Privacy Policy

The short version

This is a small portfolio site for a one-person production company. We do not run advertising trackers, we do not sell anyone's data, and we never see or store your card details. The main personal data we hold is the email you send us and the billing details Stripe keeps for your payment.

1. Who we are

dmanproductions LLC, Detroit, Michigan, United States, is the controller of personal data described in this policy. Contact: dan@danmannes.com.

2. What we collect

• Information you send us. When you email us, we receive your name, email address, and whatever you choose to tell us about your project. We keep this correspondence so we can quote and deliver the work.
• Payment information. When you pay an invoice or deposit, our payment processor Stripe collects your card details, billing name, billing address, and email. Card numbers are entered on Stripe's own hosted checkout page. They are never transmitted to, seen by, or stored on this website or by dmanproductions LLC. We receive only a confirmation, the last four digits, the amount, and the reference you supplied.
• Project records. Quotes, invoices, contracts, call sheets, and delivery records relating to your engagement.
• Basic server logs. Our host, Vercel, records standard request data such as IP address, browser type, and pages requested, for security and reliability. We do not use this to build profiles of visitors.

We do not knowingly collect data from children, and this site is not directed at children under 13.

3. Cookies and tracking

This site sets no advertising or analytics cookies of its own. Two third parties may set cookies when their content loads on a page:

• Vimeo, which hosts the films embedded on the archive and home pages. Our embeds are set with Do Not Track enabled, which limits the tracking data Vimeo collects.
• Stripe, which sets cookies necessary for payment processing and fraud prevention when you visit the payment page or checkout.

Google Fonts serves the typefaces used across the site. You can block or clear these cookies in your browser without breaking the site, though embedded films may not play.

4. Why we use your data and the legal basis

• To answer your enquiry and quote your project. Basis: steps taken at your request before entering a contract.
• To carry out and deliver the work, and to take payment. Basis: performance of our contract with you.
• To keep tax, accounting, and business records. Basis: our legal obligations.
• To prevent fraud and keep the site secure. Basis: our legitimate interests.

5. Who we share it with

We do not sell, rent, or trade personal data. We share it only with the service providers that make the business run:

• Stripe, Inc.: payment processing. Stripe is a PCI Service Provider Level 1, the highest certification in the payments industry. See Stripe's own privacy policy.
• Vercel Inc.: website hosting and server logs.
• Vimeo, Inc.: video hosting for embedded films.
• Our email provider and accountant: correspondence and financial record keeping.
• Authorities, where we are legally required to disclose information.

6. How long we keep it

Project correspondence and records are kept for as long as needed to deliver the work and then for 7 years to meet tax and accounting obligations. Enquiries that do not become projects are deleted within 2 years. Project master files are generally retained for 12 months after delivery, after which we may archive or delete them.

7. Security

This site is served over HTTPS. Payments run through Stripe's hosted checkout, so card data never touches our systems. Project files are stored in access-controlled cloud storage. No system is perfectly secure, but we take reasonable and current measures to protect your information.

8. Your rights

You can ask us to give you a copy of the personal data we hold about you, correct anything inaccurate, delete data we no longer need to keep, or stop using it for a particular purpose. Depending on where you live, including under the GDPR in the UK and EU and the CCPA in California, you may have further rights, including the right not to have your data sold. We do not sell data to anyone.

To exercise any of these, email dan@danmannes.com. We will respond within 30 days. You will never be charged or treated differently for making a request.

9. International transfers

We are based in the United States, and our providers store data in the United States and elsewhere. If you contact us from outside the US, your data will be transferred to and processed there.

10. Changes to this policy

We may update this policy from time to time. The current version always lives at this address, with the date it was last updated shown at the top.

11. Contact

Any question about privacy or your data comes straight to Dan.