privacy

Last updated: June 2026 | Version 1.0 | behindtheeasel.com

Your privacy matters to us. This Privacy Policy explains what personal data we collect when you use our website, why we collect it, how we use it, and what your rights are. Please read it carefully.

1. Who We Are

Behind the Easel is operated by [Behind the Easel Ltd], a company registered in England and Wales (Company Number: [XXXXXXXX]), whose registered address is [Registered Address].

We are the data controller responsible for your personal data collected through this website.

If you have any questions about this Privacy Policy or how we handle your data, please contact us at: hello@behindtheeasel.com

2. What Personal Data We Collect

We collect the following categories of personal data when you use our website:

Account and Registration Data

Your full name
Your email address
Your account password (stored in encrypted form — we cannot see it)
The date and time your account was created

Purchase and Transaction Data

Details of Content purchased (film title, price, date)
Payment confirmation data (we do not store your card number — payments are handled securely by our payment processor)
Transaction reference numbers
VAT details where applicable

Technical and Usage Data

Your IP address
Browser type and version
Device type and operating system
Pages visited and time spent on those pages
Referring website or link
Content viewed and playback activity (for security and access verification purposes)

Communications Data

The content of any emails or messages you send to us
Your marketing preferences

Data We Do Not Collect

We do not collect any special category data (such as health information, racial or ethnic origin, political opinions, or biometric data). We do not knowingly collect data from children under the age of 18.

3. How We Collect Your Data

We collect your personal data:

Directly from you — when you create an Account, make a purchase, contact us, or sign up to our mailing list.
Automatically — through cookies and similar technologies when you visit our website (see Clause 8 on Cookies).
From third parties — our payment processor provides us with transaction confirmation data once a payment is completed.

4. Why We Use Your Data | Our Legal Bases

We only use your personal data where we have a lawful basis to do so under UK data protection law (UK GDPR and the Data Protection Act 2018). The legal bases we rely on are:

Performance of a Contract

We use your Account data, purchase data and email address to fulfil the contract between us — that is, to process your purchase, grant you Viewing Access to your Content, and manage your Account. Without this data we cannot provide the service.

Legitimate Interests

We use your technical and usage data to keep our platform secure, to prevent fraud and unauthorised access, and to improve our website and services. We have carried out a legitimate interests assessment and are satisfied that our interests are not overridden by your rights in these circumstances.

Legal Obligation

We may be required to retain certain data (such as transaction records) to comply with our legal obligations, including tax and accounting requirements.

Consent

Where we send you marketing communications or use non-essential cookies, we will ask for your consent first. You can withdraw your consent at any time.

5. What We Use Your Data For

Specifically, we use your personal data to:

Create and manage your Account
Process your purchase and provide you with Viewing Access to Content
Send you purchase confirmation and account-related emails
Respond to your enquiries and support requests
Detect and prevent fraud, unauthorised access, and misuse of the Platform
Monitor Content access to enforce our Terms and Conditions (including identifying account sharing)
Comply with legal obligations including VAT record-keeping
Send you marketing communications about new Content, artists, and offers — only where you have opted in
Improve our website and service through analysis of anonymised usage data

We will never sell your personal data to third parties. We will never use your data for any purpose that is incompatible with the purposes set out in this Policy.

6. Who We Share Your Data With

We share your personal data only where necessary, and only with the following categories of third party:

Payment Processor

Your payment is processed by a third-party payment processor (currently [Stripe / payment provider name]). They receive your payment card details and transaction data. We do not have access to your full card number. Their privacy policy governs how they handle your payment data.

Hosting and Technology Providers

Our website and video streaming service are hosted by third-party technology providers. These providers process data on our behalf and are bound by data processing agreements that require them to protect your data and use it only on our instructions.

Email Service Provider

We use a third-party email service to send account confirmations, purchase receipts, and marketing emails (where you have opted in). This provider processes your email address on our behalf.

Legal and Professional Advisors

We may share data with our legal, financial or professional advisors where necessary, who are bound by professional confidentiality obligations.

Law Enforcement and Regulatory Bodies

We may disclose your data to law enforcement, regulators, or courts where we are required to do so by law, or where we believe it is necessary to protect our legal rights or the safety of others.

We do not transfer your personal data outside the United Kingdom or European Economic Area except where adequate safeguards are in place in accordance with UK data protection law.

7. How Long We Keep Your Data

We retain your personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. Our standard retention periods are:

Account data — for as long as your Account is active, and for up to two years after your Account is closed or last used.
Purchase and transaction records — for seven years from the date of the transaction, to comply with HMRC and tax record-keeping requirements.
Communications data — for up to two years from the date of the communication, or longer if relevant to a legal dispute.
Technical and usage data — typically for up to 12 months, unless required for security or legal purposes.
Marketing consent records — for as long as you remain subscribed and for a reasonable period after you unsubscribe, to evidence your consent history.

8. Cookies

Our website uses cookies — small text files stored on your device — to make the website function correctly, to remember your login session, and to help us understand how visitors use the site.

Essential Cookies

These are necessary for the website to work. They enable you to log in, stay logged in, and access your purchased Content. You cannot opt out of these cookies without disabling your Account access.

Analytics Cookies

We may use analytics tools (such as Google Analytics) to collect anonymised data about how visitors use our website — which pages are visited, how long visitors stay, and where they came from. This helps us improve our website. We will ask for your consent before placing analytics cookies.

Marketing Cookies

We may use cookies to show you relevant advertising on other websites if you have opted in to marketing. We will ask for your consent before placing marketing cookies.

You can manage your cookie preferences at any time using the cookie settings on our website. You can also control cookies through your browser settings, though disabling all cookies may affect your ability to use the Platform.

9. Your Rights

Under UK data protection law, you have the following rights in relation to your personal data:

Right to access — you can request a copy of the personal data we hold about you (a Subject Access Request).
Right to rectification — you can ask us to correct any inaccurate or incomplete data we hold about you.
Right to erasure — you can ask us to delete your personal data in certain circumstances, for example where we no longer need it for the purpose it was collected.
Right to restriction — you can ask us to restrict how we use your data in certain circumstances, for example while a dispute is being resolved.
Right to data portability — where we process your data by automated means on the basis of your consent or a contract, you can ask us to provide it in a portable, machine-readable format.
Right to object — you can object to our processing of your data where we rely on legitimate interests, or where we use your data for direct marketing.
Right to withdraw consent — where we rely on your consent to process your data (such as for marketing emails), you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal.

To exercise any of these rights, please contact us at hello@behindtheeasel.com. We will respond within one calendar month. We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO), if you are unhappy with how we have handled your data. You can contact the ICO at ico.org.uk or on 0303 123 1113.

10. Security

We take the security of your personal data seriously. We use appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction or alteration. These measures include:

Encrypted storage of passwords
Secure HTTPS connections across the website
Token-authenticated video streaming to prevent unauthorised access to Content
Restricted internal access to personal data on a need-to-know basis
Third-party providers contractually bound to maintain appropriate security standards

No method of electronic storage or transmission is completely secure. While we do our best to protect your data, we cannot guarantee absolute security. If you believe your Account has been compromised, please contact us immediately at hello@behindtheeasel.com.

11. Marketing Communications

We will only send you marketing emails where you have opted in to receive them. Each marketing email will include an unsubscribe link. You can also update your marketing preferences at any time by logging into your Account or by emailing us at hello@behindtheeasel.com.

Opting out of marketing emails will not affect transactional emails about your Account or purchases.

12. Children

Our Platform is intended for use by adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with personal data, please contact us at hello@behindtheeasel.com and we will delete it promptly.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our business practices, or the services we offer. We will notify registered Account holders of any material changes by email and will update the "Last updated" date at the top of this page.

Your continued use of the Platform after any update constitutes your acceptance of the revised Policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please contact us:

Email: hello@behindtheeasel.com

Website: behindtheeasel.com

Post: [Registered Address], England

Company Number: [XXXXXXXX]

We aim to respond to all privacy-related enquiries within five business days and to resolve all requests within one calendar month in line with our legal obligations.

This Privacy Policy was last reviewed in June 2026.

Behind The Easel Privacy Policy