Legal

Privacy notice

How cinema-rating handles personal data belonging to people in the UK, in line with UK GDPR.

What we collect

Account data: your email address, an encrypted password (handled by our authentication provider) and, optionally, a display name and avatar. Review data: the cinema, screening date, ratings, written review, any technical issues you select and any photos you upload. Technical data: standard server logs needed to operate and secure the service.

What is public

Your display name, review text, ratings, photos and screening details are public. Your email address is never published, and other users cannot see it anywhere in the platform.

Why we use it

To calculate cinema and screen ratings, to moderate and publish reviews, to let verified cinema managers reply to feedback, to keep the platform free of abuse, and to answer your enquiries. Our lawful bases are contract (providing the service), legitimate interests (operating a trustworthy review platform) and consent where you upload optional photos.

How long we keep it

Reviews and their ratings remain while your account is active, because removing published reviews changes historical scores. If you delete your account, your reviews are deleted and the affected cinema scores are recalculated. Moderation and audit records are kept for up to 24 months to handle disputes and abuse.

Your rights

You can request access to, correction of, or deletion of your personal data, and you can object to processing based on legitimate interests. Use the contact page with the subject “Data or privacy request”. You can also complain to the Information Commissioner's Office.

Cookies and analytics

Signing in requires a session cookie. We do not set advertising cookies. Any future analytics or advertising tag will only load after you give consent.

Launch disclosure

Before public launch this notice must name the data controller, its registered address and a monitored contact address for data requests.