Legal

Privacy Policy

Effective 28 July 2026 · Last updated 28 July 2026

The short version. We collect what you send us — your name, email, message, and the listing links for properties you want filmed. We don't run advertising trackers, we don't use analytics, and we don't sell or share your data with anyone for marketing. Card details never touch our servers; Stripe handles those.
On this page
  1. Who's responsible
  2. What we collect
  3. Why we use it
  4. Services that process data for us
  5. Cookies and local storage
  6. How long we keep it
  7. Your rights
  8. International transfers
  9. Children
  10. Changes
  11. Contact

1. Who's responsible

CinemaShot is the data controller for information collected through cinemashot.tours. Contact: contact@cinemashot.tours.

2. What we collect

When you contact us

Through the contact form or partner enquiry form: your name, email address, subject, your message, and — on the partner form — your brokerage or company name.

When you place an order

  • Property links — the listing URLs or photo-folder links you enter for each property.
  • Your order details — which tours and add-ons you bought, quantities, and amounts.
  • Contact and billing details — collected by Stripe on their checkout page, including your email and billing address.
We never see your card number. Payment happens entirely on Stripe's hosted checkout page. We receive confirmation that a payment succeeded, the last four digits, and the card brand — never the full number, expiry, or security code.

The photographs you send

Images of your property, or a link to a listing containing them. These may incidentally include people or personal items — please avoid sending photos containing identifiable individuals without their permission.

Automatically

Our host records standard server logs — IP address, browser type, pages requested, timestamps — for security and reliability. We don't use these to build a profile of you.

3. Why we use it

  • To produce and deliver your order — the core reason. Legal basis: performance of a contract.
  • To reply to your enquiries. Legal basis: your request / legitimate interest.
  • To take payment and prevent fraud. Legal basis: contract and legitimate interest.
  • To keep records for tax and accounting. Legal basis: legal obligation.
  • To show finished work in our portfolio — with the opt-out described in our Terms. Legal basis: legitimate interest.

We do not use your details for marketing emails or newsletters, and we don't sell or rent personal data to anyone.

4. Services that process data for us

We keep this list short on purpose, and it's accurate as of the date above:

  • Stripe — payment processing and receipts. Receives your payment and contact details directly. (Stripe's privacy policy)
  • Formspree — delivers our website's contact and partner forms to our inbox. Receives whatever you type into those forms. (Formspree's privacy policy)
  • Netlify — hosts the website and the checkout function. Processes server logs. (Netlify's privacy policy)
  • Google Fonts — the site loads its typefaces from Google's servers, which means your IP address is visible to Google when a page loads. No cookie is set by this. (Google's privacy policy)
  • Google Workspace — our business email, where your messages arrive and are stored.

We may also share information where the law requires it.

5. Cookies and local storage

This website sets no tracking cookies. There is no analytics, no advertising pixel, and no cross-site tracking — which is why you won't see a cookie banner here.

We do use your browser's local storage for things the site can't work without:

  • Your shopping cart — so it survives page changes and a returning visit.
  • The property links you've typed — so a half-filled cart isn't lost.
  • A flag recording that you've seen the homepage opening animation, so it doesn't replay every visit.

This data stays in your browser and is never transmitted to us until you check out. Clearing your browser data removes it.

Stripe sets its own cookies on its checkout page, which is necessary for payment security and fraud prevention.

6. How long we keep it

  • Enquiries — up to 2 years from our last exchange, then deleted.
  • Order and payment records — 7 years, as tax rules require.
  • Photographs and source materials — up to 12 months after delivery, so we can re-issue or revise your video, then deleted.
  • Finished videos — kept while they remain in our portfolio, or until you ask us to remove them.

7. Your rights

Wherever you live, you can ask us to:

  • Access the personal data we hold about you
  • Correct anything inaccurate
  • Delete your data (subject to records we must keep for tax)
  • Export a copy in a portable format
  • Object to or restrict how we use it — including removing your property from our portfolio

Email contact@cinemashot.tours and we'll respond within 30 days. There's no charge.

If you're in the UK or EEA, you also have the right to complain to your local data protection authority. If you're in California, we confirm we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we won't discriminate against you for exercising your rights.

8. International transfers

We're based in the United States, and the services listed above are primarily US-based. If you contact or order from us from outside the US, your data will be transferred to and processed in the US. Our providers rely on recognised safeguards such as the EU Standard Contractual Clauses for those transfers.

9. Children

This is a service for property owners and agents. It isn't directed at children, and we don't knowingly collect data from anyone under 16. If you believe a child has sent us personal data, email us and we'll delete it.

10. Changes

If we change how we handle data — for example by adding a new service — we'll update this page and change the date at the top.

11. Contact

Questions, requests, or concerns: contact@cinemashot.tours. A real person reads it.