Overview


Filmhouse at Home is the on demand platform owned and operated by Centre for the Moving image (CMI). CMI is a registered charity, which incorporates Filmhouse, Belmont Filmhouse and Edinburgh International Film Festival.

CMI is committed to protecting your privacy, We will only use the information that we collect about you lawfully (in accordance with the GDPR Act 2018).

CMI (referred to as either “The Company”, “we”, “us” or “our”) is the controller of your personal data (for the purposes of the General Data Protection Regulation).

Your use of the Platform is subject to our Privacy Policy.

Further GDPR guidance from CMI can be found here.


Our Commitment to Privacy


Your privacy is important to us. To better protect your privacy we provide this notice explaining our online information practices and the choices you can make about the way your information is collected and used. To make this notice easy to find, we make it available on our homepage and at every point where personally identifiable information may be requested.


The Information We Collect


For the purpose of our uses, Personal Data is information about an individual from which that individual is directly identified. It does not include anonymous data (that is, information where the identity of an individual has been permanently removed). However, it does include indirect identifiers or pseudonymous data (that is, information which alone does not identify an individual, but when combined with certain additional and reasonable accessible information, could be attributed to a particular person.

This notice applies to all information collected or submitted on The Company’s website. This information may include, but is not limited to:


Our Basis For Processing Your Personal Data


In line with the GDPR, we will always ensure personal data is processed on one of the following legal bases:

In performance of a contract with you

When use of your data allows us to fulfil our contractual obligations to you; for instance via a confirmation email, or to provide you with important technical information about this service

When there is a Legitimate Interest to do so

When we have a Legitimate Interest in processing your information that matches yours and fundamental rights do not override this interests

Consent

When you have provided us with explicit consent to use your data for a defined purpose: for example if you have signed up to receive email updates and other marketing information

Compliance with the law

When use of you data allows us to fulfil our contractual obligations to you: for instance via a confirmation email, or to provide you with important technical information about this service

We use the information you provide about yourself when joining The Company to complete your Profile. We do not share this information with outside parties except to the extent required by law or necessary to the running of this site. Your email, name and credit card details are not shown publicly.

We use return email addresses to answer the email we receive. Such addresses are not used for any other purpose and are not shared with outside parties.

We use non-identifying and aggregate information to better design our website and to share with advertisers. For example, we may tell an advertiser that X number of individuals visited a certain area on our website, or that Y number of men and Z number of women filled out our registration form, but we would not disclose anything that could be used to identify those individuals.

Finally, we never use or share the personally identifiable information provided to us online in ways unrelated to the ones described above without also providing you an opportunity to opt-out or otherwise prohibit such unrelated uses.


Our Commitment to Data Security


To prevent unauthorized access, maintain data accuracy, and ensure the correct use of information, we have put in place appropriate physical, electronic, and managerial procedures to safeguard and secure the information we collect online.


Our Commitment to Children’s Privacy


Protecting the privacy of the very young is especially important. For that reason, we never collect or maintain information at our website from those we actually know are under 13, and no part of our website is structured to attract anyone under 13.


How You Can Access and Correct Your Information


You can access all your personally identifiable information that we collect online and maintain by visiting your Account Settings page. We use this procedure to better safeguard your information.

You can correct factual errors in your personally identifiable information by sending us a request that credibly shows error.

To protect your privacy and security, we will also take reasonable steps to verify your identity before granting access or making corrections.


The Video Privacy Protection Act of 1988


The Company adheres to The Video Privacy Protection Act of 1988.


How to Cancel Your Account


Contact us at help@filmhouseathome.com if you wish to have our account permanently deleted.


How to Contact Us


Should you have other questions or concerns about these privacy policies, send us an email: help@filmhouseathome.com.


Use of Third Party Services


Shift72

Our video on Demand platform is hosted by Shift72. For more information on Shift72’s privacy policy, please visit https://www.shift72.com/privacy-policy

Indy Cinema Group

The administration for the site is done in partnership with Indy Cinema Group. For more information on Indy Cinema Group’s privacy policy, please visit https://www.indycinemagroup.com/privacy/

Google Analytics

We use Google Analytics to help us to understand how you use our site and tools, which allows us to know how to improve our products for your benefit. It follows your progress through the website, collecting anonymous data on where you have come from, which pages you visit, and how long you spend on the site. Google then stores this data in order to create reports. But don’t worry; they do not store your personal data.

Google will track your IP address, and it may be transmitted to and stored by Google on servers in the United States. Google may use this information for the purpose of evaluating your use of the website, compiling reports on website activity for us, and providing other services relating to website activity and Internet usage.

Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. For more information on Google’s privacy policies, please visit https://policies.google.com/privacy.

Google Analytics services are governed by the Google Analytics Terms of Service which can be found at: https://marketingplatform.google.com/about/analytics/terms/us/.

Intercom

We use third-party analytics services to help understand your usage of our services. In particular, we provide a limited amount of your information (such as sign-up date and some personal information like your email address) to Intercom, Inc. (“Intercom”) and utilise Intercom to collect data for analytics purposes when you visit our website or use our product. As a data processor acting on our behalf, Intercom analyses your use of our website and/or product and tracks our relationship by way of cookies and similar technologies so that we can improve our service to you. For more information on Intercom’s use of cookies, please visit https://www.intercom.com/terms-and-policies#cookie-policy. We may also use Intercom as a medium for communications, either through email, or through messages within our product(s). For more information on the privacy practices of Intercom, please visit https://www.intercom.com/terms-and-policies#privacy. Intercom’s services are governed by Intercom’s terms of use which can be found at https://www.intercom.com/terms-and-policies#terms.

Mandrill and MailChimp

We use Mandrill to send transactional emails, such as a welcome email, purchase receipt, or forgot password email. We use MailChimp to send you marketing emails based on your viewing preferences. We provide a limited amount of your information, such as your email address, to The Rocket Science Group LLC, who operate Mailchimp and Mandrill. We utilise Mandrill to collect data for analytics purposes when you view the email. For more information on the privacy practices of Mandrill, please visit https://mailchimp.com/legal/privacy/. Mandrill’s services are governed by Mailchimp’s terms of use which can be found at https://mailchimp.com/legal/terms/.

Amazon Web Services

We use Amazon Web Services (AWS) who provide us with cloud storage solution. AWS has demonstrated compliance with a range of internationally recognised standards for content, data and infrastructure security, such as information security management system- ISO-27001, System and Organization Controls Report- SOC1/2, and The Payment Card Industry Data Security Standard; in addition, AWS has demonstrated alignment with the MPAA Content Security Best Practices and the AWS infrastructure is compliant with all applicable MPAA controls. For more information on AWS’ privacy policy please see: https://aws.amazon.com/privacy/

Stripe

We use a third party payment processor, Stripe, to process payments made to us. In connection with the processing of such payments, we do not retain any personally identifiable information or any financial information such as credit card numbers. Rather, all such information is provided directly to our third party processor, Stripe, whose use of your personal information is governed by their privacy policy, which may be viewed at https://stripe.com/gb/privacy. Stripe is certified to PCI Service Provider Level 1, the most stringent level of certification.


How Long We Will Hold Your Information


We will not retain your information any longer than is reasonable.


Third Party Links


This website may contain links to other websites. We are not responsible for the privacy practices of these and we encourage you to read their own privacy policies.


Changes To This Policy


We may revise and update this Privacy Policy. Please periodically review the Privacy Policy, as your continued use of this Site indicates your agreement with any changes that we make.