Privacy Policy Effective date December 2021

We believe privacy is a fundamental right and therefore protecting your data is important to us. The following details what information we collect, how we collect it, how we store it and what we do with it.

There are three elements to the privacy policy, their relevance is dictated by how you are accessing and using OKCrowd. These relate to whether you are:

A production user who signs into the OKCrowd application in order to request signed documents from crew and supporting artistes
A signer of documents sent by productions. Typically you will be either a member of the production crew or a supporting artiste
A user of our marketing website: okcrowd.co

All three elements together make up our privacy policy. Throughout this policy, references to “we”, “us”, “our” or “OKCrowd” are Bright Machine Ltd, a company registered in England and Wales (company number 7611291). Our website address is brightmachine.uk and our registered office address is Bright Machine Ltd, Market, 133a Rye Ln, London, SE15 4BQ

Production user

A production user is someone who signs into OKCrowd in order to request signed documents from the crew and supporting artistes.

The data we collect

We collect your name, email address, telephone number and company details.

How we collect your data

We will collect this information from you directly when you sign up to use our service or alternatively it will be provided to us when someone else invites you to use OKCrowd.

How we use your data

We use your information in order for you or others to effectively manage your account with OKCrowd. We do not share your information with any other companies or services. (stolen - to comply with laws or to respond to lawful requests and legal process, provided that we’ll notify you unless we’re legally prohibited from doing so. We’ll only release personal information if we believe in good faith that it’s legally required.)

How we store your data

Your data is stored in a secure data centre at an ISO27001 accredited facility. We implement business and security processes in order to protect your data. Visit our security page for more information about our security protocols. In the event of a data breach, we will contact you, in accordance with GDPR, with information about the breach and how it affects you, the steps we have taken to protect your data and where appropriate suggested steps for you to take. (Stolen - We only keep your personal information for as long as is needed to do what we collected it for. After that, we destroy it unless required by law.)

Marketing

We will occasionally send you marketing emails where you have given us permission to do so. We do not pass on your information to any other company or service for marketing (or any other) reasons. Where you have agreed to receive marketing emails you have the option to opt-out at any point.

If you no longer wish to receive marketing emails - please click here TBC

Cookies

Cookies are text files placed on your computer to collect standard log information and visitor behaviour information. For more information about cookies visit https://www.allaboutcookies.org/. You can set your browser not to accept cookies. However, you should note that some of our features may not function as a result.

How we use cookies

We use cookies for functionality so that we can recognise you and keep you signed into the OKCrowd application. We also use the following third-party application which will place cookies in your browser: Zendesk Cloudflare

A signer of documents sent by productions

Typically you will be either a member of the production crew or a supporting artiste and you are sent a request to sign documentation by production or an agent working for a production.

The data we collect

We collect your name, email address, address, date of birth, digital signature, client IP and browser information. Not all documentation will require all of the above information to be collected and it is dependent on the production making the signature request.

How we collect your data

We will collect this information from you when you sign the documentation sent to you by a production. Alternatively, your information will be provided to us by the production or agents acting on behalf of the production. You will have previously provided this information to the production or the agent.

How we use your data

We use this data in order to identify that it is you signing the document. We also pass your data to the production or the production agent that you are signing for so they can see who has and hasn’t signed documentation. In addition, we use your data in order to create an audit log for the document being signed. Your information may also be shared by the production company to their legal representatives. If this occurs it will either be detailed in the document you are signing or will have been covered by the agreement you entered into with the production company or its agents. We do not share your information with any other companies or services.

How we store your data

Your information is stored in a secure data centre at an ISO27001 accredited facility. We implement business and security processes in order to protect all of your data. Your data is stored at rest in an encrypted or hashed state and encrypted in transit using SSL protocols (TLSv1.2, TLSv1.3). Visit our security page for more information about our security protocols.

Cookies

How we use cookies

We use cookies for functionality so that we can recognise you and keep you signed into the OKCrowd application.

All users

Includes both user types listed above but also someone who is using our marketing website

Your data protection rights

GDPR introduced a number of data protection rights that we follow and you are entitled to when using our service. These are:

The right to access: You can request the personal data that we hold about you.
The right to rectification: You can request we correct any information you believe is inaccurate.
The right to erasure: You can request that we erase your personal data, under certain conditions.
The right to restrict processing: You can request that we restrict the processing of your personal data, under certain conditions.
The right to object to processing: You can object to us processing your personal data, under certain conditions.
The right to data portability: You can request that we transfer the data that we have collected to you which can be used by another organisation, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at our email … , Or write to us …

Changes to our privacy policy

We continually review and update our privacy policy and updates will be reflected on this page with an effective date. Use of OKCrowd after the effective date constitutes acceptance of any updates. This policy was last updated date

How to contact us

If you have any questions about our privacy policy or would like to exercise any of your data protection rights you can email us at info@brightmachine.co.uk

Or write to us at Bright Machine Ltd, Unit 5, Stonehouse Commercial Centre, Stonehouse, GL10 3RD

How to contact the appropriate authorities

Should you wish to report a complaint, if you feel that we have not addressed your concern in a satisfactory manner or if you believe we are in breach of applicable data protection laws, you may contact the Information Commissioner’s Office (ICO)

Please visit the ICO’s website for contact information: https://ico.org.uk/