Legal
Privacy notice
How cinema-rating handles personal data belonging to people in the UK, in line with UK GDPR.
What we collect
Account data: your email address, an encrypted password (handled by our authentication provider) and, optionally, a display name and avatar. Review data: the cinema, screening date, ratings, written review, any technical issues you select and any photos you upload. Technical data: standard server logs needed to operate and secure the service.
What is public
Your display name, review text, ratings, photos and screening details are public. Your email address is never published, and other users cannot see it anywhere in the platform.
Why we use it
To calculate cinema and screen ratings, to moderate and publish reviews, to let verified cinema managers reply to feedback, to keep the platform free of abuse, and to answer your enquiries. Our lawful bases are contract (providing the service), legitimate interests (operating a trustworthy review platform) and consent where you upload optional photos.
How long we keep it
Reviews and their ratings remain while your account is active, because removing published reviews changes historical scores. If you delete your account, your reviews are deleted and the affected cinema scores are recalculated. Moderation and audit records are kept for up to 24 months to handle disputes and abuse.
Your rights
You can request access to, correction of, or deletion of your personal data, and you can object to processing based on legitimate interests. Use the contact page with the subject “Data or privacy request”. You can also complain to the Information Commissioner's Office.
Cookies and analytics
Signing in requires a session cookie. We do not set advertising cookies. Any future analytics or advertising tag will only load after you give consent.
Launch disclosure
Before public launch this notice must name the data controller, its registered address and a monitored contact address for data requests.