Film my site

Privacy policy

Last updated: 5 October 2026

This policy explains what information Film my site collects, why, and what your rights are.

1. Who is responsible

The data controller is Kenn Jordan, trading as ElmsPark, The Rock Lane, Scullaboge, Newbawn, Wexford, Y35 D984, Ireland. For anything about your information, use our contact page or write to us at that address.

2. What we collect

When you visit the site. We do not use analytics, advertising or tracking cookies. We set one strictly necessary cookie, ep_csrf, which protects our forms from forgery; it holds a random value, nothing about you, and is deleted when you close your browser. If you choose a currency, your browser remembers the choice on your own device (in local storage); it is never sent to us. Our web server keeps standard logs (IP address, browser type, pages requested and time) for security and to keep the site running; these are deleted after 30 days. We also count page views on our own server: which page was viewed, the hour, and the website that linked to it. These counts do not include your IP address or anything else that identifies you.

When you order. We collect what you give us in the order form: the web address you want filmed, your email address, your package, where the film will play, and any notes. If you pay, Stripe collects your payment details; we receive confirmation of payment, your name, billing country and the amount, but never your full card number.

When we make your film. We read the public web page you name, including its text, images, colours and fonts.

3. Why we use it, and our legal basis

  • To deliver your order: to check the site is yours, confirm the page can make a film, take payment, make the film and send it to you. Legal basis: performing our contract with you, or taking steps you asked for before one.
  • To keep records: accounting and tax records. Legal basis: legal obligation.
  • To keep the site secure: server logs. Legal basis: our legitimate interest in running a secure website.
  • To reply when you contact us. Legal basis: our legitimate interest in answering you.

We do not sell your information, and we do not send marketing emails unless you ask to receive them.

4. Who we share it with

We use a small number of service providers, each only for the purpose listed:

ProviderWhat forWhere
StripePaymentsEU and US
IONOSHosting this website, its order records and our emailUnited Kingdom
CloudflareDomain name service and forwarding email to usWorldwide network
MailgunSending our emails, including replies to your messagesEU
ElevenLabsGenerating the music, sound effects and voice for your filmUS and EU
Anthropic and OpenAIAI tools that help make your film from your pageUS

The AI and audio providers receive your page’s public content and the instructions for your film, not your payment details. Where information is transferred outside the UK or the European Economic Area, we rely on an adequacy decision or the European Commission’s standard contractual clauses.

5. How long we keep it

  • Order and payment records: six years after the end of the tax year they relate to, as Irish tax law requires.
  • Your film and its working files: 12 months after delivery, so we can make changes and help with support, unless you ask us to delete them sooner.
  • Emails: as long as needed to deal with your enquiry or order.
  • Order requests that are never confirmed: 30 days.
  • Data protection requests: 12 months after we close them.
  • Server logs: 30 days.
  • Page view counts: 12 months.

6. Your rights

You have the right to ask for a copy of your information, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable format. To use any of these rights, use the form below or send us a message through our contact page. We will reply within one month.

Make a data protection request

Use this form to exercise your data protection rights under the GDPR. We will process your request within 30 days.

Request Type *

If you are unhappy with how we handle your information, you can complain to Ireland’s Data Protection Commission (dataprotection.ie), or to the data protection authority where you live, such as the Information Commissioner’s Office in the UK.

7. Changes

We will post any changes to this policy on this page, with the date it was last updated.