Privacy Policy
Coralian Films S.A. de C.V. ("we", "our", "us") is the data controller for personal information collected via coralianfilms.com. This policy describes what we collect, how we use it, who processes it on our behalf, and the rights you have under the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA).
Information we collect
- Direct correspondence. Your name, email address, and message content when you write to us at arturoalanis@coralianfilms.com or akshay@coralianfilms.com.
- Job / collaborator submissions. Materials you submit via the Google Form linked from /join — reel links, portfolio links, and any biographical detail you choose to share.
- Anonymous usage analytics. Aggregate page-view data via Google Analytics 4 (measurement ID G-PYE84NT5W0) — page path, referrer, approximate country, device category, and session duration. IP addresses are anonymized before storage. No analytics data is collected until you accept the cookie banner.
- Server logs. Standard access logs held by our hosting provider Netlify (IP address, user agent, timestamp) for security and abuse prevention. Retained per Netlify's policy.
Legal basis (EU / UK visitors)
- Consent for analytics cookies (Art. 6(1)(a) GDPR). You can withdraw at any time by clicking "Cookie preferences" in the footer.
- Legitimate interest for security logs and responding to direct inquiries (Art. 6(1)(f) GDPR).
- Performance of a contract or steps prior to one for collaborator submissions (Art. 6(1)(b) GDPR).
Third-party processors
We use these services to run the site. Each acts as a processor under our instructions and each has its own privacy policy governing your data:
- Google Analytics 4 — usage analytics. Data transferred to Google LLC (US). policy
- Google Fonts — web font hosting. Google sees your IP when your browser fetches font files. policy
- Google Forms — the /join collaborator form. policy
- Vimeo — video hosting and playback. Vimeo may set its own cookies once you interact with an embed. Embeds use the "do-not-track" (
dnt=1) parameter. policy - YouTube — used on a small number of embeds. Where present we use the privacy-enhanced
youtube-nocookie.comdomain. policy - Behance — image gallery embeds for two projects. policy
- Netlify — hosting + CDN. policy
- Cloudflare CDN (cdnjs) & jsDelivr — serve two JavaScript libraries used for animation and smooth scroll. Cloudflare policy
International transfers
The studio operates from Mexico and India, with staff and partners in Los Angeles. Data you send to us may be accessed by team members in any of those regions. Processors listed above transfer data to the United States and other jurisdictions under their standard contractual clauses (SCCs) and Data Processing Agreements. If you are in the EU/UK and are uncomfortable with this, please tell us and we will delete your data.
Retention
- Email correspondence: kept as long as the conversation remains active, then deleted on request.
- Collaborator submissions: kept for two years from submission, then deleted.
- Analytics: 14 months (Google Analytics 4 default).
- Server / security logs: per Netlify's retention (typically 30 days).
Your rights
Under GDPR, UK GDPR, and CCPA you have the right to: access the data we hold about you, correct it, delete it, restrict processing, object to processing, and receive a portable copy. To exercise any of these rights, email arturoalanis@coralianfilms.com from the same address you originally contacted us on. We respond within thirty days.
You also have the right to lodge a complaint with your local data protection authority (in the EU) or state attorney general (in the US).
How we use the information
Information is used only to reply to your message, evaluate submissions, run the site, and understand which pages people read. We do not sell personal data. We do not share it with advertisers. We do not run behavioural tracking, retargeting, or profiling.
Business contacts we approach directly
Separately from the site, we contact people at companies whose work suggests they may need ours. If you have received an email from us and did not previously give us your details, this section explains where they came from and what you can do about it. It applies in addition to the rest of this policy, and is provided under Article 14 of the UK and EU GDPR.
Who the controller is
The controller of this data is Coralian Films, S.A. de C.V., Av. Roberto Garza Sada 311-A, Col. Lomas del Valle, 66256 San Pedro Garza García, Nuevo León, Mexico. Contact arturoalanis@coralianfilms.com for anything in this section.
What we hold
Business contact data only: name, job title, work email address, employer, and a public professional profile URL. We do not hold personal email addresses, home addresses, or any special category data about prospects. We do not build behavioural profiles and we do not enrich these records with inferred personal characteristics.
Where it came from
Article 14(2)(f) requires us to name the source rather than say "publicly available sources". Prospect records are drawn from:
- The company's own website — usually a team, about, or contact page.
- Companies House (UK) and equivalent public company registers.
- Public professional networking profiles, principally LinkedIn.
- Industry directories, trade press, festival and awards listings, and production credits.
Why we are allowed to
Our lawful basis is legitimate interests, Article 6(1)(f). The interest is identifying and approaching businesses that may want to commission film, video, or photography work from us. We have weighed that against your interests and consider the impact low: the data is professional rather than private, the volume per recipient is small, the message relates to your stated professional role, and you can stop it permanently with one reply. If you tell us the balance falls the other way for you, we will accept that without argument.
How long we keep it
Prospect records are kept for three years from the date of last contact, then deleted. If you object or ask us to stop, we delete the record immediately, except for the minimum needed to make sure we do not contact you again.
Your absolute right to object
Under Article 21(2) you have an unconditional right to object to direct marketing. This is not a balancing test and we do not get to weigh it against our interests — if you object, we must stop, and we will. Reply to any email from us with "remove", or write to arturoalanis@coralianfilms.com. No explanation is required. You also keep every other right described above: access, correction, erasure, restriction, and portability.
Complaints
If you are unhappy with how we have handled your data you can complain to your national supervisory authority. In the UK that is the Information Commissioner's Office (ico.org.uk). In the EU it is the data protection authority for your country. You can complain to them directly without contacting us first, though we would rather have the chance to put it right.
Terms of Use
The content on this website — including film stills, trailers, photography, written copy, and design — is the property of Coralian Films and the respective rights holders. It is presented here for the purposes of representation, press, and editorial reference.
You may not reproduce, redistribute, or republish material from this site without prior written permission. Press requests are welcome at arturoalanis@coralianfilms.com.
Contact
For any questions regarding privacy, terms, or your data, please write to arturoalanis@coralianfilms.com. We respond personally to every inquiry within ten working days.
Coralian Films · México & India