Your information, and what we do with it.

Who is responsible for your information

Pappyshow Films is a short-film studio based in London. When you send us an enquiry, Pappyshow Films decides why and how your information is used — which under UK data protection law makes us the "controller" for it.

If you want to talk to someone about your information, the email address at the bottom of this page reaches us directly.

What this site collects

Only what you choose to send us — an enquiry, or a newsletter signup. Browsing the site collects nothing about you. The newsletter has its own section further down; the rest of this section is about the contact form.

When you fill in the contact form, we receive:

• your name
• your email address
• your company, if you give one — it is optional
• what your enquiry is about, from the list of options
• your message
• which page you sent it from
• the date and time, and a reference number we generate

There is also one thing collected automatically, and only when you press send on either form: your IP address is used to count how many submissions have come from your connection recently, so the forms cannot be flooded. It is held for about sixteen minutes and then deleted automatically. It is never attached to your enquiry or your subscription, and never used to identify you.

The form has a hidden field that real people never see. If something fills it in, the submission is treated as automated and discarded. Nothing is stored.

Why we collect it, and our lawful basis

We use your enquiry to read it and reply to it. That is the whole purpose. We do not add you to a mailing list, profile you, or use your message for anything else.

Our lawful basis is legitimate interests: you contacted a business expecting an answer, and answering you is the interest. Where your enquiry is about working together, we also rely on taking steps at your request before entering into a contract.

For the IP-address count described above, the basis is again legitimate interests — keeping the form usable and free of automated abuse.

Who your information is shared with

We do not sell your information, share it for advertising, or pass it to data brokers. It is handled by three suppliers who process it on our instructions:

• Google — your enquiry is stored in Firebase Firestore, and the notification we receive lands in a Gmail mailbox
• Cloudflare — hosts this website and runs the form's submission endpoint
• Resend — sends us the notification email when your enquiry arrives

Because the site's images are served from Google Cloud Storage, Google also receives your IP address and browser information as part of delivering them, in the same way any website's image host does. That happens whether or not you ever use the form.

Where your information is kept

The database holding enquiries is located in London (Google's europe-west2 region), so your enquiry is stored in the UK.

Cloudflare and Resend are based in the United States and operate global networks, so some handling of your information happens outside the UK. Both are engaged under contract terms that include the standard legal protections for transfers of this kind.

How long we keep it

• Your enquiry: kept while we are dealing with it and for a reasonable period afterwards, so we have a record of the conversation. We aim to review and remove enquiries older than two years. Deleting them is done by hand rather than automatically, so if you want yours removed sooner, ask and we will.
• The IP-address count: deleted automatically about sixteen minutes after you press send.
• The notification email: stays in the studio mailbox alongside our other correspondence, and in Resend's sending log for as long as they retain it.
• If both the database and the email fail at the same moment, your enquiry is written to our host's technical log so it is not lost, and recovered from there by hand. Those logs are short-lived.

Cookies, and what is stored on your device

This site sets no cookies. Not for analytics, not for advertising, not for anything else. That is why you have not been asked to accept any.

One small thing is stored in your browser: a single flag remembering that you have already seen the opening title sequence, so it does not replay every time you move around the site. It contains no identifier, it is never sent anywhere, and your browser discards it when you close the tab.

Analytics and tracking

There are none. No Google Analytics, no Cloudflare Web Analytics, no advertising pixels, no social media trackers, no third-party scripts of any kind. Nothing on this site counts your visit or follows you to another website.

The typeface is served from this site itself rather than fetched from a font service, so loading a page does not tell anyone else that you were here.

Links to other websites

Our films link out to places like OracleFilmsTV, Instagram, LinkedIn, Vimeo, Discord and IMDb. Once you follow one of those links you are on someone else's site, under their privacy policy, not ours. A few older links pass through a link-shortening service, which counts the click.

Your rights

Under UK data protection law you can ask us to:

• give you a copy of the information we hold about you
• correct anything that is wrong
• delete it
• stop or limit how we use it
• object to us using it
• give it to you, or another organisation, in a portable form

You can exercise any of these free of charge. We will respond within one month.

How to make a request, or complain

Email the address at the bottom of this page and tell us what you would like. You do not need to use any particular wording. If it is a request to delete your enquiry, saying so is enough.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office, the UK's data protection regulator, at https://ico.org.uk or on 0303 123 1113. We would rather you came to us first so we can put it right.

The newsletter

There is a signup form in the footer of every page, one at the end of each film's page, and one on the newsletter page itself, where you can also read past issues. It is entirely optional — nothing on this site requires you to join anything.

**What we ask for.** Your email address, and your first name if you want to give one. The name is optional and only used to say hello.

**How joining works.** You tick a box that is not pre-ticked and is not bundled with anything else — ticking it is the only thing it does. We then email you a link, and you are not on the list until you click it and press the button on the page it opens. If you never click, nothing else is ever sent to you.

That second step is there for your benefit: it means somebody who types your address by mistake cannot sign you up.

**What we record, and why.** Your address, your first name if given, the fact that you consented and the date and time you did, the date and time you confirmed, and which page you signed up from. The consent record exists because data protection law requires us to be able to show that you asked for this. The page is recorded so we know which parts of the site people find useful.

**Our lawful basis** is your consent, which you can withdraw at any time.

**Leaving.** Every email we send carries an unsubscribe link, and it takes one click — no login, no form, no "are you sure". Your mail app's own unsubscribe button works too.

We also stop sending if your address stops working. If an email to you bounces back as undeliverable, or you mark one of ours as spam, we record that and never send to you again — you do not have to do anything.

When you unsubscribe, or when one of those things happens, we keep your address on a do-not-email list rather than deleting the record. That sounds backwards, so: a deleted record could be added again by accident and start receiving email; a suppressed one cannot. Keeping it is how we honour your unsubscribe. If you would rather it were erased entirely, ask us and we will.

**What we do not do.** We do not sell, rent or share the list. We do not use a tracking pixel to detect whether you have opened an email. We do count clicks on links in the emails we send, so we know which films people want to read about — that tells us a link was clicked, not who you are beyond being a subscriber.

**Who handles it.** The list is stored in the same London database as everything else on this page, and the emails are sent by Resend, the same supplier that sends us your contact enquiries.

**How long.** Until you unsubscribe, or until you ask us to erase you. If you sign up but never confirm, the incomplete record is kept only so a second signup recognises you, and can be deleted on request.

Changes to this policy

If what the site does changes, this page changes with it.