Privacy policy

Rory Thomas Productions is operated by Rory Thomas Productions LLC, a limited liability company registered in Minnesota and based in St. Paul, Minnesota. We are responsible for the information described here.

For any question about this policy, or to make a request about your information, email rory@rorythomas.com. Rory Thomas is the person responsible for privacy matters here.

What you tell us. If you use the contact form, we receive what you type into it: your name, email address, phone number if you provide one, the type of project, its category, the date and location of the shoot, your budget range and timeline, your description of the project, and how you found us.

What is collected automatically. Like most websites, we record which pages are viewed, which portfolio work is opened, how far videos are watched, the site or search engine that referred you, and general information about your browser and device. Your approximate location, at city level, is derived from your IP address. Google does not store your IP address.

We do not ask for or want payment details, government identifiers, or account passwords. There are no user accounts on this site.

To reply to your enquiry and carry out work you ask us to do. To understand which pages and which portfolio work lead people to get in touch, so the site can be improved. To keep the contact form free of automated spam.

We do not use your information to make automated decisions about you, and we do not profile you.

We use three service providers. They process information on our instructions and for no purpose of their own. We do not share your information with anyone else.

All three operate in the United States, which is where your information is processed.

A cookie is a small file a website stores in your browser. This site uses very few, and none of them are used for advertising.

You can delete cookies at any time in your browser settings, and you can set your browser to refuse them. Nothing on this site stops working if you do.

Analytics information: 14 months. This is the longest period Google Analytics allows on the plan we use, and it lets us compare one year against the previous one.

Enquiries that do not become projects: three years from the last time we were in contact. People often come back to a project they shelved, and we would rather remember the earlier conversation.

Client records: seven years, in line with ordinary business and tax record keeping.

You can ask us to delete your information sooner. See below.

You can ask us to:

• Tell you what information we hold about you
• Correct anything that is wrong
• Delete it
• Send you a copy in a portable format
• Tell you which third parties have received it
• Stop using it

Email rory@rorythomas.com with the subject line Privacy Request. We will reply within 45 days, and normally much sooner. We may need to confirm you are who you say you are, usually by checking the details against the enquiry you sent.

You will never be treated differently, or receive a worse service, for asking.

If your browser sends a Global Privacy Control signal, we treat it as a request not to be tracked and honour it automatically. You do not need to contact us.

We do not sell your personal information, and we do not share it for cross context behavioural advertising. We run no advertising on this site and we do not build advertising audiences from it.

The contact form is for describing a project. It is ordinary email infrastructure, not a secure channel.

We film in clinical and healthcare settings, so this is worth stating plainly: please do not include patient information, health records, or any confidential personal detail about a third party in the project description. Tell us the shape of the project, and we will agree a secure way to handle specifics before you send them.

The site is served entirely over an encrypted connection. It holds no database, no user accounts, and no payment information. Enquiries are stored by Netlify under its own security programmes.

No method of transmission over the internet is completely secure, and we cannot promise absolute security.

This site offers professional services to businesses and is not directed at children. We do not knowingly collect information from anyone under 16. If you believe a child has sent us information, email us and we will delete it.

If this policy changes in a way that matters, we will update the date at the top of the page. We encourage you to look at it again if you have not for a while.

Residents of Minnesota who are not satisfied with our response may contact the Minnesota Attorney General's Office.