Your files and information deserve careful handling.

1. Information we collect

• Identity and contact details, including name, email, phone number, business name and social profiles.
• Project information, instructions, messages, approvals, uploaded footage, photos, voice notes and brand assets.
• Order and billing records, such as plan, amount, currency, payment status and Stripe transaction identifiers. PFRAME does not receive your full card number.
• Booking details submitted through Calendly, communications sent by email, and any message you choose to send us on WhatsApp. WhatsApp is operated by Meta: your phone number, profile name and message content are processed under Meta’s own terms, and we keep only what is needed to answer you.
• Basic technical and security information, including IP address, device/browser information, page requests and the saved language preference.

2. How we collect information

We collect information directly from you, automatically from the website and from service providers you choose to use, including Stripe for payments and Calendly for bookings.

Please do not send sensitive personal information unless it is necessary for the agreed project and we have confirmed an appropriate way to provide it.

3. Why we use it

• Provide quotes, process orders, edit and deliver content, manage revisions and support clients.
• Process payments, subscriptions, refunds, accounting and fraud prevention.
• Schedule calls, respond to enquiries and maintain the client relationship.
• Operate, secure, troubleshoot and improve the website and workflow.
• Comply with legal, tax, record-keeping and dispute-resolution obligations.
• Send marketing only where permitted and provide an easy way to opt out.

4. Legal bases where GDPR-style rules apply

Where applicable, we rely on performance of a contract, steps requested before a contract, legitimate interests in operating and protecting the business, compliance with legal obligations, and consent where consent is required. Consent can be withdrawn prospectively at any time.

5. Service providers and disclosure

We may share only the information reasonably needed with payment, booking, messaging, email, hosting, cloud storage, file-transfer, accounting and professional advisory providers. Key external services include Stripe, Calendly and WhatsApp. Their own privacy terms apply when you use their services.

We may also disclose information where required by law, to protect rights or safety, during a business restructure, or with your consent. We do not sell personal information.

6. Overseas processing

Some providers may process information outside Australia, including in the United States and other countries where they operate. We take reasonable steps to use reputable providers and appropriate contractual or technical safeguards where required.

7. Cookies and local storage

Only strictly necessary storage is active by default: your language preference, your cookie decision and, for paying clients, the private upload session. No analytics or advertising cookie is installed today. We count visits on our own server without any cookie: the page viewed, the site you came from, your approximate city and country, your device, browser, operating system and language, never your IP address or anything that identifies you.

Anything that is not strictly necessary — including the embedded Calendly calendar, which sets third-party cookies — is blocked until you allow it in the consent banner. You can change or withdraw that decision at any time through “Manage my cookies” in the footer.

The full list, with purposes and retention, is set out in our Cookie Policy at /cookies.

8. Newsletter

The newsletter is sent only to people who tick the consent box themselves. The box is never pre-ticked, and subscribing is never a condition of buying anything.

For each subscriber we store the email address, the chosen language, the date, the exact wording that was agreed to and a salted hash of the IP address. The hash is proof that consent was given; it does not let us recover the address it came from.

Every message contains a one-click unsubscribe link that works without a login. Unsubscribing takes effect immediately. Emails about an order or an active subscription are service messages, not marketing, and are not covered by that link.

Subscriber records are kept until you unsubscribe, plus a short period afterwards as proof that we honoured your request. Write to studio@pframevideo.com to have the record deleted entirely.

9. Storage, security and retention

We use reasonable administrative and technical safeguards, including restricted access and encrypted connections where available. No online system can guarantee absolute security.

We keep information only as long as reasonably needed for the purposes above, legal records and disputes. Unless agreed otherwise, project uploads and working files may be deleted 90 days after final delivery; enquiry records are generally reviewed after 24 months. Some financial records must be retained for longer under law.

10. Your choices and rights

You may ask to access, correct or delete personal information, object to or restrict certain processing, withdraw consent, or request a portable copy where the applicable law provides that right. We may need to verify your identity and may retain information where the law requires it.

You can opt out of marketing at any time. Transactional messages about an active order or subscription are not marketing messages.

11. Footage containing other people

The client is responsible for providing appropriate notices and obtaining permissions from people identifiable in supplied footage. PFRAME processes that footage only for the agreed service and related administration.

12. Children

PFRAME services are intended for business customers and are not directed to children. Do not submit information or footage about a child unless you have lawful authority and the material is necessary for the agreed project.

13. Complaints and updates

Send privacy requests or complaints to studio@pframevideo.com. If you are not satisfied, you may contact the Office of the Australian Information Commissioner or the competent privacy regulator in your location.

We may update this policy as the service or law changes. Material changes will be identified by a new date and, where appropriate, communicated directly.