What I keep, and why

Privacy notice.

Last updated 3 August 2026 · UK GDPR

Draft — not yet legal advice

An honest account of what I hold and why, written to be readable rather than to cover myself. It hasn’t been through a solicitor yet.

The short version

I hold the least I can get away with: enough to reach you, enough to edit your videos properly, and enough to keep the tax records I’m required to. I don’t sell anything to anyone and there’s no advertising or tracking on this site.

What I collect

Your emailHow you sign in and how I reach you. From PayPal when you pay.

Name / channelSo I know who I’m talking to.

Discord, socialsOptional. Only if you add them.

PhotoOptional. Only if you upload one.

Briefs & preferencesWhat to make and how you like it cut.

Footage linksLinks only — your footage stays in your Dropbox or Drive.

Orders & receiptsWhat you bought and when.

Time zoneSo deadlines mean your time, not mine.

I never see your card details. PayPal handles payment entirely — all I get back is confirmation and your email address.

Why I’m allowed to hold it

To do the work — your email, briefs and preferences exist so I can deliver what you paid for.
Because the law says so — order and payment records are kept for HMRC.
Because you chose to — optional things like your photo and socials. Remove them any time.

How long I keep it

Your account stays as long as you want it. Close it and your personal details are deleted straight away — name, email, socials, photo, preferences, all of it.

Order and payment records survive that, anonymised, because UK tax rules require roughly six years of business records. They can’t identify you afterwards.

Who else sees it

PayPalTakes payments. Their own privacy terms apply.

SupabaseStores the database.

VercelRuns the site.

ResendSends the emails.

That’s the lot. Nobody buys data from me and nobody is given it for marketing.

What you can ask for

A copy of everything I hold about you
Corrections to anything wrong
Deletion — most of it goes immediately, tax records excepted
Me to stop emailing you, which you can also do yourself in your settings

Message me and I’ll sort it, normally the same day and always within a month. If you think I’ve handled your data badly you can complain to the Information Commissioner’s Office at ico.org.uk.

Cookies

One, and it’s the one that keeps you signed in. No analytics, no advertising, no tracking across other sites — which is why there’s no cookie banner shouting at you.

Security

There are no passwords to steal, because there aren’t any — you sign in with a link sent to your email. Sign-in links are stored hashed, expire in 45 minutes and work once.