Last updated: 8 October 2026
This Privacy Policy explains how FILMD collects, uses, shares and protects personal data when you access or use the FILMD platform, including our websites, web applications, mobile applications (iOS and Android), and related services (the "Service"). It also explains your privacy rights and how the law protects you.
We process personal data in accordance with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.
For the purposes of UK GDPR, the Data Controller for the Service is FILMD Services Ltd (company no. 13836541), registered office: 5 Ribblesdale Place, Preston, Lancashire, United Kingdom, PR1 8BZ.
FILMD Ltd owns the FILMD brand, platform and intellectual property. FILMD Services Ltd operates the Service under licence and may share personal data with FILMD Ltd as an affiliated company where necessary for legitimate business purposes (for example, governance, legal compliance and internal administration), and in accordance with this Privacy Policy.
If you have questions about this Privacy Policy or your personal data, contact us at: privacy@filmd.co.uk
This Privacy Policy applies to visitors to our websites, registered users, members, and anyone interacting with the Service (including through profiles, productions, jobs, submissions, messages, the Community Feed, the Screening Room, grants, accreditation and verification).
The Service is intended for users aged 18 and over only. We do not knowingly collect personal data from individuals under the age of 18.
In this Privacy Policy, "Personal Data" means information relating to an identified or identifiable individual. "Processing" means any use of personal data, including collection, storage, use, sharing and deletion.
"User Content" means content and materials users submit or make available through the Service, including posts, messages, files, scripts, films/video projects, job applications, grant submissions, recommendations and profile information.
We collect information such as your name, email address, password (stored in hashed form), account identifiers and basic contact preferences.
You may choose to provide profile information such as biography, skills, credits and past work, equipment, availability, links, and agent or representative details. Some profile information may be visible to other users and, depending on your settings and how you share links, may be publicly accessible.
We process recommendations and endorsements users give to each other, and social features such as following and follower relationships, where these features are enabled. Recommendations reflect the opinion of the author and are displayed only if the recipient chooses to make them visible.
We process posts, comments, replies, reactions, links and uploaded media you choose to share in the Community Feed.
We process messages and related metadata (such as timestamps and participants) when you use Direct Messaging.
If you create or participate in a Production workspace, we process workspace information, participants, internal discussions and files you upload (for example scripts, documents and production materials).
If you use the Writers Room, we process the scripts you write or import, together with their versions and drafts, title pages, notes, comments and breakdown items, the people you share each script with and their roles, and an authorship record showing which account saved each version, when, and a one-way reference to the signed-in session. If you invite someone who is not yet on FILMD, we process the email address you give us, who sent the invitation and which script it is for.
If you post or apply for jobs, we process job listing details, application submissions, and related communications. Applications are shared with the relevant hirer and/or authorised production administrators.
If you upload or submit content to the Screening Room, we process the submission, associated metadata (such as title, description and credits) and files required to host and stream the content to viewers, subject to access controls.
If you apply for a grant, we process your submissions (for example scripts, pitch materials and supporting information) and related communications. Shortlisted or winning applicants may have limited information used for publicity where the programme terms allow.
If you enable Members Map visibility, we process location information you provide (such as a city/area, postcode, or similar) to display an approximate location. We deliberately obscure location on the map and do not display a user's precise address. You can opt out of the Members Map via account privacy settings.
We use Stripe Identity for identity verification. We send Stripe your email address and an account reference to associate the check with your FILMD account.
Stripe collects the information needed for the selected check directly from you. This may include an identity document and, where the check includes facial comparison, a selfie and associated biometric processing.
FILMD records your verification status. Technical records may also contain verification identifiers, event information, your email address and account reference. The current application integration does not download or store copies of your identity documents or selfies in FILMD’s application database.
Stripe processes verification information as explained in its privacy information. Access to information through Stripe is separate from information stored in FILMD’s application. Information about a requested check is provided through the verification process.
For questions about verification data or to exercise your privacy rights, contact privacy@filmd.co.uk. See also the Stripe Privacy Policy and Stripe Identity privacy information.
We process relevant account information, content, user reports, technical records and correspondence when investigating suspected spam, deception, impersonation, security incidents or other misuse. This may include information indicating that accounts are connected or that restrictions are being evaded.
We use this information to assess concerns, remove content, restrict or terminate accounts, and consider complaints or corrections. Information may come from your use of FILMD, reports submitted by others and our investigations.
If you apply for FILMD Accreditation, we process your application information and supporting evidence. With your permission and where relevant, we may contact referees or industry professionals to verify claims made in your application.
If you purchase FILMD Membership via our website, payments are processed by Stripe. If you purchase via iOS or Android in-app purchase, payments are processed by Apple or Google. We receive and store subscription status and transaction identifiers needed to provide access. Payment card details are not stored by FILMD.
We process information needed to send notifications (in-app, email and push), including email address, device tokens (for push notifications) and notification preferences.
We collect technical data such as IP address, device type, operating system, browser type, log data, crash and performance data, and approximate usage metrics (for example feature usage and interactions) for security, reliability and product improvement.
Some optional profile information, such as trade union membership, may constitute special-category personal data under UK GDPR. Providing this information is optional.
Processing special-category data requires both a lawful basis under Article 6 UK GDPR and an applicable condition under Article 9. Where we rely on explicit consent, we request it separately and explain the purpose of processing and how to withdraw it. Merely entering information into a profile or accepting our Terms does not, by itself, constitute explicit consent.
You can remove optional information from your profile and contact privacy@filmd.co.uk to withdraw consent or ask about its processing. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. Any further retention or processing must have a valid legal basis and applicable special-category condition.
Where a selected identity check includes facial comparison, biometric data may be processed. The verification process will explain the processing and the applicable consent arrangements. Accepting our Terms or this Privacy Policy does not, by itself, constitute explicit consent. The roles and responsibilities of FILMD and Stripe depend on the processing concerned and are described in the information provided during verification and Stripe’s privacy information. For questions or to exercise your rights, contact privacy@filmd.co.uk.
We use personal data to operate and provide the Service, including account creation, access control, enabling community features, supporting productions, facilitating jobs and applications, administering grants, operating the Screening Room, and managing subscriptions.
We also use personal data to maintain security, prevent abuse and fraud, troubleshoot issues, improve performance, and comply with legal obligations. We do not sell personal data.
We use relevant personal data to investigate suspected misuse, protect accounts, remove or restrict content, prevent repeated abuse and consider complaints or corrections.
Writers Room scripts are used only to provide the Writers Room to you and the people you share them with, including the exports and Authorship evidence you request. We do not use scripts to train or run artificial intelligence, for advertising or for marketing, and we do not sell them. FILMD staff do not read scripts. We access a script's content only where you ask us to, where it is necessary to keep the Service running and secure, where we are required to by law, or to investigate a report that it breaches our Terms. Writers Room emails (invitations, mentions and replies) include the script's title and the name of the person who invited or mentioned you, never the script's text. Analytics on Writers Room pages record events, such as a script being created or exported, never the words of a script, and session recording is switched off on Writers Room pages.
We process personal data under the following lawful bases, depending on context:
Where we rely on legitimate interests, we balance our interests against your rights and freedoms and implement safeguards where appropriate.
We rely on legitimate interests for proportionate account-security and moderation processing: protecting users, preventing abuse and maintaining the integrity of FILMD. We balance these interests against your rights and freedoms. Where processing is required to meet a specific legal obligation, we rely on that obligation instead. You may object to processing based on legitimate interests by contacting privacy@filmd.co.uk.
When a member invites someone who is not yet on FILMD to a Writers Room script, we process that person's email address on the basis of legitimate interests: to let the member collaborate with the person they have chosen. We use the address only for that invitation.
Some service providers may process personal data outside the United Kingdom. Where personal data is transferred internationally, we use appropriate safeguards such as adequacy regulations or standard contractual clauses.
You may request further information about international transfers by contacting privacy@filmd.co.uk.
We may send marketing communications where you have opted in or where permitted by law. You can opt out at any time using the unsubscribe link in emails or by updating your preferences (where available).
Service-related communications (for example security updates, important account information, or transactional messages) may still be sent where necessary to operate the Service or comply with legal obligations.
We retain personal data only for as long as necessary to provide the Service, meet legal obligations, resolve disputes and enforce agreements. Retention depends on the type of data and the context in which it is processed.
You may request deletion of your account. Some data may be retained where required for legal, regulatory, security or operational purposes (for example financial records or fraud prevention).
Relevant moderation records may be retained after content removal or account closure where necessary to address complaints, prevent repeated abuse or deal with legal claims. Retention depends on the seriousness and recency of the activity, whether a restriction or dispute remains relevant, and applicable legal requirements. Records must not be kept longer than necessary for those purposes.
Writers Room scripts are kept while your account is open. A script you delete can be restored until it is permanently erased. To have a script, its history, drafts and backups permanently erased, email support@filmd.co.uk. Invitations sent to people who are not yet on FILMD expire after 30 days if they are not accepted.
We implement appropriate technical and organisational security measures, including access controls, encryption where appropriate, and monitoring to help protect personal data.
No method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we take reasonable steps to protect data.
Writers Room scripts are encrypted in transit and where they are stored, both in our main database (Microsoft Azure, United Kingdom) and in our backups (Amazon Web Services, London). Access to the production database is limited to our technical team, and every access is logged.
Under UK GDPR, you may have rights including access, rectification, erasure, restriction, objection, and data portability, and the right to withdraw consent where processing is based on consent.
To exercise your rights, contact privacy@filmd.co.uk. We may need to verify your identity before responding.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO). You can learn more at https://ico.org.uk/.
We may update this Privacy Policy from time to time. Where changes are material, we will take reasonable steps to notify users in advance.