Privacy Policy

1. Information We Collect

Information You Provide Directly

Information Collected Automatically

Information from Third-Party Sources

We may receive professional contact information (such as business email address, job title, and company name) from our sales intelligence platform, Apollo.io, to support B2B outreach to businesses that may benefit from cinema advertising. This data is used solely for B2B marketing purposes and is not used for consumer profiling.

2. How We Use Your Information

We use the personal data we collect for the following purposes:

• Responding to inquiries: To reply to your contact form submissions and advertising inquiries.
• Providing services: To facilitate and manage cinema advertising placements at Warehouse Cinemas locations on your behalf.
• Marketing communications: To send promotional content and service updates about cinema advertising opportunities (with your consent or where permitted by law).
• Advertising and retargeting: With your consent, to serve relevant advertisements on third-party platforms (including Google, Meta, and LinkedIn), create retargeting audiences based on your interactions with our Site, and measure ad campaign performance. These activities only occur when you have provided consent through our cookie banner, and you may opt out at any time.
• Website improvement: To analyze site usage, identify trends, and improve user experience through analytics data.
• Business development: To identify and reach potential advertising clients through professional contact data.
• Legal compliance: To comply with applicable laws, regulations, and legal processes.
• Security: To detect, prevent, and respond to fraud, unauthorized access, or other security incidents.

3. Cookies and Tracking Technologies

Our Site uses cookies and similar tracking technologies. A cookie is a small data file stored on your device when you visit a website. We use the following categories of cookies, managed through our Klaro consent management platform:

You can manage your cookie preferences at any time by clicking the "Cookie Settings" link in the footer of our Site or by adjusting your browser settings. Declining non-essential cookies will not affect your ability to use the Site or submit advertising inquiries.

We honor the Global Privacy Control (GPC) signal and other universal opt-out preference signals. When we detect such a signal from your browser, we will treat it as a valid opt-out request for the sale of personal data and targeted advertising, as required under MODPA, CCPA/CPRA, and other applicable laws.

4. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following legal bases:

• Consent: For marketing emails and non-essential cookies (analytics, advertising, functional). You may withdraw consent at any time via the cookie settings panel or by contacting us.
• Legitimate Interests: For responding to advertising inquiries, improving our website, B2B business development, and ensuring site security, where these interests are not overridden by your data protection rights.
• Contractual Necessity: To fulfill our obligations when you engage us to place advertising at Warehouse Cinemas locations.
• Legal Obligation: To comply with applicable EU or member state law.

5. Data Sharing and Third Parties

We do not sell your personal data. We do not share your personal data with third parties for their own independent marketing purposes. When you provide consent through our cookie banner, we may share certain data (such as cookie identifiers and site interaction data) with advertising platforms for retargeting and audience creation purposes. Under some state laws (including CCPA/CPRA and MODPA), this sharing for targeted advertising may constitute a "sale" or "sharing" of personal information. You may opt out at any time through our cookie settings, by contacting us, or via a Global Privacy Control signal.

We share personal data only with the following categories of service providers who process data on our behalf under written agreements:

We may also disclose personal data when required by law, to respond to legal process, to protect our rights, or in connection with a merger, acquisition, or sale of assets (in which case you will be notified).

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Advertising inquiry and contact form submissions: Retained for up to 3 years from last interaction, unless an ongoing business relationship exists.
• Analytics data: Retained in accordance with Google Analytics' data retention settings (up to 26 months).
• Advertising platform data: Retained per each platform's data retention policies (Google Ads, Meta, LinkedIn). Audience segments based on cookie data typically expire within 30–540 days depending on platform settings.
• Business records: Retained as required for legal, tax, or audit purposes.

When personal data is no longer needed, we securely delete or anonymize it.

7. Your Privacy Rights

Depending on your location, you may have some or all of the following rights regarding your personal data:

• Right to Know / Access: Request confirmation of whether we process your personal data and obtain a copy of it.
• Right to Correct: Request correction of inaccurate personal data.
• Right to Delete: Request deletion of your personal data, subject to legal exceptions.
• Right to Portability: Receive your personal data in a portable, commonly used format.
• Right to Opt Out: Opt out of the sale of personal data, targeted advertising, or profiling.
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
• Right to Non-Discrimination: Exercise your rights without receiving discriminatory treatment.

To exercise any of these rights, please contact us at [email protected]. We will respond to verifiable requests within 45 days (or 30 days for GDPR requests). If we need additional time, we will notify you of the extension and the reason.

Appeals Process

If we deny your privacy rights request, you have the right to appeal. To submit an appeal, email [email protected] with the subject line "Privacy Rights Appeal." We will respond to your appeal within 60 days. If your appeal is denied, we will provide you with information on how to contact the applicable regulatory authority, including the Maryland Attorney General's Consumer Protection Division or other supervisory authority.

8. Maryland Online Data Privacy Act (MODPA) Rights

If you are a Maryland resident, the Maryland Online Data Privacy Act (effective October 1, 2025) provides you with specific privacy rights. Under MODPA, you have the right to:

• Confirm whether we are processing your personal data.
• Access the personal data we have collected about you.
• Correct inaccuracies in your personal data.
• Obtain a copy of your personal data in a portable, readily usable format.
• Obtain a list of the categories of third parties to which we have disclosed your personal data.
• Opt out of the processing of your personal data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.

How to Exercise MODPA Rights

Submit your request by emailing [email protected]. We will verify your identity and respond within 45 days. You may also designate an authorized agent to submit requests on your behalf. If we deny your request, you may appeal the decision, and we will provide instructions for contacting the Maryland Attorney General's Consumer Protection Division.

Universal Opt-Out Mechanism

We recognize and honor universal opt-out preference signals (such as Global Privacy Control) as valid opt-out requests under MODPA. When detected, we will cease processing your data for targeted advertising and any sale of personal data.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, provides you with additional rights regarding your personal information.

Your CCPA/CPRA Rights

• Right to Know: Request the categories and specific pieces of personal information we have collected, the sources, purposes of collection, and categories of third parties with whom we share it.
• Right to Delete: Request deletion of your personal information.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt Out of Sale/Sharing: We do not sell your personal information for monetary consideration. However, sharing data with advertising platforms for targeted advertising may constitute "sharing" under CCPA/CPRA. You may opt out via our cookie settings or by contacting us.
• Right to Limit Use of Sensitive Personal Information: Request that we limit the use of sensitive personal information to only what is necessary.
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights.

Categories of Personal Information Collected (Past 12 Months)

To submit a request, email [email protected] or call (301) 791-1221. We will verify your identity before processing your request and respond within 45 days.

10. European Economic Area (GDPR) Rights

If you are located in the EEA or UK, you have additional rights under the GDPR, including:

• Right to Lodge a Complaint: You may file a complaint with your local data protection supervisory authority.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data under certain conditions.
• Right to Object: You may object to the processing of your personal data based on our legitimate interests.
• Right to Data Portability: You may request that we transfer your data to another controller in a structured, commonly used format.
• Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or significant effects. We do not currently engage in such automated decision-making.

For GDPR requests, we will respond within 30 days. Contact us at [email protected].

11. Universal Opt-Out and Do Not Sell

We honor universal opt-out preference signals, including the Global Privacy Control (GPC). When we detect a GPC or similar signal from your browser or device, we will:

• Treat the signal as a valid request to opt out of the sale of personal data (as applicable under MODPA and CCPA/CPRA).
• Cease targeted advertising based on your personal data.
• Apply the opt-out to the browser or device from which the signal is sent.

You can also manually opt out by contacting us at [email protected], by adjusting your preferences in our cookie consent panel, or by clicking the "Do Not Sell or Share My Personal Information" link on our Site.

12. Email Communications & CAN-SPAM Compliance

We comply with the CAN-SPAM Act of 2003. When we send you commercial emails, we will:

• Clearly identify the message as an advertisement or solicitation when applicable.
• Include our valid physical mailing address in every email.
• Provide a clear and conspicuous unsubscribe mechanism in every commercial email.
• Process unsubscribe requests within 10 business days.
• Not use deceptive subject lines or misleading header information.

To unsubscribe from our marketing emails, click the "Unsubscribe" link at the bottom of any email or contact [email protected]. Please note that even after unsubscribing from marketing emails, you may continue to receive transactional emails related to active advertising engagements.

13. Sensitive Data

We do not intentionally collect sensitive personal data, which may include (depending on jurisdiction) racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, health data, sex life or sexual orientation, citizenship or immigration status, social security or government ID numbers, financial account information, precise geolocation, or personal data of children.

In compliance with the Maryland Online Data Privacy Act, we do not collect, process, or share sensitive data unless strictly necessary to provide a specific product or service you have requested, and we do not sell sensitive personal data under any circumstances.

If we inadvertently collect sensitive data, we will promptly delete it unless legally required to retain it.

13A. Data Protection Assessments

In accordance with the Maryland Online Data Privacy Act and other applicable privacy laws, we conduct Data Protection Assessments (DPAs) for processing activities that present a heightened risk of harm to consumers. These assessments evaluate the benefits and risks of processing activities, including those involving targeted advertising (Google Ads, Meta Pixel, LinkedIn Insight Tag), the sale of personal data, profiling, sensitive data processing, and any use of algorithms that may produce legal or similarly significant effects on consumers.

Our Data Protection Assessments are maintained internally and may be made available to the Maryland Attorney General's Office upon request, as required by MODPA.

14. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/SSL), access controls, regular security assessments, and employee training on data protection. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the applicable regulatory authorities as required by law.

15. International Data Transfers

MovieAds.io is operated from the United States. If you are visiting our Site from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where our servers and central database operate.

For personal data transferred from the EEA or UK, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission, or other lawful transfer mechanisms, to ensure that your data is afforded an adequate level of protection consistent with GDPR requirements.

16. Children's Privacy

Our Site and services are directed at businesses and professionals, and are not directed to individuals under the age of 16 (or under the age of 13 in jurisdictions where COPPA applies). We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take immediate steps to delete that information. If you believe we have collected information from a child, please contact us at [email protected].

17. Client Data Processing

In the course of facilitating cinema advertising placements for our clients, we may process personal data on behalf of clients as a "processor" (under GDPR) or "service provider" (under CCPA/CPRA). In such cases:

• Our clients are the data controllers and are responsible for determining the purposes and means of processing.
• We process client data only in accordance with our written service agreements and our clients' instructions.
• We do not use client data for our own purposes or share it with third parties except as directed by the client or required by law.
• If you have questions about how a MovieAds.io client processes your data, please contact that organization directly.

18. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page and, where required by law, provide additional notice (such as a banner on our Site or an email notification). We encourage you to review this policy periodically.

19. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your data is handled, please contact us:

For Maryland residents: If you are unsatisfied with our response to your privacy request, you may contact the Maryland Attorney General's Consumer Protection Division at www.marylandattorneygeneral.gov.

For California residents: You may also contact the California Attorney General at oag.ca.gov/privacy.

For EEA/UK residents: You may lodge a complaint with your local data protection supervisory authority.