Privacy Policy

This Privacy Policy explains how That Film Spot (“we”, “us”, “our”) collects, uses, shares, and protects personal data when you visit thatfilmspot.com (the “Website”), create an account, submit content, contact us, or otherwise interact with our services.

If you have any questions about this policy or how we handle your data, contact us via the contact details shown on the Website.

1. Who we are
   That Film Spot is a film-location focused website. For the purposes of data protection laws, we are the “data controller” for personal data we process through the Website.
2. What personal data we collect
   We may collect the following categories of data:

A) Data you provide directly
• Account data: name/username, email address, password (stored in hashed form), profile details you choose to add, and account preferences.
• Submissions: content you submit (e.g., comments, tips, location suggestions, reports, uploads), plus any information included in that content.
• Messages: information you provide when you contact us (contact forms, email, support enquiries).

B) Data we collect automatically
• Usage data: pages viewed, links clicked, time spent, referral URLs, and general interaction signals.
• Device and log data: IP address, browser type, device identifiers, operating system, and server logs.
• Cookies and similar technologies: see section 6.

C) Data from third parties
If you interact with embedded content (for example videos, maps, social media posts) or log in via a third-party provider (if offered), those third parties may share limited information with us depending on your settings and their policies.

3. Legal bases for processing (EEA/UK)
   Where GDPR/UK GDPR applies, we rely on these legal bases:

• Contract: to create and manage your account, provide requested features, and deliver Website functionality.
• Legitimate interests: to operate, maintain, secure, and improve the Website; prevent fraud and abuse; moderate content; and understand how the Website is used (balanced against your rights).
• Consent: where required for non-essential cookies, certain analytics/marketing features, or email communications. You can withdraw consent at any time.
• Legal obligation: where we must comply with applicable laws or respond to lawful requests.

4. How we use your data
   We use personal data to:

• Provide the Website and its features (accounts, log-in, content publishing, moderation, saved items, etc.).
• Respond to messages and support requests.
• Maintain security, prevent abuse, troubleshoot issues, and enforce our terms.
• Improve performance and user experience, including by analysing how the Website is used.
• Communicate with you about service-related matters (e.g., important changes, security alerts).
• Comply with legal obligations.

We do not sell your personal data.

5. How we share your data
   We share personal data only when necessary:

A) Service providers (processors)
We may use trusted providers for hosting, email delivery, analytics, security, and site performance. These providers may process data on our behalf under contractual confidentiality and data protection terms.

B) Legal and safety reasons
We may disclose information if required by law, court order, or lawful request, or if necessary to protect the rights, property, or safety of us, our users, or others.

C) Business changes
If the Website is involved in a merger, acquisition, restructuring, or asset sale, your data may be transferred as part of that transaction, subject to appropriate safeguards.

6. Cookies and similar technologies
   We use cookies and similar technologies for:

• Essential cookies: required for core functionality (e.g., log-in sessions, security).
• Preferences: remember settings (where applicable).
• Analytics: understand usage and improve the Website (where enabled).
• Embedded content: third-party embeds may set their own cookies.

You can control cookies through your browser settings and, where available, our cookie banner/preferences tool. Blocking some cookies may impact site functionality.

7. User-generated content and public information
   If you post comments or submit content that is published on the Website, it may be visible publicly, along with your chosen display name/profile details. Please do not submit personal information you do not want to be public.
8. Data retention
   We keep personal data only for as long as necessary for the purposes described in this policy:

• Account data: kept while your account is active. If you delete your account, we will delete or anonymise account data unless we need to keep certain records for legal, security, or legitimate business purposes.
• Logs and security records: retained for a limited period to maintain security and investigate incidents.
• Backups: may retain copies for a limited time until overwritten in normal cycles.

9. Security
   We use reasonable technical and organisational measures to protect personal data, including access controls and security monitoring. However, no method of transmission or storage is 100% secure.

You are responsible for keeping your password confidential and for using a strong, unique password.

10. Your rights (EEA/UK and similar jurisdictions)
    Depending on your location, you may have rights to:

• Access your personal data
• Correct inaccurate data
• Delete your data
• Restrict or object to processing
• Data portability
• Withdraw consent (where processing is based on consent)
• Lodge a complaint with your local data protection authority

To exercise your rights, contact us via the contact details listed on the Website. We may need to verify your identity.

11. International transfers
    If we use service providers that process data outside your country/region, we will ensure appropriate safeguards are in place (such as standard contractual clauses) where required by law.
12. Children’s privacy
    The Website is not intended for children, and we do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us and we will take appropriate steps.
13. Third-party links and embeds
    The Website may contain links to third-party websites and embedded services (e.g., maps, videos, social widgets). We are not responsible for the privacy practices of third parties. Please review their policies.
14. Changes to this Privacy Policy
    We may update this policy from time to time. We will post the updated version on this page and update the “Last updated” date. If changes are significant, we may provide additional notice.
15. Contact
    For privacy enquiries, requests, or complaints, contact us via the contact information published on the Website.