1. Introduction
Film Installers (“we,” “our,” or “us”) operates the platform available at filminstallers.com. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our Platform.
We currently serve users primarily in the United States and Canada, and we are preparing for international expansion. This Policy is written to comply with applicable US state privacy laws including the California Consumer Privacy Act (CCPA), Canadian federal privacy law (PIPEDA), and the General Data Protection Regulation (GDPR) as it applies to users in the European Economic Area (EEA) and the United Kingdom (UK GDPR).
If you are located in the EEA or UK, Section 8 of this Policy sets out your specific rights and the legal bases on which we process your data.
Document version: 2026-03-14-v2
2. Information We Collect
2.1 Information You Provide
- Account information: email address, password (stored as a hashed value — never in plain text)
- Profile information: name, city/state, phone number, years of experience, services offered, work history, profile photo
- Employer information: company name, company size, services offered, company website
- Communications: messages sent to our support team
- Consent records: timestamped log of your agreement to our Terms, Privacy Policy, and cookie preferences at registration
2.2 Information Collected Automatically
- Log data: IP address, browser type and version, pages visited, referring URL, time and date of visits
- Device information: device type, operating system
- Approximate country location: derived from your IP address at login to serve region-appropriate privacy notices — we do not store precise geolocation
- Cookie and tracking data: session identifiers and, where consented, analytics identifiers — see our Cookie Policy for details
2.3 Information We Do Not Collect
We do not collect:
- Government-issued identification numbers (Social Security, Social Insurance, driver's license)
- Financial or payment card information
- Precise geolocation data beyond city/state provided by you
- Sensitive personal information such as health data, biometric data, or racial/ethnic origin
3. How We Use Your Information
We use collected information for the following purposes:
- To create and manage your account
- To display your installer or employer profile to other Platform users
- To match employers with installers based on location, skills, and preferences
- To send transactional emails such as email verification, password resets, and important account notices
- To enforce our Terms of Service, investigate abuse, and maintain Platform security
- To analyze Platform usage and improve our features (analytics cookies, where consented)
- To maintain legal compliance and fulfill our obligations under applicable law
- To serve first-party advertising relevant to the film installation industry (advertising cookies, where consented, and only when this feature is live)
- To detect your approximate region so we can present region-specific legal notices and consent flows where required
We do not sell your personal information to third parties. We do not share your personal information with advertisers for their own independent use.
4. Legal Bases for Processing (EEA and UK Users)
If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases under GDPR and UK GDPR:
4.1 Contract Performance (Article 6(1)(b) GDPR)
We process your account information, profile data, and transactional communications because it is necessary to perform the contract between you and Film Installers — i.e., to provide you with the Platform services you signed up for.
4.2 Consent (Article 6(1)(a) GDPR)
We process data related to non-essential cookies (analytics and advertising) and targeted advertising preferences on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw your consent at any time through the Advertising Preferences section of your account settings or the Manage Cookie Preferences link in the footer.
4.3 Legitimate Interests (Article 6(1)(f) GDPR)
We process log data, IP addresses, and security-related information on the basis of our legitimate interests in maintaining the security, integrity, and performance of the Platform. We have assessed that these interests are not overridden by your rights and freedoms.
4.4 Legal Obligation (Article 6(1)(c) GDPR)
We retain consent logs and certain compliance records to fulfill our legal obligations under applicable data protection law.
5. How We Share Your Information
5.1 Other Platform Users
Your public profile information (name, location, services, experience, work history) is visible to registered members of the Platform. You control what information appears on your profile.
5.2 Service Providers
We share information with trusted third-party providers who help us operate the Platform, including:
- Supabase (database and authentication infrastructure — hosted in the United States)
- Resend or similar (transactional email delivery)
- Analytics providers (where you have consented to analytics cookies)
These providers process data only on our behalf and under appropriate data processing agreements. Where data is transferred outside the EEA or UK, we rely on Standard Contractual Clauses (SCCs) or other GDPR-compliant transfer mechanisms.
5.3 Employer Accounts and GDPR
Employer accounts that access installer profile data in the context of their own EU/UK business operations may be acting as independent data controllers under GDPR. We provide a Data Processing Agreement (DPA) for employer accounts that require one for GDPR compliance.
5.4 Legal Requirements
We may disclose your information if required by law, court order, or governmental authority, or if we reasonably believe disclosure is necessary to protect the rights, property, or safety of Film Installers, our users, or the public.
5.5 Business Transfers
If Film Installers is acquired, merged, or undergoes a change of ownership, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a materially different privacy policy.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide services.
- Account data: retained for the life of your account, then deleted within 90 days of a confirmed deletion request
- Consent logs and DPA records: retained for 7 years for legal compliance purposes, even after account deletion
- Log and IP data: retained for up to 12 months
- Moderation and flag records: retained for up to 5 years for safety and abuse prevention purposes
- Anonymized ad impression and click data: retained indefinitely as it contains no personal data
7. Your Rights — United States (CCPA) and Canada (PIPEDA)
7.1 California Residents — CCPA Rights
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA): the right to know what personal information we collect and how it is used; the right to request deletion; the right to opt out of the sale of personal information (we do not sell your data); and the right to non-discrimination for exercising your rights.
To exercise your CCPA rights, contact privacy@filminstallers.com. We will respond within 45 days.
7.2 Canadian Residents — PIPEDA Rights
If you are a Canadian resident, you have the right to know why your personal information is collected and used; the right to access your data; the right to challenge its accuracy and request corrections; and the right to withdraw consent at any time. You may also complain to the Office of the Privacy Commissioner of Canada (OPC).
To exercise your PIPEDA rights, contact privacy@filminstallers.com.
8. Your Rights — European Economic Area and United Kingdom (GDPR)
If you are located in the EEA or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) and UK GDPR. These rights are already technically implemented through our Platform — see below for how to exercise each one.
8.1 Right of Access (Article 15 GDPR)
You have the right to obtain a copy of all personal data we hold about you, along with information about how it is processed. Use the Data Export feature in your account settings to download your data at any time, or email us for a full structured export.
8.2 Right to Rectification (Article 16 GDPR)
You have the right to have inaccurate personal data corrected. You can update your profile information directly from your dashboard at any time.
8.3 Right to Erasure / Right to Be Forgotten (Article 17 GDPR)
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Use the Account Deletion feature in your account settings to submit a deletion request, which is processed within 30 days. Note that some data (such as consent logs) is retained for legal compliance purposes even after deletion.
8.4 Right to Restriction of Processing (Article 18 GDPR)
You have the right to request that we restrict processing of your personal data in certain circumstances — for example, while we verify the accuracy of your data or assess an objection you have raised. Contact us at privacy@filminstallers.com to submit a restriction request.
8.5 Right to Data Portability (Article 20 GDPR)
Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format (JSON). Use the Data Export feature in your account settings.
8.6 Right to Object (Article 21 GDPR)
You have the right to object to processing based on legitimate interests or for direct marketing purposes. To object to targeted advertising, use the Advertising Preferences section in your account settings. To raise other objections, contact us at privacy@filminstallers.com.
8.7 Right to Withdraw Consent (Article 7(3) GDPR)
Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Cookie consent can be withdrawn via the Manage Cookie Preferences link in the footer. Advertising preferences can be changed in your account settings.
8.8 Right to Lodge a Complaint
You have the right to lodge a complaint with your local supervisory authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk. EEA residents may contact their national data protection authority — a full list is available at edpb.europa.eu.
8.9 Response Timeframes
We will respond to GDPR rights requests within 30 days. Where a request is complex or we receive a high volume, we may extend this by a further two months, in which case we will notify you within the initial 30-day period.
8.10 Data Controller
Film Installers is the data controller for personal data processed on this Platform. Our contact details are in Section 14 below. We do not currently have a formal EU/UK representative under Article 27 GDPR as we are in pre-expansion phase, but we will appoint one before actively marketing to EEA/UK residents.
9. International Data Transfers
Our Platform infrastructure is hosted in the United States (via Supabase). If you are located in the EEA or UK, your personal data will be transferred to and processed in the US. We rely on the following safeguards for these transfers:
- Standard Contractual Clauses (SCCs) approved by the European Commission and UK ICO, incorporated into our data processing agreements with sub-processors
- The UK International Data Transfer Agreement (IDTA) where applicable for UK-to-US transfers
- Where available, adequacy decisions adopted by the European Commission or UK Secretary of State
You may request a copy of the relevant transfer safeguards by contacting us at privacy@filminstallers.com.
10. Cookies and Tracking
We use cookies and similar technologies on our Platform. For full details on what cookies we use and how to manage your preferences, see our Cookie Policy.
EEA and UK users: non-essential cookies are only set after you give explicit consent through our cookie banner, in compliance with the ePrivacy Directive and the UK Privacy and Electronic Communications Regulations (PECR). You can manage your cookie preferences at any time using the “Manage Cookie Preferences” link in the footer.
11. Data Security
We implement industry-standard security measures to protect your personal information, including:
- Passwords stored as bcrypt hashes — never in plain text
- Data encrypted in transit using TLS/HTTPS
- Row-level security policies on all database tables
- Access controls limiting which staff can access user data
No method of transmission over the internet is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and applicable supervisory authorities as required by GDPR (within 72 hours of becoming aware of the breach).
12. Children's Privacy
The Platform is intended for users who are 18 years of age or older. We do not knowingly collect personal information from individuals under 18. If you believe we have inadvertently collected such information, please contact us immediately at privacy@filminstallers.com and we will delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy periodically. When we make material changes, we will update the effective date and, where appropriate, notify you via email or in-platform notice. For EEA and UK users, where a change affects the legal basis for processing or your rights in a material way, we will seek fresh consent where required.
Your continued use of the Platform after any changes constitutes acceptance of the updated policy (except where re-consent is required).
14. Contact & Data Requests
For all privacy-related questions, access requests, or deletion requests:
Film Installers — Privacy Team
Email: privacy@filminstallers.com
General: legal@filminstallers.com
Website: filminstallers.com
For employer accounts requiring a Data Processing Agreement, see our DPA page.