Privacy notice · updated 5 October 2026

How we handle your data.

We collect only what we need to answer your request. Our database is in the EU, and we never sell your data.

Who we are: NeedToFilm Ltd, London, is the controller of the personal data described here. Contact us about anything in this notice at [email protected].
What we collect: What you type into our forms: your email, name, role, company and phone number if you give them.
What you tell us about a production or briefing: your brief, location, budget, dates, your answers to the questions on a briefing page and the figures and suggestions they produce.
Whether you confirmed your email, and the wording and time of the consent you gave.
Basic usage events on our pages (for example that a plan was built), tied to a random session id kept in your browser for that tab only. We use no advertising or tracking cookies. If your browser sends Do Not Track, we record nothing.
Standard server logs, including IP addresses, which we use to stop abuse and limit repeated requests.
Why we use it, and our lawful basis: To answer your request (send your plan or briefing, find a crew, arrange a call): your consent, given when you tick the box, and steps you asked us to take before any contract.
To email you about this briefing and related services: your consent. You can withdraw it at any time.
To keep the site secure and working (rate limits, abuse prevention, usage statistics): our legitimate interest in running a safe, working service.
AI processing: When you build a production plan, the text of your brief is sent to Google's Gemini service to draft the plan. Do not include personal details in a brief that you do not want processed this way. Prices in a plan come from our own rate card, not from the AI.
Who processes it for us: Google Cloud and Firebase: our database, stored in the European Union (eur3 multi-region).
Vercel: hosting of this website.
Resend: sending our emails.
Google Gemini: drafting production plans from briefs.
Transfers outside the UK: Some of these providers are based in, or may access data from, the United States. Where that happens, the transfer is covered by the UK–US data bridge or by the UK International Data Transfer Addendum to standard contractual clauses.
How long we keep it: If you sign up and do not confirm your email, your details are deleted automatically after 30 days.
Confirmed leads and production requests are kept for up to 24 months after our last contact, unless we are working together, in which case we keep what the contract and the law require.
Saved production plans expire after 90 days.
Your rights: You can ask for a copy of your data, ask us to correct or delete it, restrict or object to how we use it, ask for it in a portable format, and withdraw consent at any time without affecting what we did before. Email [email protected]and we will reply within one month. To stop our emails, reply "unsubscribe" to any of them. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Changes: We update this notice when our practices change. The date at the top shows the current version.

NeedToFilm Ltd · London · [email protected]