Privacy Policy

This Privacy Policy explains how Cineixa collects, uses, shares and protects personal information when you visit cineixa.com (the “Site”), get in touch with us, book a call or otherwise interact with us online. It also explains the choices and rights you have.

We work with brands and businesses around the world, so we have written this policy to meet the requirements of the UK GDPR, the EU General Data Protection Regulation (“GDPR”), US state privacy laws such as the California Consumer Privacy Act (“CCPA”), and other privacy laws that may apply to you.

1. Who we are

The Site is operated by Cineixa (“we”, “us” or “our”).

For the purposes of UK and EU data protection law, Cineixa is the controller of the personal information described in this policy.

You can contact us about this policy or your personal information at privacy@cineixa.com.

Information we handle for our clients

When we deliver services to a client, such as running an advertising campaign or producing content, we may handle personal information on that client’s behalf. In that case the client is responsible for that information, our handling of it is governed by our contract with the client, and the client’s own privacy notice applies.

2. Information we collect

Information you give us

• Contact form: your first and last name, email address, business name, your message, any project brief you attach, and how you heard about us.
• Emails and messages: anything you send us by email, WhatsApp, Telegram, LinkedIn or other channels, including your contact details and the content of your message.
• Calls and meetings: when you book a Free Growth Call or meet with us, your name, contact details, job title, company details and the information you share about your business, goals and challenges.
• Working with us: if you become a client or supplier, the business contact, billing and project information needed to work together.

Please do not send us sensitive personal information or confidential information belonging to others unless you have the right to share it with us.

Information collected automatically

When you use the Site, we and our partners may automatically collect:

• your IP address and approximate location (city or region level), derived from it;
• browser type, device type, operating system, screen size and language settings;
• the pages you view, the links and buttons you click, how long you stay and how you arrived at the Site (for example, from a search engine, an advert or another website);
• dates and times of your visits; and
• identifiers stored in cookies and similar technologies.

Analytics and marketing information is only collected if you allow it through our cookie settings. See section 5 for details.

Information from other sources

• Advertising and analytics partners: such as Google, Meta and LinkedIn, which may tell us how our adverts and Site perform, usually in aggregated form.
• Referrals: people who introduce you to us, for example a colleague or partner.
• Public sources: business information that is publicly available, such as your company website or professional profile, when we are preparing to speak with you.

3. How we use your information

We use personal information to:

• respond when you contact us, review your project brief, prepare proposals and hold calls with you;
• provide our services and manage our relationships with clients and suppliers;
• operate, secure and improve the Site, including preventing spam and abuse;
• understand how visitors use the Site and measure our advertising, if you allow this through our cookie settings;
• send you occasional updates about our work, which you can opt out of at any time; and
• comply with our legal obligations and protect our legal rights.

Under UK and EU law, we rely on your consent for analytics and marketing cookies, and for marketing emails where the law requires it. We rely on our contract with you when we provide services, and on our legal obligations where the law requires us to use information. For everything else, we rely on our legitimate interests in running and growing our business. Where we rely on consent, you can withdraw it at any time.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you.

4. How we share your information

We do not sell your personal information for money. We share it only as described below.

• Service providers: companies that help us run the Site and our business, such as website hosting, email, file storage, scheduling, customer relationship management and security providers (including Cloudflare, which helps protect our contact form from spam). They may only use your information to provide services to us and must keep it secure.
• Analytics and advertising partners: if you allow analytics or marketing cookies, Google, Meta and LinkedIn will receive information about your use of the Site. These companies may also use this information for their own purposes in line with their own privacy policies, and in some cases we and they are jointly responsible for collecting the information.
• Freelancers and production partners: trusted creative specialists who help us deliver a project you have asked us about, where they need the information to do so and are bound by confidentiality.
• Professional advisers: such as lawyers, accountants and insurers, where necessary.
• Legal and safety reasons: authorities, courts or other parties where we are required to by law, or where we believe disclosure is necessary to protect our rights, the safety of any person or to prevent fraud.
• Business transfers: a buyer, investor or successor if we are involved in a merger, acquisition, sale of assets or similar transaction, subject to appropriate confidentiality protections.
• With your permission: anyone else, where you have asked us to share your information or agreed to it.

5. Cookies and similar technologies

We use cookies and similar technologies, such as pixels and tags, in three categories:

• Necessary (always on): keep the Site working and secure, protect our contact form from spam (Cloudflare) and remember your cookie choices.
• Analytics: help us understand how visitors use the Site so we can improve it (Google Analytics).
• Marketing: measure our advertising and help show our ads to relevant people (Google Ads, Meta Pixel and LinkedIn Insight Tag).

Analytics and marketing cookies are not used unless you allow them. You can change your choice at any time through Manage cookie preferences, or block cookies in your browser settings, although parts of the Site may not work without necessary cookies. Cookies last from the end of your visit up to 2 years. Google, Meta and LinkedIn explain how they use information in their own privacy policies.

If your browser sends a Global Privacy Control signal, we treat it as an opt-out of marketing cookies for that browser. We do not respond to “Do Not Track” signals.

6. International transfers

We are a global agency, and the providers we work with are located in different countries. This means your personal information may be transferred to, and processed in, countries other than the one you live in, including the countries where Cineixa and its team members are based and the United States. These countries may have data protection laws that differ from those in your country.

When we transfer personal information from the UK, the European Economic Area or Switzerland to a country that has not been recognized as providing an adequate level of protection, we use appropriate safeguards. These include the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Agreement or Addendum, or, for US companies that are certified, the EU-US Data Privacy Framework and its UK Extension. You can ask us for more information about these safeguards and, where applicable, a copy of them.

7. How long we keep your information

We keep personal information only for as long as we need it for the purposes described in this policy, including to meet legal, tax and accounting requirements. In general:

• Enquiries that do not lead to a project, including any project brief you attached: up to 24 months after our last contact with you.
• Client and supplier records: for as long as we work together and then for up to 7 years, to meet legal, tax and accounting requirements and to deal with any claims.
• Analytics data: up to 14 months, after which detailed data is deleted and only aggregated reports are kept.
• Cookies: for the periods shown in section 5.
• Records of your privacy choices and requests: for as long as needed to show that we have respected them.

When we no longer need personal information, we delete it or anonymize it so it can no longer be linked to you.

8. How we protect your information

We use appropriate technical and organizational measures to protect personal information against loss, misuse and unauthorized access. These include encrypted connections to the Site, private storage for files sent through our contact form that only authorized people can access, access controls and spam protection. No method of sending or storing information online is completely secure, so we cannot guarantee absolute security, but we work to protect your information.

9. Your privacy rights

Depending on where you live, you may have some or all of the rights below. These rights are not absolute and may be subject to legal limits.

If you are in the UK, the European Economic Area or Switzerland

• Access: ask for a copy of the personal information we hold about you.
• Correction: ask us to correct information that is inaccurate or incomplete.
• Deletion: ask us to delete your information in certain circumstances.
• Restriction: ask us to limit how we use your information in certain circumstances.
• Objection: object to our use of your information based on legitimate interests. You can object to direct marketing at any time, and we will stop.
• Portability: ask us to provide information you gave us in a structured, commonly used, machine-readable format, or to send it to another organization.
• Withdraw consent: where we rely on your consent, withdraw it at any time.
• Complain: lodge a complaint with a data protection authority. In the UK this is the Information Commissioner’s Office (ico.org.uk). In the EU, it is the authority in the country where you live or work. We would welcome the chance to address your concerns first, so please contact us.

If you are in the United States

Residents of California and other US states with comprehensive privacy laws, including Colorado, Connecticut, Virginia, Texas and Oregon, may have the right to:

• know what personal information we collect, use and disclose, and access a copy of it;
• correct inaccurate personal information;
• delete personal information we have collected from you;
• receive your personal information in a portable format;
• opt out of the “sale” or “sharing” of personal information, or its use for targeted advertising;
• appeal our decision if we decline your request; and
• not be discriminated against for exercising any of these rights.

Sale, sharing and targeted advertising. We do not sell personal information for money. However, if you allow marketing cookies, our use of tools from Google, Meta and LinkedIn may be considered a “sale”, “sharing” or “targeted advertising” under some US state laws. You can opt out at any time by selecting Manage cookie preferences and turning off marketing cookies, or by using a Global Privacy Control signal. We do not knowingly sell or share the personal information of anyone under 16.

Information we collect. In the past 12 months, we have collected the following categories of personal information, from the sources and for the purposes described in sections 2 and 3, and disclosed them to the categories of recipients described in section 4:

• identifiers, such as your name, email address, IP address and cookie identifiers;
• professional or employment-related information, such as your business name and job title;
• internet or other electronic network activity, such as the pages you view and how you interact with the Site;
• approximate geolocation, derived from your IP address; and
• any other information you choose to give us, such as the contents of your messages and project briefs.

We do not collect sensitive personal information for the purpose of inferring characteristics about you. We keep each category of information for the periods described in section 7.

Authorized agents and appeals. You may use an authorized agent to make a request on your behalf. We may ask the agent for proof of authorization and ask you to verify your identity. If we decline your request, you can appeal by replying to our decision with the word “Appeal”.

If you are elsewhere

If you live in another country, such as Canada or Australia, you may have similar rights to access and correct your personal information and to complain to your local privacy regulator. Please contact us and we will respond in line with the laws that apply to you.

How to make a request

To exercise any of your rights, email us at privacy@cineixa.com with the subject “Privacy request” and tell us what you would like us to do. We may need to verify your identity before responding, and we will only use the information you provide for that purpose. We aim to respond within one month for requests under UK or EU law and within 45 days for requests under US state law. Where the law allows, we may extend these periods if a request is complex, and we will tell you if we do. We do not charge a fee unless a request is clearly unfounded or excessive.

10. Children

The Site and our services are intended for businesses and are not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, please contact us and we will delete it.

11. Links and third-party platforms

The Site contains links to other websites and platforms, such as WhatsApp, Telegram and LinkedIn. When you use them, the privacy policies of those companies apply, not this one. We are not responsible for how they handle your information, so we encourage you to read their policies.

12. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. When we do, we will change the “Last updated” date at the top of this page. If the changes are significant, we will take reasonable steps to let you know, for example by displaying a notice on the Site.

13. Contact us

If you have any questions about this policy or how we handle your personal information, please contact us:

Email: privacy@cineixa.com