Legal

Privacy Policy

This Privacy Policy explains how ImpactDistribution.IO collects, uses, and protects your personal data when you use our website, film distribution platform, and related services.

Effective Date:6 October 2026
Jurisdiction:United Kingdom (UK GDPR)
Contact:hello@impactdistribution.io

We are committed to protecting your privacy and complying with:

  • The UK General Data Protection Regulation (UK GDPR)
  • The Data Protection Act 2018

1.Who We Are

ImpactDistribution.IO is a film distribution management platform operated by Impact Distribution Ltd. We provide tools for filmmakers and distributors to manage their impact campaigns, screenings, licensing, and audience engagement.

If you have questions about this Privacy Policy, you may contact us at: hello@impactdistribution.io

2.Personal Data We Collect

We collect personal data directly from you and through your use of the Platform.

2.1Information You Provide

This may include:

  • Name
  • Email address
  • Organisation name
  • Job title
  • Phone number
  • Payment information (processed via third-party providers)
  • Film project details
  • Screening event details

2.2Account Information

If you create an account, we may collect:

  • Login credentials
  • Platform usage history
  • Film portfolio details
  • Subscription information

2.3Technical & Usage Data

When you access the Platform, we may collect:

  • IP address
  • Device type
  • Browser type
  • Operating system
  • Pages visited
  • Access times

Where these features apply, we also collect:

  • Page-view counts for public event and RSVP pages
  • Social press-kit page visits and button clicks (downloads, copy controls and external links), using a random identifier held only for the page visit. No visitor name, email, IP address or destination URL is stored in this engagement report.
  • Email engagement data (whether an email was delivered, opened, or which links were clicked) for emails sent through the Platform
  • Screener viewing data (whether a secure screener link was opened and how much of the film was watched, where this tracking is enabled)

2.4Payment Information

  • Payments are processed by third-party payment providers.
  • We do not store full payment card details.
  • Payment processors act as independent data controllers in respect of payment data.

2.5Connected Third-Party Accounts

You can connect your own third-party accounts to the Platform — for example Zoom, Gmail or another email provider, Google (for Sheets and calendar), Microsoft, or Canva. When you connect an account, we collect only what is needed to provide the features you enable:

  • Your account identifier (such as your name, email address and account ID) as returned by that service
  • The access and refresh tokens (or, where an app password is used for email, that password) that let us act on your behalf
  • Data you choose to import or synchronise from that service

Connection credentials are stored encrypted, are used only for the purposes you connect the account for, and are never displayed to other users. When you sign in using a social provider (Google, Apple or Microsoft), we receive only the basic profile information needed to create your account.

3.How We Use Your Data

We process personal data for the following purposes:

3.1To Provide Services

  • Process screening licence purchases
  • Manage film distribution campaigns
  • Facilitate funding and grant applications
  • Manage accounts
  • Provide customer support

3.2To Manage Platform Features

  • AI-powered impact strategy generation
  • Contact and organisation management
  • Festival submission tracking
  • Financial reporting and budgeting

3.3Legal & Compliance Purposes

  • Enforce our Terms
  • Prevent fraud or misuse
  • Comply with legal obligations

3.4Marketing Communications

We may send marketing communications where:

  • You have opted in
  • You are an existing customer and we are promoting similar services

You may unsubscribe at any time.

3.5Connected Third-Party Accounts

If you connect an account, we use that connection to provide the features you choose. For example:

  • Creating meetings on your own Zoom account and, where the meeting has cloud recording with audio transcripts enabled, retrieving that meeting's transcript to help draft session reports
  • Sending emails from your own mailbox on your behalf, including measuring delivery, opens and clicks
  • Importing contacts or data from Google Sheets and other connected sources
  • Importing designs and assets from Canva

We access only the data the connected service exposes through the permissions you approve when connecting the account, and we use it only in connection with the feature you enabled.

4.Legal Basis for Processing

Under UK GDPR, we rely on:

  • Contractual necessity (to provide purchased licences and services)
  • Legitimate interests (platform security, fraud prevention, service improvement)
  • Consent (marketing communications where required)
  • Legal obligation (financial and compliance records)

5.Data Sharing

We may share personal data with:

  • Payment processors
  • Cloud hosting providers
  • Email service providers
  • Analytics providers
  • AI service providers (for platform features)
  • Professional advisers (lawyers, accountants)

All third-party providers are required to process data securely.

We do not sell personal data.

5.1Accounts You Connect

Where you connect your own third-party account (such as Zoom, Google, Microsoft, or Canva), the data described in sections 2.5 and 3.5 is shared with that provider in line with its own terms and privacy policy. You can disconnect an account at any time in Settings, or by revoking access at the provider. When you do, we stop accessing your account and delete the stored connection credentials.

6.International Transfers

Where data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:

  • UK International Data Transfer Agreements
  • Standard Contractual Clauses

7.Data Retention

We retain personal data only as long as necessary to:

  • Fulfil contractual obligations
  • Comply with legal requirements
  • Resolve disputes

8.Client Data Responsibilities

Where clients (filmmakers, distributors) collect audience or contact data independently of the Platform, the client acts as a separate data controller and is responsible for compliance with applicable data protection laws.

Where data collection occurs via the ImpactDistribution.IO Platform, Impact Distribution Ltd acts as data controller for that data.

9.Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

  • Encrypted connections (HTTPS)
  • Encryption at rest for credentials used to connect third-party accounts (such as access tokens and email app passwords)
  • Access controls
  • Secure hosting environments

However, no internet transmission is completely secure.

10.Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion (where applicable)
  • Restrict processing
  • Object to processing
  • Data portability
  • Withdraw consent (where applicable)

You can also disconnect any third-party account you have connected (such as Zoom or your mailbox) at any time in Settings, or ask us to delete the credentials we hold for it.

We will respond to your request within one month of receipt.

Requests may be made to: hello@impactdistribution.io

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk

11.Cookies

We use cookies and similar technologies to:

  • Operate the Platform
  • Improve functionality
  • Analyse usage
  • Support marketing efforts

You may manage cookie preferences via your browser settings.

Press-kit statistics are first-party, cookieless measurements used to help film teams understand engagement. ImpactDistribution.IO stores these counts in Lovable Cloud and shares aggregate reports with authorised film teams, not advertising platforms. Use “Turn off visit statistics” at the foot of any press kit to opt out. We also honour a declined cookie choice, Do Not Track and Global Privacy Control. A page-visit identifier is not saved between visits, so counts do not identify unique people across visits.

Please see our Cookie Policy for full details.

12.Children's Data

Our services are not directed to children under 16.

We do not knowingly collect personal data from children without appropriate consent.

13.Changes to This Policy

We may update this Privacy Policy periodically.

If we make material changes, we will notify you through the Platform or by email. The latest version will always be published on the Platform.

14.Contact Us

For any privacy-related queries, please contact:

ImpactDistribution.IO

Email: hello@impactdistribution.io