer Agreement (IDTA) and/or the UK Addendum to the EU Standard Contractual Clauses (as applicable); and
  • additional technical and organisational safeguards where appropriate.

 

9. cookies and similar technologies (website)

A) What cookies are

Cookies are small text files stored on your device. We may also use similar technologies (such as pixels or local storage) where appropriate.

 

B) Cookie categories

We use (or may use) the following categories:

  • Strictly necessary cookies: required for core site functions and security. These do not require consent.
  • Preferences cookies: remember choices such as language, region, or settings.
  • Analytics cookies: help us understand how visitors use our website (for example via Google Analytics), so we can improve performance.
  • Marketing cookies: used to measure campaigns and show relevant advertising, where used.

 

C) Your choices

We use HubSpot's cookie banner/consent tool to ask for your choices for non-essential cookies (analytics/marketing) where required. You can change your preferences at any time using the cookie settings on our website (where available), or via your browser settings. Disabling cookies may affect site functionality.


10. your rights

Depending on your location and the circumstances, you may have rights to:

  • access your data;
  • correct inaccurate data;
  • delete data;
  • restrict or object to processing;
  • data portability; and
  • withdraw consent at any time (where we rely on consent).

To exercise rights, contact privacy@lwks.com.

Complaints / supervisory authorities:

  • UK: you can complain to the Information Commissioner's Office (ICO).

EEA/EU: if you are located in the EEA/EU, you may also lodge a complaint with your local supervisory authority. 

 

11. marketing preferences and service messages

You can opt out of marketing emails at any time using the unsubscribe link in each message or by contacting us.

Service messages are communications necessary to provide or secure the Services, such as account verification, password resets, security alerts, important changes, licence/renewal notices, and critical operational messages. You may continue to receive service messages even if you opt out of marketing.

 

12. children's data / age restrictions

Our Services are not intended for children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.

If local law requires a higher age threshold for consent, we will apply that standard where required.

 

13. connected cloud storage and stock media services

Lightworks may allow you to connect third-party services to import/export content or access online libraries. Where you choose to connect a service, we access only the data necessary to provide the functionality you request.

 

A) Cloud storage and photo services

This may include: Box, Dropbox, Google Drive, Google Photos, Microsoft OneDrive, pCloud, and IOGates.

 

B) Stock media services

This may include: Pond5 and Pexels.

Your use of connected third-party services is subject to that provider's own terms and privacy policies. You can typically revoke access at any time via your account with the relevant provider.

 

14. google api's / youtube api's (including google drive)

Some integrations use Google APIs, which may include YouTube API Services and Google Drive API functionality.

Where we use Google APIs:

  • we handle Google API data in accordance with the Google API Services User Data Policy, including its Limited Use requirements;
  • you can revoke access at any time through your Google account security settings; and
  • we use Google API data only to provide the functionality you request and for permitted operational purposes such as security and troubleshooting.


Where YouTube API Services are used, your use of those features is also subject to the YouTube Terms of Service and the Google Privacy Policy. 

 

15. security

We use appropriate technical and organisational measures to protect personal data. No internet transmission is completely secure, but we work to protect your data. 

 

16. third-party links and integrations

Our Services may link to third-party websites or integrate third-party services. Their privacy practices are governed by their own privacy policies. 

 

17. changes to this policy

We may update this policy from time to time. We'll update the "Last updated" date and, where appropriate, provide additional notice of material changes (for example by posting a notice on our website and/or emailing account holders where the change is significant).

 

 Last updated: 6 April 2026
Controller: LWKS Software Ltd (trading as "LWKS" / "Lightworks") ("we", "us", "our")
ICO registration (Data Protection Register): ZA787819
Contact: privacy@lwks.com
Postal address: 16 Belmont Crescent, Swindon, SN1 4EY, United Kingdom