Legal

Privacy Policy

Australian Privacy Act 1988 · GDPR · UK GDPR · CCPA

Draft 1.0·Last updated March 2026

FilmFore Pty Ltd (ABN 49 621 439 281) · Effective: 22.03.2026

1. About this policy

FilmFore Pty Ltd (ABN 49 621 439 281) ("FilmFore", "we", "us", "our") operates the platform at filmfore.com and the associated Encounters channel. We are committed to protecting the privacy of everyone who uses our platform.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and store it, and your rights in relation to it. It applies to all users of filmfore.com including filmmakers, reviewers, market partners, and general visitors.

FilmFore complies with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where applicable, we also comply with the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA).

2. Information we collect

2.1 Information you provide directly

CategoryExamples
Account informationName, email address, password
Profile informationFilmmaker bio, headshot, production company name, website URL
Submission dataFilm title, synopsis, director statement, Vimeo links, genre, runtime, country of origin, festival history
Payment informationProcessed via Stripe. FilmFore does not store card numbers or banking details directly
Rights documentationChain of title documents, music clearances, location releases — uploaded as PDFs
CommunicationsMessages sent to FilmFore via contact forms or email

2.2 Information collected automatically

When you use filmfore.com, we automatically collect:

  • IP address and approximate location
  • Browser type and version
  • Device type and operating system
  • Pages visited and time spent on each page
  • Referring URL
  • Cookie data (see our Cookie Policy)

2.3 Information from third parties

We may receive information about you from:

  • Stripe — payment confirmation and transaction status
  • Vimeo — embed metadata where applicable

3. How we use your information

PurposeLegal basis (GDPR)
Creating and managing your accountContract performance
Processing film submissions and paymentsContract performance
Assigning reviewers and delivering scores and feedbackContract performance
Publishing shortlisted films on the public platform and Encounters channelContract performance + legitimate interests
Making shortlisted films available to market partnersContract performance + legitimate interests
Sending transactional emailsContract performance
Sending The Short List newsletterConsent
Improving the platform through analyticsLegitimate interests
Complying with legal obligationsLegal obligation
Preventing fraud and ensuring platform securityLegitimate interests

We will never sell your personal information to third parties. We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects.

4. How we share your information

4.1 Service providers

We share data with trusted third-party service providers who process data on our behalf:

  • Stripe — payment processing
  • Replit — platform hosting and database infrastructure
  • Resend — transactional email delivery
  • Vimeo — video embedding
  • Beehiiv — newsletter delivery

All service providers are contractually required to process data only on our instructions and to maintain appropriate security standards.

4.2 Market partners

When a film is shortlisted and the filmmaker has opted into marketplace visibility, we share the film's public profile — including title, synopsis, scores, director information, and rights status — with registered market partners. We do not share filmmaker contact details with market partners without the filmmaker's explicit consent.

4.3 Legal requirements

We may disclose personal information where required by law, court order, or regulatory authority, or where necessary to protect the rights, property, or safety of FilmFore, our users, or the public.

5. Data storage and security

FilmFore stores data on servers located in [REGION — confirm infrastructure region]. We implement the following security measures:

  • Encryption of data in transit (TLS/HTTPS)
  • Encryption of sensitive data at rest, including Vimeo passwords
  • Row-level security controls on all database access
  • Signed URLs for private file access
  • Regular security reviews

Where data is transferred outside Australia to countries that may not have equivalent privacy protections, we ensure appropriate safeguards are in place including standard contractual clauses where required by GDPR.

6. Data retention

Data typeRetention period
Account dataUntil account deletion + 7 years for tax and legal purposes
Submission dataDuration of submission + 7 years
Payment records7 years (required by Australian tax law)
Rights documentation7 years from end of any associated deal
Analytics data26 months (anonymised)
Newsletter subscriptionUntil unsubscribe + 30 days

7. Your rights

7.1 All users (Australian Privacy Principles)

Under the Australian Privacy Act, you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate or incomplete information
  • Make a complaint about our handling of your information

7.2 EU and UK users (GDPR / UK GDPR)

In addition to the above, EU and UK users have the right to:

  • Erasure — request deletion of your personal data where it is no longer necessary
  • Restriction — request that we restrict processing of your data in certain circumstances
  • Portability — receive your data in a structured, machine-readable format
  • Object — object to processing based on legitimate interests
  • Withdraw consent — where processing is based on consent, withdraw it at any time
  • Lodge a complaint with your local supervisory authority

7.3 California users (CCPA)

California residents have the right to:

  • Know what personal information we collect and how it is used
  • Request deletion of personal information
  • Opt out of the sale of personal information (FilmFore does not sell personal information)
  • Non-discrimination for exercising privacy rights

7.4 How to exercise your rights

To exercise any of the above rights, contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing your request.

8. Children

FilmFore is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such information, please contact us immediately at [email protected].

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email and by posting a notice on the platform. The updated policy will be effective from the date posted.

10. Contact us

FilmFore Pty Ltd
97 Henrietta Street, Waverley NSW 2024, Sydney, Australia
Email: [email protected]
Website: filmfore.com

For GDPR purposes, FilmFore Pty Ltd is the data controller.

Questions? Contact [email protected]