Privacy policy

Last updated 2 August 2026

This policy explains what personal data Cinescape Productions collects through cinescapeproductions.com, why it is collected, and what rights you have over it. It is written to comply with the UK GDPR and the Data Protection Act 2018.

Who is responsible for your data

Cinescape Productions is a sole trader business operated by Christian-Alexandru Popa ("Alex Popa"), based in Glasgow, Scotland. For the purposes of data protection law, Cinescape Productions is the data controller.

You can reach me at hello@cinescapeproductions.com about anything in this policy.

What data is collected

Information you give me. When you submit the contact or enquiry form, I collect the details you enter: your name, email address, and — on the enquiry form — optionally your phone number, project type, timeline, budget range, filming location and whatever you write in the message field.

Information collected automatically. The site is hosted on Cloudflare Pages. Cloudflare records standard technical data for every request — IP address, browser type, device type, referring page and the time of the request — for security, abuse prevention and aggregate traffic statistics. I do not use this data to identify individual visitors.

The site does not set any advertising or tracking cookies of its own.

Why it is collected, and the lawful basis

• To reply to your enquiry and discuss a possible project — consent, which you give by ticking the box and submitting the form.
• To keep a record of enquiries and projects — legitimate interests, in running and administering the business.
• To keep the site secure and available — legitimate interests, in protecting the site from abuse.

Your details are never sold, rented, or used for marketing lists. I will not add you to a newsletter or send unrelated marketing from a project enquiry.

Who else processes your data

A small number of service providers handle data on my behalf:

• Web3Forms — receives form submissions and forwards them to my email inbox.
• Cloudflare — hosts the site, serves video files and provides security and CDN services.
• Google Workspace — provides the email account that receives and stores enquiries.
• YouTube — films are embedded using youtube-nocookie.com, which does not set tracking cookies unless you press play. If you play an embedded film, YouTube's own privacy policy applies to that interaction.

Some of these providers operate outside the UK. Where data is transferred internationally, it is done under the safeguards those providers have in place, such as UK-approved standard contractual clauses.

How long it is kept

Enquiries that do not lead to work are kept for up to 24 months and then deleted. Where an enquiry becomes a project, records are kept for six years after the end of the work, to meet accounting and tax obligations. Cloudflare's technical logs are retained on their standard schedule, which is considerably shorter.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data I hold about you;
• have inaccurate data corrected;
• ask for your data to be deleted;
• object to, or ask me to restrict, how it is used;
• withdraw consent at any time, where consent is the basis for using it;
• ask for your data in a portable format.

Email hello@cinescapeproductions.com and I will respond within one month. If you are unhappy with how I have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes to this policy

If this policy changes, the updated version will be posted here with a revised date at the top.