Privacy

1. Who we are

1.1 The data controller is The Interfaces Company of Tomorrow Limited, a company registered in England and Wales.

The Interfaces Company of Tomorrow Limited
Company number: 17378131
Incorporated: 3 August 2026
Registered office: 4-6 Greatorex Street, London, England, E1 5NF, United Kingdom
Contact: [email protected]

The Interfaces Company of Tomorrow Limited trades as The Interfaces Company and operates the Screening platform.

1.2 Contact for privacy requests, EU/UK representative-style enquiries, and data-protection correspondence: [email protected]. We have not appointed a statutory Data Protection Officer unless the law later requires one.

2. Where this applies

2.1 Screening is offered worldwide except where sanctions or payment rails block access. This policy uses UK and EU GDPR as the high-water mark. Where your country grants additional or different rights, we honour those rights for you.

2.2 Some processors are in the United States and other countries. We use UK/EU adequacy decisions, the UK International Data Transfer Agreement, EU standard contractual clauses, or equivalent safeguards.

3. If you watch, buy a ticket, or rent or buy a film

We may collect and use:

• Ticket email — to fulfil purchases, send confirmation and reminders, and grant premiere, catalog, or door access.
• Purchase type — premiere ticket, rental, or buy, and rental expiry where applicable.
• Payment references — Stripe checkout and payment identifiers (we do not store full card numbers). Stripe may collect billing address when required.
• Timezone — if you provide it at checkout, to time reminders and calendar links.
• Session and access data — playback session tokens, heartbeats, and device replacement signals to enforce one stream per ticket.
• Forensic watermark — a short trace code derived from your email and session during online playback (legitimate interests).
• Account data — if you sign in as a buyer (name, email, authentication records, optional passkeys).
• Ticket wallet and watch history — premieres and catalog films you attended, rented, or purchased when signed in.
• In-person check-in — ticket code, attendance mode, and check-in time. The organiser is an independent controller for operational door use.
• Optional discovery opt-in — only if you tick a Screening updates checkbox.
• Technical data — IP address, browser type, and logs needed for security.

4. If you host or join a team

We may collect and use:

• Organisation profile — name, slug, contact details, payout status.
• Team members — invite emails and roles.
• Listings — titles, showtimes, venues, posters, stream configuration, rent/buy settings, and rights attestation records.
• Uploaded films — files and metadata sent to our video host.
• Host access requests — email, name, organisation, message, website.
• Interest signups on your premieres — email and optional name when someone asks to hear when tickets open. You may receive operational counts; you are not given those emails for your own marketing unless a separate consent is introduced and disclosed.
• Buyer data at check-in — door staff can search tickets by email. You are an independent controller for that use.
• Aggregate analytics — tickets sold, revenue, check-ins, and online watch counts.

Hosts agree to our Organisers.

5. Waitlist, host requests, and interest pages

• Product waitlist — email, optional name, intent, note, and source (homepage, waitlist, host form). Used to send the updates you asked for and to invite filmmakers. Consent is collected on the form. Retention: until you unsubscribe or ask us to delete, unless we must keep a record of the request.
• Host access requests — processed to decide whether to invite you. Transactional email about that request does not require marketing consent. Optional product updates use the waitlist if you tick the box.
• Per-premiere interest — email (and optional name) so we can tell you when tickets open for that premiere. That is fulfilment of your request, not a general marketing list.

6. If you only browse

Minimal technical data (IP, browser, aggregate cookieless analytics) and strictly necessary cookies. See Cookies.

7. If you report content

Name (if provided), email, URL, category, description, and evidence so we can review, moderate, respond, and keep trust-and-safety records (legitimate interests and legal obligation).

8. Lawful bases (UK / EU GDPR)

• Contract — tickets, access, host accounts, waitlist fulfilment you asked for.
• Legitimate interests — security, fraud prevention, session limits, watermarks, service improvement, trust and safety (balanced against your rights).
• Consent — optional Screening marketing emails.
• Legal obligation — tax, accounting, sanctions, illegal-content duties, and other law.

Where GDPR does not apply, we still process only as needed to run the service, honour your choices, and comply with local law.

9. Email

Transactional messages (tickets, reminders, access, host-request status, security) do not require marketing opt-in. Marketing about Screening generally is sent only if you opt in, with unsubscribe. We do not add ticket buyers to marketing lists by default. CAN-SPAM, CASL, PECR, and similar rules are honoured by requiring opt-in for marketing and offering a working unsubscribe.

10. Sharing and processors

Service providers (on our instructions):

• Stripe — payments and Connect payouts (including the United States)
• Mux — video upload, transcoding, signed playback
• Neon — Postgres
• Vercel — hosting, Blob storage, cookieless Web Analytics
• Sentry — error monitoring
• Resend — email delivery
• Upstash — distributed rate limiting (where configured)
• Better Auth — sign-in, sessions, passkeys

We do not sell personal data. We do not share personal information for cross-context behavioural advertising. We do not share buyer emails with organisers for their marketing unless a separate consent is introduced and disclosed.

Partners and sponsorship. If you contact us about a commercial partnership, we process your name, organisation, email, and message to respond and to operate any programme you agree to. We do not use ticket-buyer emails for partner prospecting. Where a paid partner placement runs on the Platform, we aim to disclose that to viewers as described in our Terms.

11. International transfers

Processors may process data outside the UK/EEA, including the United States. Safeguards: adequacy, UK IDTA, and/or EU standard contractual clauses.

12. Retention

• Orders and tickets — typically up to 7 years where accounting or chargeback rules require.
• Playback sessions — hours or days after the window.
• Security logs — typically up to 90 days unless an investigation needs longer.
• Content reports — typically at least 12 months.
• Waitlist and marketing records — until you unsubscribe or we delete on request.
• Host access requests — while we decide, then as needed for abuse prevention.

13. Your rights worldwide

Email [email protected] from the address we hold. We may need to verify you. We aim to respond within one month or the local statutory period. We honour additional local rights where they apply.

UK / EU (GDPR). Access, rectification, erasure, restriction, objection, portability, withdraw marketing consent. Complain to the ICO (ico.org.uk) or your EEA supervisory authority.

United States (CCPA/CPRA and other state laws).Know / access, delete, correct, and opt out of sale or sharing. We do not sell or share personal information as those terms are commonly defined, and we do not use it for cross-context behavioural advertising. We honour Global Privacy Control signals as an opt-out of sale/share if we ever engage in that processing. No sensitive-data sale. We will not discriminate for exercising these rights. Subject line: "US Privacy Request". Authorised agents may write on your behalf with proof.

Canada (PIPEDA / Quebec Law 25). Access and correction; withdraw consent for optional processing; complain to the OPC or the Quebec CAI.

Australia (Privacy Act / APPs) and New Zealand. Access and correction; complain to the OAIC or NZ Privacy Commissioner.

Brazil (LGPD). Confirmation, access, correction, anonymisation, portability, deletion of excess data, information about sharing, withdraw consent. ANPD is the authority.

Switzerland (FADP), Japan (APPI), Singapore (PDPA), South Africa (POPIA), India (DPDP). Access, correction, and deletion or withdrawal as those laws provide. Write to the same inbox; we will handle the request under the law that applies to you.

14. Cookies

Strictly necessary cookies only, worldwide. Details: Cookies.

15. Security

Appropriate technical and organisational measures. No method of transmission or storage is completely secure.

16. Children

The Platform is not directed at children under 13 (including COPPA). We do not knowingly collect personal data from children under 13. In the EEA the digital consent age is 16 unless a member state lowers it (not below 13). Paid tickets require the capacity to contract and to pay — typically 18. If you believe we hold a child's data, email us and we will delete it.

17. Automated decisions

We do not make solely automated decisions with legal or similarly significant effects. Invite-only host approval is a human decision.

18. Changes

We may update this policy. The version on the Platform applies from its stated effective date.

19. Contact

Privacy: [email protected].