Privacy Policy

• Account information: email address, password (stored as a hashed value — never in plain text)
• Profile information: name, city/state, phone number, years of experience, services offered, work history, profile photo
• Employer information: company name, company size, services offered, company website
• Communications: messages sent to our support team
• Consent records: timestamped log of your agreement to our Terms, Privacy Policy, and cookie preferences at registration

• Log data: IP address, browser type and version, pages visited, referring URL, time and date of visits
• Device information: device type, operating system
• Approximate country location: derived from your IP address at login to serve region-appropriate privacy notices — we do not store precise geolocation
• Cookie and tracking data: session identifiers and, where consented, analytics identifiers — see our Cookie Policy for details

We do not collect:

• Government-issued identification numbers (Social Security, Social Insurance, driver's license)
• Financial or payment card information
• Precise geolocation data beyond city/state provided by you
• Sensitive personal information such as health data, biometric data, or racial/ethnic origin

We process your account information, profile data, and transactional communications because it is necessary to perform the contract between you and Film Installers — i.e., to provide you with the Platform services you signed up for.

We process data related to non-essential cookies (analytics and advertising) and targeted advertising preferences on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw your consent at any time through the Advertising Preferences section of your account settings or the Manage Cookie Preferences link in the footer.

We process log data, IP addresses, and security-related information on the basis of our legitimate interests in maintaining the security, integrity, and performance of the Platform. We have assessed that these interests are not overridden by your rights and freedoms.

We retain consent logs and certain compliance records to fulfill our legal obligations under applicable data protection law.

Your public profile information (name, location, services, experience, work history) is visible to registered members of the Platform. You control what information appears on your profile.

We share information with trusted third-party providers who help us operate the Platform, including:

• Supabase (database and authentication infrastructure — hosted in the United States)
• Resend or similar (transactional email delivery)
• Analytics providers (where you have consented to analytics cookies)

These providers process data only on our behalf and under appropriate data processing agreements. Where data is transferred outside the EEA or UK, we rely on Standard Contractual Clauses (SCCs) or other GDPR-compliant transfer mechanisms.

Employer accounts that access installer profile data in the context of their own EU/UK business operations may be acting as independent data controllers under GDPR. We provide a Data Processing Agreement (DPA) for employer accounts that require one for GDPR compliance.

We may disclose your information if required by law, court order, or governmental authority, or if we reasonably believe disclosure is necessary to protect the rights, property, or safety of Film Installers, our users, or the public.

If Film Installers is acquired, merged, or undergoes a change of ownership, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a materially different privacy policy.

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA): the right to know what personal information we collect and how it is used; the right to request deletion; the right to opt out of the sale of personal information (we do not sell your data); and the right to non-discrimination for exercising your rights.

To exercise your CCPA rights, contact privacy@filminstallers.com. We will respond within 45 days.

If you are a Canadian resident, you have the right to know why your personal information is collected and used; the right to access your data; the right to challenge its accuracy and request corrections; and the right to withdraw consent at any time. You may also complain to the Office of the Privacy Commissioner of Canada (OPC).

To exercise your PIPEDA rights, contact privacy@filminstallers.com.

You have the right to obtain a copy of all personal data we hold about you, along with information about how it is processed. Use the Data Export feature in your account settings to download your data at any time, or email us for a full structured export.

You have the right to have inaccurate personal data corrected. You can update your profile information directly from your dashboard at any time.

You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Use the Account Deletion feature in your account settings to submit a deletion request, which is processed within 30 days. Note that some data (such as consent logs) is retained for legal compliance purposes even after deletion.

You have the right to request that we restrict processing of your personal data in certain circumstances — for example, while we verify the accuracy of your data or assess an objection you have raised. Contact us at privacy@filminstallers.com to submit a restriction request.

Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format (JSON). Use the Data Export feature in your account settings.

You have the right to object to processing based on legitimate interests or for direct marketing purposes. To object to targeted advertising, use the Advertising Preferences section in your account settings. To raise other objections, contact us at privacy@filminstallers.com.

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Cookie consent can be withdrawn via the Manage Cookie Preferences link in the footer. Advertising preferences can be changed in your account settings.

You have the right to lodge a complaint with your local supervisory authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk. EEA residents may contact their national data protection authority — a full list is available at edpb.europa.eu.

We will respond to GDPR rights requests within 30 days. Where a request is complex or we receive a high volume, we may extend this by a further two months, in which case we will notify you within the initial 30-day period.

Film Installers is the data controller for personal data processed on this Platform. Our contact details are in Section 14 below. We do not currently have a formal EU/UK representative under Article 27 GDPR as we are in pre-expansion phase, but we will appoint one before actively marketing to EEA/UK residents.