Privacy Policy.

When we refer to "we", "us", or "our" in this Privacy Policy, we are referring to Earthflix, trading name of Ecesis Group Ltd, headquartered at 128 City Road, London, United Kingdom, EC1V 2NX, registered under company number 12224905.

We serve as the controller over the personal data we gather and process from your use of the Earthflix Platform, which includes our website www.earthflix.com and mobile applications.

We place great importance on your privacy. This Privacy Policy sets forth our practices on how we collect, disclose, transfer, and use your personal data, as well as the rights you have in relation to our handling of it.

For any questions, concerns, or complaints, or to exercise your rights under this policy, you can reach our Data Protection Officer at dpo@earthflix.com.

Profile data: When you create an account, we collect your name, email address, and password. If you sign in via Google, we receive your name, email, and profile photo from your Google account.

Usage data: We automatically collect your IP address, device ID and type, referral source, language settings, browser type, operating system, geographical location, duration of visit, page views, and usage patterns. We may aggregate this data to understand how the Platform is used.

Viewing and impact data: We collect what you watch, how long, and when, along with impact engagement data (credits earned, projects supported) and device information to deliver and improve our service.

If you submit content as a filmmaker, we collect the information you provide in your submission form, including your name, email, production background, and any links or materials you share. If you subscribe to our newsletter, we collect your email address. When you contact us, we use the contact details you provide.

We use your information to operate Earthflix — authenticating your account, streaming content, tracking your impact contributions, and personalising your experience based on viewing preferences.

We use viewing data to calculate and attribute impact metrics (trees planted, CO₂ offset, ocean plastic removed) to your account and to the relevant impact projects.

We may send you transactional emails (account confirmations, password resets) and, if you opt in, promotional communications including updates about new content, impact milestones, and platform features. You can unsubscribe at any time via the link in our emails or by contacting support@earthflix.com or dpo@earthflix.com.

We use anonymised, aggregated data to understand platform-wide trends, improve content recommendations, and report impact metrics to our partners. This data cannot identify you individually.

We do not sell, trade, or rent your personal information to any third parties.

We share limited data with service providers who help us run Earthflix: Supabase (database and authentication), Mux (video streaming and processing), Vercel (hosting), and payment processors when applicable. These providers are contractually bound to protect your data.

We do not share your personal data with our NGO Partners. We may share anonymised impact data with our verified impact partners and brand sponsors — for example, "10,000 viewers contributed to this reforestation project." This data is aggregated and never identifies individual users.

We use social login and social media links to direct you to our channels (Instagram, LinkedIn, X, YouTube). If you interact with these, the respective social media partner may collect data about you under their own privacy policies. We are not responsible for how your personal data is used by a social media partner.

We may disclose your information if required by law, to protect the rights and safety of Earthflix or others, or in connection with a merger, acquisition, or sale of assets.

We use essential cookies to keep you signed in and maintain your session. These are strictly necessary for the Platform to function.

We use analytics tools to understand how visitors interact with the site. This data is anonymised and helps us improve the user experience. See our Cookie Policy for full details.

We do not use third-party advertising cookies or tracking pixels. Earthflix is funded by brand partnerships and sponsorships, not by selling your attention to advertisers.

We adhere to reasonable and prudent data processing practices and employ suitable technical and organisational measures to protect your personal data from unauthorised access, use, destruction, alteration, or disclosure.

All data is transmitted over HTTPS (TLS encryption). Passwords are hashed using industry-standard algorithms — we never store them in plain text. Our database uses row-level security policies to ensure users can only access their own data.

In compliance with relevant laws, should any unintentional collection of personal information occur from users under 18, legal guardians or parents may contact us to delete such information.

Right to access: You have the right to access information about how we process your personal data and to request a copy of the personal data we hold about you. The first copy is provided free of charge.

Right to rectification: If the personal data we hold is inaccurate or incomplete, you have the right to request correction or completion.

Right to erasure: In certain circumstances, you can request deletion of your personal data — including when it is no longer needed, when you withdraw consent, or when processing was unlawful. Note that residents of Australia or New Zealand may not be entitled to the right of erasure under local privacy laws.

Right to data portability: You can request to receive your personal data in a widely used, machine-readable format. Residents of South Africa, Canada, New Zealand, or Australia may not be eligible for this right under local privacy laws.

Right to object: You can object to the processing of your personal data based on our legitimate interests. If you object, we will stop processing unless there are compelling legitimate grounds that override your interests.

Right to lodge a complaint: You have the right to file a complaint with a data protection authority in your country or region. To exercise any of these rights, contact us at dpo@earthflix.com. We will respond within 30 days, and may extend to 60 days for complex requests. For residents of New Zealand, we will respond within 20 working days.

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including any legal requirements. Typically, we retain your data for the duration of your membership with Earthflix.

Once your personal data is no longer required, we will delete it. If you withdraw consent or object to processing, we will remove your data but retain records of the withdrawal or objection itself to respect your future choices.

We may retain certain data as required to comply with legal obligations, file or defend a legal claim, or for evidential purposes.

Earthflix operates globally. Your data may be processed and stored in the United Kingdom, European Union, and United States (where our infrastructure providers operate).

When transferring personal data to countries outside the UK or European Economic Area, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the relevant authorities, and comply with applicable data privacy legislation.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by email or through a notice on the Platform.

We encourage you to review this page periodically. Your continued use of Earthflix after changes are posted constitutes your acceptance of the updated policy.

If you have questions about this Privacy Policy or how we handle your data, contact us at support@earthflix.com.

Data Protection Officer: dpo@earthflix.com

Earthflix (trading name of Ecesis Group Ltd) · 128 City Road, London, United Kingdom, EC1V 2NX · Company No. 12224905