Your data,
handled with care.

We run a curated, application-only directory connecting screen editors with verified streaming credits with productions and companies worldwide.

For the purposes of UK GDPR, EU GDPR and the Australian Privacy Act, we are the data controller for the personal data described in this notice.

From editors who apply for membership:

• Name, email address and password (hashed)
• Primary location and up to two additional cities
• IMDb profile URL and a list of streaming credits (project, role, year, platform, software used)
• Optional: bio, profile photo, accreditations, awards, right to work countries, secondary location
• Account activity (logins, messages sent, jobs applied for)
• Feature requests submitted
• Profile visibility preference - editors can choose to make their full profile publicly visible to anyone with their profile link. By default, a partial preview of your profile (including first name, primary role, platforms and accreditations) is visible to anonymous visitors in the public editor directory. Your full profile including credits, awards, bio and contact details is only visible to verified production accounts unless you choose to make your profile public.

From production accounts:

• First name, last name, email and password (hashed)
• Company name (optional), company role (optional), company website (optional)
• LinkedIn URL (required for accounts registering without a company email domain)
• Job posts created and messages sent
• Account activity

From everyone automatically:

• Limited cookies (see Section 8)
• IP address, browser type and basic device information for security and abuse prevention

File attachments shared via the messaging system are stored securely for 30 days and then permanently deleted.

Editors:

Processing is necessary to perform our contract with you (UK/EU GDPR Art. 6(1)(b)) - we cannot list you in the directory or operate the messaging service without it.

Production accounts:

Processing is based on our legitimate interests (UK/EU GDPR Art. 6(1)(f)) in operating a marketplace and on contract performance for any paid features. You can object to processing based on legitimate interests at any time - see Section 7.

Credit verification:

When a submitted streaming credit cannot be verified via IMDb, we may contact the relevant production company or broadcaster to confirm the credit as part of our standard verification process. Only the minimum necessary information (applicant name and credit claimed) is shared with the third party.

StreamerPeople complies with applicable data-protection laws in every jurisdiction we operate in:

• UK GDPR & Data Protection Act 2018 - for all members
• EU GDPR - for members located in the European Economic Area
• Australian Privacy Act 1988 and the Australian Privacy Principles (APPs) - for members located in Australia
• California Consumer Privacy Act (CCPA / CPRA) - for members located in California, including the right to know, the right to delete and the right to opt out of the sale or sharing of personal information
• Other regional regimes (e.g. PIPEDA in Canada, LGPD in Brazil) where they apply

Where we transfer data outside the UK or EEA we rely on Standard Contractual Clauses or other adequate safeguards.

• Active member accounts: for as long as the account is active
• Soft-deleted accounts: permanently deleted after 30 days
• Inactive accounts: deleted or anonymised after 24 months of inactivity
• Rejected applications: retained for 12 months for fraud prevention then deleted
• Messages: retained while either participant has an active account, then deleted
• File attachments: permanently deleted after 30 days
• Backups: rolling 30-day window

We do not sell, rent or trade personal data to third parties - full stop. We share limited data only with the service providers we need to operate the platform (e.g. hosting, transactional email via Resend, payment processing via Stripe), all of whom are contractually bound to handle data only on our behalf.

You have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate data
• Request erasure ("right to be forgotten")
• Restrict or object to processing
• Data portability - receive a machine-readable export
• Withdraw consent where processing relies on it
• Control your profile visibility - editors can make their profile public or private at any time from their Edit Profile page or Account Settings.
• Lodge a complaint with the UK ICO, your local EU supervisory authority, the Office of the Australian Information Commissioner (OAIC), or the California Attorney General as applicable

To exercise any of these, emailprivacy@streamerpeople.com. We aim to respond within 30 days.

We use a minimal set of cookies:

• Session cookies - required to keep you signed in (httpOnly, Secure)
• CSRF tokens - required for security
• Stripe cookies - used during payment checkout only

We do not use third-party advertising or behavioural tracking cookies. You can disable cookies in your browser, but the site will not work without session cookies.

In the unlikely event of a personal-data breach that is likely to result in a risk to your rights or freedoms, we will notify the UK Information Commissioner's Office (ICO) within 72 hours of becoming aware of it, as required under UK/EU GDPR. We will also notify affected users without undue delay where the breach is likely to result in a high risk to their rights.

For any privacy question, request or concern, email our team at:

privacy@streamerpeople.com

We may update this notice from time to time. Material changes will be communicated by email and shown on this page with a new effective date.

StreamerPeople (trading as Streamer People, ABN: 74 036 982 089) is a sole trader business operating in Australia.