Privacy Policy

1. Who We Are

Holly Films ("we", "us", or "our") is an AI-powered video production and creative agency based in Bengaluru, Karnataka, India. Our website is hollyfilms.com. You can contact us at hello@hollyfilms.com.

2. Information We Collect

We collect the following types of information:

• Contact information — the details you submit through our contact form: name, email address, company name, phone number and country code, country, brand or business type, and your message. If you email or message us on WhatsApp, we hold whatever you send us there.
• Booking information — if you schedule a strategy call, the name, email address, and any answers you give in the Calendly scheduling widget embedded on our Book a Call page.
• Usage and device data — pages visited, time on site, referral source, browser and device type, screen size, approximate location derived from your IP address, and web performance metrics. Collected through the analytics services listed in Section 7.
• Session recordings and heatmaps — if you consent to analytics cookies, Microsoft Clarity records an anonymised playback of your visit (mouse movement, clicks, scrolling, and page transitions) and aggregates it into heatmaps. Clarity is configured to mask text input, so what you type into forms is not captured.
• Advertising data — if you consent to marketing cookies, the Meta Pixel records that you visited our site and which pages you viewed, and shares this with Meta so we can measure our ad campaigns and show you relevant ads on Facebook and Instagram.
• Anti-spam data — when you submit our contact form, Cloudflare Turnstile processes your IP address and browser signals to confirm you are not a bot.

We do not knowingly collect data from children under 16, and we do not collect special-category data (such as health, biometric, or political information).

3. How We Use Your Information

We use collected information to:

• Respond to your enquiry, schedule calls, and provide our services.
• Understand how visitors use our website so we can improve its content and performance.
• Protect our forms and infrastructure from spam, abuse, and fraud.
• Measure the effectiveness of our advertising and, where you have consented, show you relevant ads.
• Send project updates or relevant communications (only with your consent).
• Comply with legal obligations.

We do not sell, rent, or trade your personal information. We do not use your data to train AI models.

4. Legal Basis for Processing

Where applicable (e.g. GDPR, UK GDPR, LGPD), we process your data on the following bases:

• Consent — for marketing communications, and for analytics and marketing cookies. By continuing to use this website without opting out, you consent to the analytics and marketing cookies described in Section 6. You may withdraw that consent at any time using the Cookie Settings button in our footer.
• Contract — to respond to your enquiry, schedule a call, and deliver services you have requested.
• Legitimate interests — to keep our website secure and spam-free (Cloudflare Turnstile) and to measure aggregate, cookieless site performance (Vercel Analytics, Vercel Speed Insights, Cloudflare Web Analytics).
• Legal obligation — where we must retain or disclose data to comply with the law.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy or as required by law:

• Contact form submissions — up to 2 years.
• Booking records — up to 2 years, or as long as the client relationship continues.
• Google Analytics data — up to 14 months.
• Microsoft Clarity recordings — up to 30 days.
• Meta Pixel data — retained by Meta under their own policy, typically up to 2 years.
• Your cookie consent choice — stored in your browser for 1 year, after which we ask again.

6. Cookies and Similar Technologies

We group cookies and similar technologies (such as local storage) into three categories. Analytics and marketing cookies are active by default when you use this site, and you can switch them off at any time — see “Managing your choice” below.

Vercel Analytics, Vercel Speed Insights, and Cloudflare Web Analytics measure page views and load performance without setting cookies and without tracking you across other websites, so they run on all visits.

Managing your choice

We do not show a consent pop-up when you arrive. Analytics and marketing cookies load when you begin using the site, and by continuing to use it you consent to them. To change this, click Cookie Settings in the footer, next to the link to this policy, and choose Essential Only or Deny.

When you opt out, we stop Google Analytics, Microsoft Clarity, and the Meta Pixel from tracking you, delete the cookies they set on our domain, and do not load them again on future visits. Some cookies are stored by these providers on their own domains and can only be removed through your browser settings; opting out stops us using them, but you may clear them yourself at any time.

Your choice is stored in your browser for 1 year. Clearing your browser storage resets it, and analytics and marketing cookies become active again.

7. Third-Party Services

We use the third-party services below. Each acts as an independent controller or as our processor under its own privacy policy, and most process data in the United States.

• Vercel Inc. — website hosting, cookieless analytics, and Speed Insights. Also provides the approximate country signal we use to decide whether to show the cookie banner.
• Cloudflare, Inc. — Turnstile bot protection on our contact form, and cookieless Web Analytics.
• Google LLC — Google Analytics 4 (consent-gated website analytics).
• Microsoft Corporation — Microsoft Clarity (consent-gated session recordings and heatmaps).
• Meta Platforms, Inc. — Meta Pixel (consent-gated ad measurement and retargeting on Facebook and Instagram).
• Calendly LLC — scheduling widget embedded on our Book a Call page; receives the details you enter when booking.
• FormBold — delivers contact form submissions to our inbox.
• Supabase Inc. — database that stores our portfolio and project content. It does not store visitor personal data.
• WhatsApp (Meta Platforms, Inc.) — if you choose to message us on WhatsApp, Meta processes that conversation under its own terms.

8. International Data Transfers

We are based in India, and the services listed above process data primarily in the United States and other countries. Where personal data of EU/EEA, UK, or Swiss residents is transferred outside those regions, our providers rely on safeguards such as the EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework. You may contact us for more detail on these safeguards.

9. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Request a portable copy of your data.
• Object to or restrict how we process your data.
• Opt out of analytics, session recording, and targeted advertising — use the Cookie Settings button in our footer, or choose Essential Only / Deny in the cookie banner.
• Withdraw consent at any time, without affecting processing carried out before you withdrew it.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email us at hello@hollyfilms.com.

10. Security

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse. However, no method of transmission over the internet is 100% secure.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of our website after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at: