Privacy Policy

We collect information in a few different ways:

• Information you provide. When you create an account, place an order, submit a contact or booking inquiry, or otherwise contact us, we collect your name, email address, and the contents of any message you send. For booking inquiries you may optionally provide a phone number, preferred session date, and general location. For orders, we also collect your shipping and billing address.
• Payment information. Payments are processed by Stripe. We do not store your full card number, CVC, or bank details on our servers. Stripe returns a limited record (such as the last four digits and card brand) that we use to display and support your order.
• Order and fulfillment data. To produce and ship your order, we share the items, shipping address, and related order details with Gelato, our print-on-demand fulfillment partner. Gelato processes this information solely for the purpose of order production, packaging, and delivery and handles such data in accordance with its own privacy and security practices. Gelato uses this information only to fulfill your order and does not use it for independent marketing purposes.
• Automatically collected data. Our hosting provider (Vercel) and standard server logs may record your IP address, browser type, device type, referring page, and pages viewed. We use this to keep the site secure and understand how it is used.
• Cookies and similar tech. We use cookies and similar technologies to operate and improve the website. These include strictly necessary cookies required for core functionality (such as maintaining your session and shopping cart) and may include analytics or performance cookies that help us understand how visitors interact with the site. You can control or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of the website. At this time, we do not use cookies for cross-site tracking or targeted advertising.

We use the information we collect to:

• Process, fulfill, and ship your orders;
• Provide customer support, respond to your messages, and follow up on booking inquiries;
• Send transactional emails such as order confirmations, shipping updates, and account notifications;
• Send occasional newsletter emails about new prints and limited drops, only if you opt in by subscribing. You can unsubscribe at any time using the link in any newsletter email;
• Calculate and remit applicable sales tax;
• Operate, secure, and improve the website; and
• Comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not use it for targeted advertising.

We share only the information each provider needs to perform its role, and each is bound by its own privacy and security terms:

• Stripe— payment processing and fraud prevention.
• Gelato— print production, optional framing, packaging, and shipping.
• Supabase— account, authentication, and order database.
• Cloudinary— image storage and delivery.
• Resend— transactional email delivery.
• Vercel— website hosting and edge infrastructure.
• Cloudflare— domain, DNS, and email routing.

We may also disclose information when required by law, to respond to lawful requests, or to protect the rights, property, or safety of Derrickfilmsit, our customers, or others.

We retain personal information for as long as necessary to provide our services, fulfill orders, maintain business and tax records, resolve disputes, and enforce our agreements. In most cases, order and account data are retained for a minimum period required by applicable tax and accounting laws, after which they are deleted or anonymized when no longer needed.

We use industry-standard measures to protect your information, including HTTPS across the site, hashed credentials, and scoped database access. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

You have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of your personal information, subject to records we are required to retain for legal, tax, or business purposes;
• Request a copy of your personal information in a portable format;
• Opt out of receiving non-transactional communications, such as marketing emails.

To exercise any of these rights, please contact us at info@derrickfilmsit.com. We will respond within a reasonable timeframe and in accordance with applicable law.

Some web browsers offer a “Do Not Track” (DNT) feature that signals your preference not to be tracked across websites. Because there is no uniform standard for how to respond to these signals, our website does not currently respond to DNT signals. We continue to limit tracking to what is described in this Privacy Policy.

This site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

Derrickfilmsit is based in the United States, and our service providers operate in the United States and other countries. If you access the site from outside the U.S., your information may be transferred to, stored, and processed in the U.S. under U.S. law.

We take reasonable administrative, technical, and physical measures to protect your personal information. In the event of a data security incident that affects your personal information, we will notify you as required by applicable law and take appropriate steps to mitigate the impact.

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect the latest version. Material changes will be posted on this page and, where appropriate, communicated to you by email.