Privacy Policy - The Prison Film Project

At The Prison Film Project (accessible at theprisonfilmproject.com), we are committed to protecting and respecting your personal privacy. This Privacy Policy outlines how we collect, use, store, and disclose your data, as well as your rights under applicable privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). By visiting or interacting with the Website, you agree to the practices outlined herein.

1. COMMITMENT TO PRIVACY AND DATA PROTECTION

The Prison Film Project values your trust and is fully committed to safeguarding your personal data. We uphold the principles of lawfulness, fairness, and transparency in data processing and take all necessary steps to ensure data accuracy, integrity, and confidentiality.

2. SCOPE OF POLICY AND DATA CONTROLLER ROLE

This Privacy Policy applies to all users of the website theprisonfilmproject.com. The Prison Film Project acts as the Data Controller of your personal data, determining the means and purposes for processing such data. This policy governs data collected through your use of our website, communications with our team, account interactions, and transaction-related activities.

If you have any questions about our data practices, please contact us at: [email protected].

3. CATEGORIES OF DATA WE MAY PROCESS

We may collect and process the following categories of personal data:

a. Usage Data:
– Includes date and time of access, IP address, browser type/version, referring URL, pages viewed, and session duration.
– Used for troubleshooting, analytics, and service improvements.

b. Account Data:
– Includes full name, mailing address, email address, and telephone number.
– Collected when you register, place orders, or interact with user accounts.

c. Profile Data:
– Includes purchase history, preferences, wishlists, participation in forums or surveys, and behavioral history on the site.
– Helps us tailor experiences, recommendations, and services.

d. Communication Data:
– Includes support inquiries, emails, chat transcripts, and prior communication records.
– Used to address your questions and enhance customer service.

e. Technical Data:
– Includes device identifiers, operating system, screen resolution, and browser configuration.
– Collected to ensure site compatibility and operational performance.

f. Transaction Data:
– Includes billing information, payment method details (where applicable), shipping addresses, and transaction history.
– Used for processing orders and ensuring secure payments.

g. Preference Data:
– Includes marketing preferences, newsletter sign-ups, communication consents, content interests, and opt-in statuses.
– Stored to honor your choices and improve relevance of communications.

4. LEGAL BASES FOR PROCESSING

We process your personal information based on one or more of the following lawful grounds:

a. Consent – When you voluntarily provide data or opt in for communications (e.g., newsletters or offers).
b. Contract – When processing is necessary for fulfilling a contract (e.g., order fulfillment).
c. Legitimate Interests – When it is necessary to conduct business operations, improve user experience, protect against fraud, or manage our relationship with you.
d. Legal Obligation – When processing is required by applicable legal or regulatory mandates.

5. YOUR DATA PROTECTION RIGHTS

Subject to applicable laws, you have the following rights:

a. Right of Access – You may request a copy of the personal data we hold about you.

b. Right to Rectification – You have the right to correct inaccurate or incomplete information.

c. Right to Erasure – Also known as the “Right to be Forgotten,” you may request deletion of your data where there is no compelling reason for continued processing.

d. Right to Restriction – You may request we limit processing of your data under certain conditions.

e. Right to Portability – You have the right to receive the personal data you provided in a structured, commonly used format.

To exercise any of these rights, please email us at [email protected]. We will respond in accordance with applicable legal timeframes and validation protocols.

6. SECURITY MEASURES

We implement appropriate technical and organizational safeguards to secure your information, including:

– End-to-end encryption during data transmission.
– Secure server environments and firewalls.
– Role-based access controls and authentication procedures.
– Routine system monitoring, security audits, and breach detection protocols.
– Staff training on data confidentiality standards and privacy compliance.

7. INTERNATIONAL DATA TRANSFERS

Where personal data is transferred outside of the jurisdiction in which it was collected, including outside the European Economic Area (EEA), we use Standard Contractual Clauses (SCCs), binding corporate rules, and/or rely on adequacy decisions to ensure a legally sufficient level of data protection.

8. DATA RETENTION

We retain personal data only as long as necessary for the purposes outlined in this Privacy Policy, or as required by law:

– Usage and Technical Data: retained for up to 12 months for analytics and audit purposes.
– Account and Profile Data: retained during account existence and 3 years thereafter for reactivation or legal defense.
– Communication Data: archived for up to 5 years for service quality and disputes.
– Transaction Data: stored for 7 years for financial, regulatory, and audit compliance.
– Marketing Preference Data: retained until you withdraw consent or request deletion.

After expiration of these periods, data is securely destroyed or anonymized where appropriate.

9. COOKIE POLICY

The Prison Film Project uses cookies and similar technologies on theprisonfilmproject.com to enhance user experience, analyze traffic, and facilitate core functionalities.

a. Essential Cookies – Necessary for website operation (e.g., session and login management).
b. Functional Cookies – Facilitate preferences such as saved settings or regional language.
c. Analytics Cookies – Help us understand user behavior and improve our content and user interface.
d. Performance Cookies – Measure load performance and responsiveness.

10. COOKIE MANAGEMENT AND COMPLIANCE WITH GDPR & CCPA

Upon your first visit to our site, we present a cookie banner requesting your consent for non-essential cookies in accordance with GDPR. California residents can exercise rights under the CCPA through our cookie preferences interface, including the right to opt out of data “sale” or sharing as defined by California legislation.

You can modify your cookie preferences at any time via your browser settings or by revisiting our cookie consent tool found on our website footer.

11. CHILDREN’S PRIVACY

The website theprisonfilmproject.com is not directed to children under the age of 13. We do not knowingly collect personal information from those under 13. If we discover that we have inadvertently gathered such data, we will promptly delete it from our records. Parents or legal guardians who believe that their child may have submitted personal data should contact us at [email protected].

12. POLICY UPDATES & USER NOTIFICATIONS

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. Where substantial changes are made, we will provide prominent notice on the website and/or contact you through email if applicable.

We encourage you to review this page periodically for the latest version of our Privacy Policy.

13. CONTACT INFORMATION

For privacy-related inquiries, data access requests, or to exercise your rights under GDPR or CCPA, please contact us at:

Email: [email protected]
Website: https://theprisonfilmproject.com

We take your privacy seriously and remain committed to full compliance with data protection laws and best practices. Should you have concerns about how your personal information has been handled, you are encouraged to reach out to us directly.

Thank you for trusting The Prison Film Project.