Privacy Policy for Edithouse.co.uk
Effective date: 8 September 2025
This Privacy Policy explains how EditHouse (“we”, “us”, “our”) collects, uses, shares, and protects your personal data when you visit Edithouse.co.uk or use our services (including our film streaming, rentals/purchases, live streaming, and merchandise features). It also explains your rights and how to contact us.
If you do not agree with this Policy, please do not use our site or services.
1) Who we are (Data Controller)
Madis Malgand t/a EditHouse (trading as Edithouse.co.uk) is the data controller for your personal data.
2) Scope
This Policy covers personal data we process when you:
-
Browse our website and account areas
-
Stream trailers and films, or use our live/VOD features
-
Purchase, rent, or download content or merchandise
-
Use interactive tools (e.g., our design/merch “designer” and upload features)
-
Contact support or subscribe to updates
-
Engage with our emails or marketing
3) The data we collect
a) Data you provide to us
-
Account & Profile: name, email, password, country, preferences.
-
Transactions: billing details, delivery details, order history, VAT info (if any).
Payment card details are processed by our payment providers; we do not store full card numbers.
-
Uploads & User Content: files you upload (e.g., subtitles, artwork, video), comments, support messages.
-
Live/Streaming Contributions: if you initiate streams or upload content as a creator.
b) Data we collect automatically
-
Usage & Analytics: pages viewed, links clicked, time on page, scroll depth, events such as play/pause, watch time, bitrate/quality changes, buffering, error codes.
-
Device & Tech Info: IP address, approximate location (derived from IP), device/browser type and version, OS, screen size, referrer/UTM, language, cookie identifiers.
-
Log Data & Security Signals: login events, failed logins, firewall/CDN/security logs, abuse/fraud indicators.
c) Data from third parties
-
Payments: confirmation and fraud signals from payment processors (e.g., Stripe/PayPal/other).
-
Streaming Infrastructure: performance and diagnostic metrics from our video infrastructure partners (e.g., api.video) and player telemetry.
-
Marketing & Communications: email delivery/open/click metrics from our email provider.
-
Anti-fraud & Security: signals from fraud-prevention or CDN providers.
We do not intend to collect special category data. Please do not submit sensitive information through our services.
4) Cookies and similar technologies
We use cookies, local storage, and similar tech to:
-
Keep you signed in and secure your session
-
Remember preferences (e.g., subtitles language)
-
Measure performance and improve the player experience
-
Deliver and measure marketing (where permitted)
You can manage non-essential cookies via our Cookie Settings (link in footer) and through your browser settings. Blocking some cookies may affect site functionality. For more detail, see our Cookie Policy (or cookie table) if provided.
5) Why we use your data (Lawful bases)
We process personal data under the following lawful bases (UK GDPR/Data Protection Act 2018):
-
Contract: to create/manage your account; provide streaming, purchases/rentals/downloads; process payments; deliver orders; provide support.
-
Legitimate Interests: to run, secure, and improve our services; prevent fraud/abuse; understand performance and audience (aggregated analytics); personalize non-intrusive aspects of your experience; enforce terms; defend legal claims.
-
Consent: for non-essential cookies/analytics/marketing; for optional communications; where required for certain uploads/uses.
-
Legal Obligation: to meet tax, accounting, and other legal requirements; to respond to lawful requests.
6) How we use your data
-
Provide the service: authenticate you; stream content (including collecting playback telemetry to ensure smooth delivery and quality); manage purchases/rentals/downloads and order fulfilment; enable uploads (e.g., subtitle files, artwork); operate the design/merch tools.
-
Improve performance & quality: monitor buffering, bitrate, device and network stats; troubleshoot errors; A/B test features; forecast capacity.
-
Customer support: handle requests and complaints; fix issues you report.
-
Security & abuse prevention: detect and prevent fraud, account sharing violations, DDoS and other misuse.
-
Marketing & updates: send service messages (e.g., receipts, account notices). With your consent (or where permitted), send newsletters, offers, or product updates. You can opt out at any time.
-
Compliance: record-keeping, audits, and responding to regulators/law enforcement where legally required.
We do not engage in solely automated decision-making that produces legal or similarly significant effects.
7) Sharing your data
We share personal data only as needed with:
-
Service providers / processors who help us operate the service, such as:
-
Video infrastructure & delivery (e.g., api.video; players/CDNs/hosting)
-
Payment processors (e.g., Stripe/PayPal/other)
-
Email/SMS providers (transactional and marketing)
-
Analytics & diagnostics tools (privacy-respecting configurations where possible)
-
Hosting, storage, and CDN providers
-
Fraud-prevention and security vendors
These providers are bound by contracts to process data only on our instructions.
-
Business partners (where you connect or consent, e.g., for promotions or co-branded offerings).
-
Professional advisers (lawyers, accountants, auditors) under confidentiality.
-
Authorities when required by law or to protect rights, safety, and security.
-
Business transfers: in a merger, acquisition, or asset sale, your data may transfer under continued protection.
We do not sell your personal data.
8) International transfers
Some providers may process data outside the UK. Where we transfer personal data internationally, we use appropriate safeguards (e.g., the UK’s IDTA/Addendum to SCCs, adequacy decisions, or equivalent lawful mechanisms).
9) Retention
We keep personal data only as long as necessary for the purposes described above, including:
-
Account data: for your active account and a reasonable period after closure to manage queries, fraud prevention, or legal obligations.
-
Transaction records: retained per tax and accounting requirements.
-
Streaming & analytics logs: retained for operational troubleshooting and performance tuning for a limited period, then aggregated or anonymised where possible.
-
Uploads/creative assets: retained while needed for your account/services or as required by law.
We regularly review retention periods and securely delete or anonymise data when no longer needed.
10) Security
We use technical and organisational measures appropriate to the risks of processing (e.g., encryption in transit, access controls, least-privilege practices, monitoring). No method of transmission or storage is 100% secure; please use a strong, unique password and keep your account details confidential.
11) Children
Our services are not directed to children under 13. If you believe a child has provided us personal data without appropriate consent, contact us and we will take steps to remove it.
12) Your rights (UK & EEA users)
Subject to conditions and exceptions, you may have the right to:
-
Access your personal data
-
Rectify inaccurate or incomplete data
-
Erase your data (right to be forgotten)
-
Restrict processing
-
Object to processing based on legitimate interests or to direct marketing
-
Portability (receive your data in a usable format and/or request we transfer it)
-
Withdraw consent where processing is based on consent
To exercise your rights, email [This email address is being protected from spambots. You need JavaScript enabled to view it.]. We may need to verify your identity. You also have the right to complain to the Information Commissioner’s Office (ICO) or your local supervisory authority.
13) Marketing communications
Where required, we will obtain your consent before sending marketing. You can unsubscribe at any time via the link in our emails or by contacting us. We will still send essential service and transactional messages.
14) Third-party content & links
Our site may include third-party content or tools (e.g., embedded designers/iframes, payment pages, analytics scripts). These third parties may collect data in line with their own policies. Please review their privacy notices. We are not responsible for their practices.
15) User uploads and live/stream content
If you upload files (e.g., video, subtitles, images/designs) or live stream, you are responsible for ensuring you have the necessary rights and that the content does not include personal data of others without a lawful basis. Uploaded content may be processed by our infrastructure partners to store, transcode, deliver, and analyse playback performance.
16) Changes to this Policy
We may update this Policy from time to time. The “Effective date” will indicate the latest version. Material changes may be notified via email or prominent notice on the site.
17) Contact us
Questions or requests about this Policy or your data?
