Privacy Policy

Who we are

Our website address is: https://indigofilmschool.com. Indigo Film School is a business that provides training and resources for filmmakers who love independent film. For more details, please see our About page. The postal address for Indigo Film School is 17 St. Andrews Road, Gorleston-on-Sea, NR31 6LT, United Kingdom.

This privacy policy sets out how Indigo Film School uses and protects any information that you provide when you use this website. We may change this policy from time to time by updating this page. If you subscribe to the Indigo Film School newsletter, we will inform you of any policy changes. Otherwise, please check this page occasionally to ensure you are happy with any changes, and if not, get in touch immediately.

How to Contact Us

You can send us a message via our Contact form. You can also email: ian@indigofilmschool.com.

You can write to us at:
Indigo Film School
17 St. Andrews Road
Gorleston-on-Sea
Norfolk
NR31 6LT
United Kingdom

What personal data we collect and why we collect it

Purchases

The website uses a plugin called WooCommerce to facilitate the e-commerce shop. When you make a purchase from Indigo Film School we collect personal data from you, including information about you during the checkout process on our store.

What we collect and store

While you visit our site, we’ll track:

  • Products you’ve viewed: we’ll use this to, for example, show you products you’ve recently viewed
  • Location, IP address and browser type: we’ll use this for purposes like estimating taxes and shipping
  • Shipping address: we’ll ask you to enter this so we can, for instance, estimate shipping before you place an order, and send you the order!

We’ll also use cookies to keep track of basket contents while you’re browsing our site.

Note: you may want to further detail your cookie policy, and link to that section from here.

When you purchase from us, we’ll ask you to provide information including your name, billing address, shipping address, email address, phone number, credit card/payment details and optional account information like username and password. We’ll use this information for purposes, such as, to:

  • Send you information about your account and order
  • Respond to your requests, including refunds and complaints
  • Process payments and prevent fraud
  • Set up your account for our store
  • Comply with any legal obligations we have, such as calculating taxes
  • Improve our store offerings
  • Send you marketing messages, if you choose to receive them

If you create an account, we will store your name, address, email and phone number, which will be used to populate the checkout for future orders.

We generally store information about you for as long as we need the information for the purposes for which we collect and use it, and we are not legally required to continue to keep it. For example, we will store order information for six years for tax and accounting purposes. This includes your name, email address and billing and shipping addresses.

We will also store comments or reviews, if you choose to leave them.

Who on our team has access

Members of our team have access to the information you provide us. For example, both Administrators and Shop Managers can access:

  • Order information like what was purchased, when it was purchased and where it should be sent, and
  • Customer information like your name, email address, and billing and shipping information.

Our team members have access to this information to help fulfill orders, process refunds and support you.

What we share with others

We share data with Google Analytics, Stripe payment gateway and shipping providers.

Payments

We share your data with Stripe, a third party payment processor. We accept payments through Stripe. When processing payments, some of your data will be passed to Stripe, including information required to process or support the payment, such as the purchase total and billing information. An API is used which sends your personal data from this website to Stripe for the purpose of taking payments. Stripe provides us with an order ID, so we can confirm a payment has been made or create a refund. Stripe provides the expiry date and type of card but does not reveal the name of your bank or your card number. This data is retained for six years for accounting purposes.

Facilitating a transaction requires the processing of your personal data by Stripe, such as your name, credit card number, the credit card expiry date and the CVC code. Stripe uses your data to complete the transaction within the systems of the credit card networks, which is a function that Stripe performs as a data processor.

Stripe also uses the data to comply with its regulatory obligations (such as Know Your Customer (KYC) and Anti Money Laundering (AML), and in this role Stripe is a data controller.

Please see the Stripe Privacy Policy for more details.

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymised string created from your e-mail address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service Privacy Policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact Form

Here at Indigo Film School, we love to hear from you! When you use the contact form to get in touch, your name and email address are collected. This is so we can respond personally to your message or query. Once we have responded, your details are removed from our email client. We do not share them with any third parties.

Cookies

What are Cookies?

These are text files placed on your computer, to collect standard internet log information and visitor behaviour information in an anonymous form.

Strictly Necessary Cookies

If you leave a comment on our site you may opt-in to save your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year. If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser. When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

The website uses a plugin called GDPR Cookie Compliance. This uses cookies to set your cookies preferences… we hope you appreciate the irony!

Accept or Decline Cookies

When you first visit the Indigo Film School website you are asked if you consent to cookies being used. If you are happy for them to be used in all circumstances, please click the ‘Accept’ button. If you would like more information or more control over the cookie settings, please click the ‘Settings’ link. To reset your cookie preferences, please delete all cookies from your browser, then refresh the page.

Deleting Cookies

You can manually delete cookies by going into your web browser’s Preferences / Settings, selecting the Privacy / Security tab and choosing to clear browser or website data. Once you do this, you will be asked to reset your cookies preferences the next time you visit Indigo Film School.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Analytics

We uses Google Analytics to help analyse how visitors use this website. This analytical tool uses cookies to collect standard internet log information and visitor behaviour information in an anonymous form. This data is retained for a period of 26 months after you were last active on the website.

You can opt out of analytics by changing the settings in the Cookie Compliance settings. If you don’t see the settings bar at the bottom of the screen, clear your web browser’s cookies / history and refresh the page.

Who we share your data with

Newsletter and cart abandonment provider

If you consent to join the mailing list, your personal data is sent to MailChimp, a third party platform we use for creating and sending newsletters. MailChimp retains a record of your name, your email address and your preferences. MailChimp also provides a cart abandonment service. When shopping, MailChimp keep a record of your email and the cart contents for up to 30 days on their server. This record is kept to repopulate the contents of your cart if you switch devices or needed to come back another day. Read the MailChimp privacy policy.

We use a double opt-in system for the newsletter. when you submit the newsletter form, you are sent an email asking you to confirm the subscription. You can unsubscribe from the mailing list at any time. Just click the Unsubscribe button at the bottom of the email. If you would like your data permanently removed from the mailing list, please use this Contactform to tell us.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

If you register on our website, we also store your personal information provided in your profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

How to Access Your Personal Data

You can access your personal data held by Indigo Film School. This data comes in a form that is portable, so you can transfer the information as you require. If you would like to be sent a file containing your data, please take the following steps:

  • Use this Contact form to get in touch, telling us you would like access to your personal data.
  • You will receive an email with a confirmation link. Please click this link to confirm you would like to receive your personal data.
  • A file with the information you requested will be sent to your email address.

We will comply with requests for personal data within 30 days of the request being made.

How to Remove Your Personal Data

You can remove your personal data held by Indigo Film School. If you would like this information to be permanently deleted, please take the following steps:

  • Use this Contact form to get in touch, telling us you would like your personal data to be removed.
  • You will receive an email with a confirmation link. Please click this link to confirm your request.
  • Your personal data will be permanently deleted from the website.
  • You will receive an email confirming your personal data has been permanently deleted.

We will comply with removal requests within 30 days of the request being made. This will remove your data from the website and anonymise any transaction data we hold. Please note, this does not include information we are obliged to keep for administrative, legal, or security purposes.

Please see the ‘Who We Share Your Data with’ section above if you wish to be removed from our mailing list.

Where we send your data

Visitor comments are checked through an automated spam detection service.

Additional information

How we protect your data

We keep our website software, third party plugins and APIs up to date. This ensures we are using the latest security measures. Security plugins are installed on the website to block viruses, malware and hackers.

The personal data sent to Stripe for payment processing is encrypted. Indigo Film School does not retain your payment details, these are handled by Stripe, the payment gateway we use.

What data breach procedures we have in place

If there is a data breach that impacts your personal data, you will be informed by email within 72 hours of us becoming aware of the breach.

We will inform you of the nature of the breach, the type of personal data affected and the likely consequences. We will inform you of the steps we are taking to address the issue and what steps you can take to mitigate its impact on your personal data and privacy.