Privacy Policy

1.1 Information you give us
When you place an order, we collect:

• Identity information: full name, email address, phone number (optional);
• Shipping information: delivery address and the address of any gift recipient;
• Payment information: credit or debit card details, processed securely through our payment processor (we do not store full card numbers on our servers);
• Order details: kit type, item count, add-ons selected, promotional codes used;
• Communications: any messages you send to our support team.

1.2 Information we collect automatically
When you visit our website, we automatically collect limited technical data:

• IP address and approximate location (city/region level);
• Browser type, device type, and operating system;
• Pages visited, time on site, and referring website;
• Cookies and similar tracking technologies (see Section 6).

1.3 Information from your media
When you submit physical media to us, we process the content of that media to deliver your digitized files. We treat all media content as private and confidential. We do not analyze, catalog, index, or retain the content of your footage beyond what is necessary to complete your order and perform quality checks. We do not collect metadata or personal data embedded in your footage for any purpose other than delivering your files.

2.1 How we use your information

• Order fulfillment: To process your payment, ship your kit, digitize your media, deliver your digital files, and return your originals.
• Customer support: To respond to your questions, resolve issues, and communicate about your order.
• Service communications: To send youorder confirmations, shipping and tracking updates, download links, and order-status SMS alerts.
• Marketing (with your consent): To sendyoupromotional emails about new offers and seasonal discounts. You can opt out at any time.
• Legal compliance: To comply with applicable laws, respond tolawful government requests, and enforce our Terms of Use.
• Security and fraud prevention: To detect and prevent fraudulent orders, chargebacks, and misuse of our services.

We do not use your information for: targeted advertising on third-party platforms beyond standard retargeting described below; profiling; automated decision-making with legal effects; AI ormachine-learningtraining; or sale to data brokers or third parties.

We share your personal data only with the following categories of third parties, and only as necessary to operate our service:

4.1 Personal data
We retain your name, email, address, and order history for three years from your last order to support customer service, refund requests, and legal compliance. After three years of inactivity, your personal data is deleted or anonymized.

4.2 Your digital files
Your digitized files are stored on our servers for the duration of your cloud access window (30 days,one year, or lifetime access, depending on your kit). After your access window expires, files are permanently deleted from our servers within 30 days. Extended cloud storage add-ons extend this retention period accordingly.

4.3 Payment data
Full payment card details are never stored on ReelKeeper servers. Our payment processor (Stripe) retains tokenized payment data in accordance with PCI DSS standards. We retain records of transaction amounts, dates, and order IDs for seven years for accounting and legal compliance.

4.4 Media content
We do not retain copies of your digitized footage after your digital files are delivered and your cloud access window expires. The content of your media is never archived, backed up off-server, or retained for any purpose other than delivering your order.

Depending on where you live, you may have the following rights regarding your personal data:

To exercise any of these rights, email privacy@reelkeeper.com with your name, email address, and a description of your request. We will respond within 30 days. We may ask you to verify your identity before processing your request.

We take the security of your data seriously and implement the following measures:

• All data is transmitted over encrypted HTTPS connections;
• Payment data is processed through PCI-DSS compliant Stripe;
• Digital files are stored on AWS with access controls and encryption at rest;
• Employee access to customer data is role-based and limited to what is necessary;
• We conduct regular security audits of our systems and infrastructure;
• In the event of a data breach affecting your personal information, we will notify you within 72 hours of becoming aware of the breach, in accordance with applicable law.

Our services are not directed to children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has submitted personal data to us, please contact us at privacy@reelkeeper.com and we will delete it promptly. Customers submitting media on behalf of a family may include footage of minors — that footage is treated with the same privacy protections as all other media content.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you in the past 12 months.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioural advertising. No action needed.
• Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information beyond what is necessary to provide our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To submit a CCPA/CPRA request, email privacy@reelkeeper.com with the subject line "California Privacy Request." We will respond within 45 days. You may designate an authorized agent to make a request on your behalf with written authorization.

Nevada residents may opt out of the sale of personal information under Nevada Revised Statutes Chapter 603A. We do not currently sell personal information. To submit an opt-out request anyway, email privacy@reelkeeper.com with the subject "Nevada Opt-Out Request."

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and other states with comprehensive privacy laws have rights similar to those described in Section 5 and Section 9. To exercise your state privacy rights, contact us at privacy@reelkeeper.com. We respond to all verified requests within 45 days.

ReelKeeper's services are currently available to US residents only. We do not actively target or collect data from individuals outside the United States. If you access our website from outside the US, your data may be transferred to and processed in the United States, which may have different data protection laws than your country. By using our services, you consent to this transfer.

Our website may contain links to third-party websites (such as UPS tracking pages or social media platforms). This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this Privacy Policy to reflect changes in our practices, technology, or applicable law. We will notify you of material changes by posting a notice on our website and sending an email to the address on your account at least 14 days before the changes take effect. The "Last Updated" date at the top of this document reflects the most recent revision.

For any privacy-related question, request, or concern:

We commit to responding to all privacy inquiries within 2 business days and resolving all requests within 30 days.