Privacy Policy
What we collect when you ask us for an estimate, why, who sees it, how long we keep it, and how to make us correct or delete it. Written to be read, not to be scrolled past.
In short
- We collect your name, one way to reach you and your answers about the film — only to prepare and send your estimate and talk to you about it.
- We never sell your data, never share it for advertising, and use no tracking or advertising cookies.
- You can see, correct or delete your data at any time by writing to privacy@ambercut.com.
1. Who we are
Ambercut is a trading name of Anton Talyan, sole proprietor. We are the controller of the personal data described in this policy — the party that decides why and how it is used.
For anything about your data, write to privacy@ambercut.com. A person, not a bot, reads that inbox.
2. What we collect
Only what we need to answer you. Specifically:
- What you type into the estimate calculator: your name, one contact (an email address, a phone number for WhatsApp, or a Telegram username) and your answers about the film — what it is, how long, whether you have a script, your deadline and any extras.
- A record of your agreement: the time you ticked the box and the version of this policy you agreed to. We keep it to be able to show that you asked to be contacted.
- Whatever you choose to send us afterwards — messages, briefs, reference images, product photos or files for your project.
- Technical data our hosting provider records automatically when any website is visited: IP address, browser and device type, the page requested and the time. This is used to deliver the site and keep it secure, not to profile you.
3. What we do not collect
- No advertising or analytics cookies, no tracking pixels, no fingerprinting, no data brokers.
- No special-category or sensitive data (health, biometrics, beliefs and the like). Please do not send it to us; if it is ever needed for a project, we will ask for it separately and explicitly.
- Nothing from children: this site is for businesses and is not directed at anyone under 16.
4. Why we use it, and on what legal basis
| What we do | Data used | Legal basis (GDPR / UK GDPR) |
|---|---|---|
| Prepare your estimate and send it to you on the channel you gave | Name, contact, project answers | Steps you asked us to take before a contract — Art. 6(1)(b) |
| Reply to your questions and discuss your project | Name, contact, messages, files | Steps before a contract / performing the contract — Art. 6(1)(b) |
| Keep a record that you asked to be contacted | Consent record (time, policy version) | Our legitimate interest in being able to show it — Art. 6(1)(f) |
| Keep the site working and secure, block spam and abuse | Technical data, a hidden anti-spam field | Legitimate interests — Art. 6(1)(f) |
| Keep accounting and tax records if you become a client | Name, contact, invoice details | Legal obligation — Art. 6(1)(c) |
We contact you only about the estimate you requested and the project that may follow. We do not send newsletters or marketing. If we ever offer them, they will be strictly opt-in, with a separate box that is unticked by default and an unsubscribe in every message.
Where we rely on legitimate interests, we have checked that they do not override your rights. You can object to that use at any time (see sections 10 and 11).
7. We do not sell or “share” your data
We do not sell personal data, rent it, or share it for cross-context behavioural advertising, and we have not done so in the past twelve months. We do not use it for targeted advertising or profiling, and we make no decisions about you that are based solely on automated processing: the calculator gives an indicative range, and the actual quote is set by a person.
Because we neither sell nor share, there is nothing to opt out of — but we honour Global Privacy Control (GPC) and similar browser signals all the same.
8. International transfers
We work with clients and service providers in several countries, so your data may be processed outside the country where you live, including in the United States.
Where data leaves the European Economic Area, the United Kingdom, Switzerland or another country that restricts transfers, we rely on a lawful transfer mechanism — such as an adequacy decision, the EU–US Data Privacy Framework where the provider is certified, the European Commission's Standard Contractual Clauses or the UK Addendum to them — together with the provider's security commitments. For transfers from the UAE, Saudi Arabia, Qatar and other countries with transfer rules, we follow the conditions their laws set. You can ask us for details of the safeguard used for any transfer.
9. How long we keep it
- Estimate requests that do not turn into a project: up to 24 months from our last contact, then deleted.
- Client and project records: for the length of our relationship, then as long as tax and accounting law requires (usually up to 7 years).
- Consent records: for as long as we hold the data they relate to.
- Technical logs: kept by the hosting provider for a short period under its own retention schedule.
- If you ask us to delete your data earlier, we will — unless the law requires us to keep part of it, in which case we will tell you which part and why.
10. Your rights
Wherever you are, you can ask us to:
- tell you what personal data we hold about you and give you a copy (access);
- correct anything that is wrong or incomplete (rectification);
- delete it (erasure);
- limit how we use it, or stop using it for a particular purpose (restriction and objection);
- send it to you or to someone else in a commonly used format (portability);
- withdraw any consent you gave, at any time, without affecting what was done before.
11. How to use your rights
Write to privacy@ambercut.com from the contact you gave us, or tell us which contact it was. We may ask you to confirm your identity before we act, so that we never hand your data to someone else. It is free.
We answer within one month, or within the time your local law sets if it is shorter (for example, 45 days under US state privacy laws). If a request is complex we may extend that once, as the law allows, and we will tell you why. You can use an authorised agent; we may ask them for proof of your permission.
Using your rights will never change the price, quality or service you get from us.
12. If you are in…
- The European Economic Area, the UK or Switzerland — you have the rights above under the GDPR, the UK GDPR and the Swiss FADP, and you can complain to your local data protection authority (in the UK, the Information Commissioner's Office). We would appreciate the chance to fix the problem first.
- The United States — under the California Consumer Privacy Act and the privacy laws of Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states, you have the rights in section 10 plus the right not to be discriminated against for using them. In the last 12 months we collected identifiers (name, contact), commercial information (your project details) and internet activity (technical logs), from you and your device, for the purposes in section 4. We did not sell or share them, and we do not process sensitive personal information. If we decline a request, you can appeal by replying to our decision; if you remain unhappy, you can contact your state attorney general.
- The United Arab Emirates, Saudi Arabia, Qatar, Bahrain, Oman or Kuwait — we handle your data in line with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), the Saudi Personal Data Protection Law, Qatar Law No. 13 of 2016 and the other GCC data protection laws as they apply to you, including your rights to access, correction, erasure and objection, and the right to complain to the relevant authority.
- Canada, Brazil, Australia, Singapore, India or elsewhere — you have the rights your local law gives you (including under PIPEDA, the LGPD and the Australian Privacy Act). Write to us and we will apply them.
13. Security
The site is served only over encrypted connections (HTTPS). Access to estimate requests is limited to the people who work on them. We choose providers that commit to protecting the data they handle.
No system is perfectly secure. If a breach ever puts your data at risk, we will notify you and the relevant authorities as and when the law requires.
14. Material you send us
If you send us images, recordings or details of other people — employees, customers, a founder — please make sure you are allowed to share them with us. We use such material only for your project and do not use anyone's likeness without their written permission.
15. Changes to this policy
When we change this policy we update the date and version at the top. If a change is material, we will tell people with an open estimate or project directly. Each agreement given in the calculator is recorded against the version that was live at the time.