Privacy Notice

Who we are

Cinemas in Action is an independent, evidence-led intelligence platform for cinema exhibition. The controller responsible for the personal data described below will be named here in full — including registered business address — once the operator supplies the legally accurate details. In the meantime, all privacy correspondence should be directed to markdequervain@actionmarketingworks.com.

What we collect and why

If you sign up for Cinemas in Action updates using one of the forms on this site we record:

• your first name (required) and, if you choose to provide them, your surname, cinema or organisation, job title or role, and country;
• your email address;
• the exact wording of the consent you gave, and the version of that wording;
• the date and time you gave consent;
• which form you used (homepage, footer, updates page, Explore inline block, or the block at the end of an article);
• a sanitised record of the page you were on (path only — no query string);
• campaign attribution tags (utm_source, utm_medium, utm_campaign) where present, with any personal-data-shaped values removed.

We use your contact details and any professional information you supply only to manage and personalise Cinemas in Action updates — for example, so we can address you by name and, in future, tailor the ideas we send you to the kind of cinema you work in. We do not sell, rent or share your details with any third party for their own marketing.

We do not store your IP address, your browser user-agent, or the full referring URL alongside your consent record. A one-way key derived from your IP is held only for short-term rate-limiting of the form itself and expires within 24 hours.

Lawful basis

We process your email address on the basis of your explicit consent (UK GDPR Article 6(1)(a) / EU GDPR Article 6(1)(a)). You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

How to withdraw consent

You can withdraw consent at any time by emailing markdequervain@actionmarketingworks.com, or by replying UNSUBSCRIBE to any update we have sent you. When we begin sending updates every message will also carry a one-click unsubscribe link.

Who processes your data

• Supabase (EU) — database that stores the subscriber record and consent evidence.
• Lovable / Cloudflare — hosting and edge delivery of the website and its server routes.
• Lovable's managed email facility — used only to notify the operator internally that a new subscriber has been recorded. Subscribers do not receive email from Cinemas in Action at this stage.

No external newsletter, marketing-automation, or contact-list provider has been connected at this stage.

How long we keep it

• Active subscribers: for as long as consent stands.
• Unsubscribed addresses: retained as suppression evidence so we cannot accidentally re-add you.
• Rate-limit keys: automatically expire within 24 hours.

Cookies

We do not set advertising or analytics cookies on the public website. The only browser-side storage is strictly necessary — an authenticated session token for admin users on private administration pages, and TanStack Router's scroll restoration in session storage. These do not require a consent banner.

Your rights

You have the right to request access to, correction of, or erasure of your personal data, and to lodge a complaint with the relevant supervisory authority. Please write to markdequervain@actionmarketingworks.com.

Changes to this notice

When we make material changes we will update the version number at the top and the effective date. The current version is recorded against every consent event in our database, so we can always show which wording you agreed to and when.