Privacy Policy

Last updated: 06 November 2025

This Privacy Policy explains how VidCity.co collects, uses, stores, and shares personal data when you visit our website or work with us as a client. We aim to be transparent and comply with privacy laws (GDPR/CCPA where applicable). 

1. Data we collect

Contact data: name, email, phone, company from contact forms, emails, and contracts.

Project files: video files, images, audio, scripts, and related metadata clients submit for projects.

Payment data: billing details we process via third-party payment providers (we do not store full card details).

Usage data: cookies, analytics, IP address, device and browser info when you visit our website.

Communications: emails, messages, and call recordings only when necessary and with notice.

2. How we use your data

To respond to inquiries and provide quotes.

To deliver and manage projects (processing and storing project files, using sub-processors for editing, storage, rendering).

For billing, invoicing, and legal compliance.

To improve our services and website (analytics and testing).

To send occasional marketing only when you opt in; you can unsubscribe any time.

3. Legal basis (where GDPR applies)

Performance of contract for client/project work.

Legitimate interests (service improvement, security, fraud prevention).

Consent for marketing communications and non-essential cookies. 

4. Data sharing & subprocessors

We use trusted third-party processors for cloud storage, editing tools, analytics, email, and payments. We only share data necessary to perform services and require subprocessors to meet security standards. For GDPR-covered projects, we enter Data Processing Agreements with processors. 

5. Data retention

Project files: retained per contract; typically deleted or archived 90–365 days after project completion unless client requests otherwise.

Contact and billing records: retained for legal and tax compliance as required by local law.

6. Your rights

Where applicable you may: access, correct, export, restrict processing, object, or request deletion of your personal data. For data subject requests (GDPR/CCPA): contact@vidcity.co.
We may require identity verification. 

7. Security

We use industry standard security measures (encryption at rest/in transit, restricted access, secure third-party services). However, no system is perfectly secure; we’ll promptly notify affected individuals and authorities of any reportable data breach. 

8. International transfers

If data is transferred outside your country (for example, cloud servers), we use legal safeguards (standard contractual clauses or other mechanisms) as required.

9. Children

Our services are not for children under 16. We do not knowingly collect data from minors.

10. Contact & updates

Questions or privacy requests: contact@vidcity.co

This policy may be updated; we’ll publish the revised date.