Version 1.0 — in effect as of 12 September 2026. English translation for convenience; in the event of any discrepancy, the French version prevails.

This policy explains what personal data is collected on this site, why, with whom it is shared, how it circulates and how it is protected. The data controller is David Kadoche O'Sullivan, a sole trader operating under the name IN THE NAME OF LOVE PRODUCTION, SIRET 491 706 271 00013, 34 rue Guy Môquet, 94500 Champigny-sur-Marne, France (hereafter "the Studio").

1. Data collected

• "Contact me" and "Request a quote" forms (Contact page): name, company, email, phone, message; and for the quote, package considered, the film's objective, budget, timeline, available assets.
• "My project" forms (Pricing page, AI Pack and Live-Action Pack): the same information, supplemented depending on the pack by: business activity, target audience, mood, storyline, shooting location, envisioned actors, shooting dates.
• Feedback form on a private preview page: email address and the text of change requests.
• Payment data (online order for the AI Pack): name, email, billing address, phone. Card numbers are never seen, received or stored by the Studio or by this site: they are entered directly on the payment form hosted by Stripe (see §4 and §7).
• No collection via proprietary cookies for tracking or audience measurement (see §8).

2. Use of the data (purposes)

• Responding to a contact or quote request, and preparing pricing.
• Carrying out the commissioned service: writing, production, revisions, delivery.
• Processing online payment and issuing the corresponding invoices.
• Sending a private preview link and collecting your feedback on the edit.
• Complying with legal and accounting obligations (invoice retention).

This data is never used for commercial prospecting by third parties, nor sold, nor transferred.

3. Legal basis for processing

Depending on the case: performance of pre-contractual steps or of the contract (quote, production, payment, delivery); legal obligation (invoicing, accounting); the Studio's legitimate interest in responding to requests addressed to it.

4. Recipients of the data

• The Studio (David Kadoche O'Sullivan) — sole direct recipient of messages and briefs, to handle the request.
• Formspree, Inc. (United States) — receives and forwards by email the content of every form on the site (contact, quote, briefs, preview feedback).
• Stripe (Stripe Payments Europe, Ltd. for European payments) — processes the online payment for the AI Pack. The payment form is hosted and operated directly by Stripe: the Studio receives only the payment confirmation and its amount, never card data. Stripe is PCI-DSS Level 1 certified, the highest certification level for handling card data.
• Netlify, Inc. (United States) — hosts the site and its serverless functions, and as such has technical access to connection logs.
• YouTube / Google — for playback of videos embedded on the site, which may cause Google to set third-party cookies (see §8).

5. Method of data transmission and transfers outside the European Union

All data travels over an encrypted connection (HTTPS/TLS) between your browser and the servers of the providers listed above: forms are sent via an encrypted request to the Formspree API, and payment takes place on an encrypted page hosted by Stripe.

As Formspree, Netlify and YouTube/Google are based in the United States, a transfer of data outside the European Union may occur; these providers rely on standard contractual clauses or an equivalent compliance framework (Data Privacy Framework) to govern it. European payments are processed by Stripe's Irish entity (Stripe Payments Europe, Ltd.).

6. Retention period

• A contact or quote request that goes unanswered: kept for as long as needed to handle the request, then deleted or archived within a reasonable period (3 years maximum from the last exchange).
• A completed order: data kept for the duration of the service, then archived for the legal retention period of accounting documents (10 years for invoices).
• Payment data: none is retained by the Studio; Stripe applies its own retention policy (see stripe.com/privacy).

7. Data security

• The entire site is served over HTTPS (end-to-end TLS encryption).
• No card database on the site's side: payment is entirely delegated to Stripe, PCI-DSS Level 1 certified.
• Private preview pages (intermediate deliverables) are protected by a non-indexed address, never shared publicly, never referenced by search engines, with an optional access code.
• Access to messages and briefs received (email inbox, Formspree and Stripe dashboards) is restricted to the Studio and password-protected.

8. Cookies

This site does not use any proprietary tracking or audience-measurement cookie. Embedded YouTube videos may set their own third-party cookies when played, in accordance with YouTube/Google's privacy policy. On a private preview page, the browser may locally remember (sessionStorage) that an access code has already been validated on that device: this information stays on the device and is never transmitted to the Studio or to any third party.

9. Your rights

In accordance with the General Data Protection Regulation (GDPR), you have the right to access, rectify, erase, restrict, object to the processing of, and port your data. To exercise it, contact the Studio via the contact page. You may also lodge a complaint with the French data protection authority (CNIL) (www.cnil.fr).

No data protection officer (DPO) has been appointed, as this obligation does not apply to the Studio's activity.

10. Changes to this policy

The Studio may modify this policy at any time, in particular to reflect changes to the site or to the applicable regulations. The version that applies is the one in effect on the date of your visit, indicated at the top of this document.

See also the Legal Notice and the Terms of Sale. — ← Back to home