Privacy policy

Last updated: October 2026

Our Little Film handles your data and the photos you entrust to us with care. This privacy policy explains which data we process, why, how long we keep it and which rights you have. We process personal data in accordance with the General Data Protection Regulation (GDPR).

1. Who we are

Our Little Film is a trade name of Goods Hunter, based in Bussum, the Netherlands, registered with the Dutch Chamber of Commerce under number [KvK-nummer]. Goods Hunter is the controller for the data processing described in this policy. You can reach us via the contact page on this website.

2. Which data we process

We process the following categories of data:

  • Order data: name, email address, billing address and payment details (the payment itself is handled by the payment provider; we never see full card or account numbers).
  • Supplied material: the photos, names, texts and wishes you supply for your film. These may show recognisable people, including children.
  • Communication: messages you send us via the contact form or by email.
  • Website data: technical data such as IP address, browser type and browsing behaviour on our website, via cookies and similar techniques (see section 7).

3. Purposes and legal bases

  • Creating and delivering your film (order data and supplied material): necessary for the performance of the agreement.
  • Customer service and the revision round: necessary for the performance of the agreement.
  • Administration and invoicing: legal obligation (tax retention requirements).
  • Newsletter and marketing: only with your consent; you can unsubscribe at any time via the link in every email.
  • Analysing and improving the website: consent (for non-essential cookies) or legitimate interest (for strictly necessary functionality).

4. Your photos

The photos and stories you supply are personal. Strict rules therefore apply:

  • We use your photos exclusively for the production of your film. Never for marketing, portfolio or other purposes, unless you give separate and express consent.
  • Supplied photos and production files are automatically deleted from our systems no later than 90 days after delivery. We keep them until then so we can handle the revision round and any lost downloads.
  • We never sell or rent your data and photos to third parties.

5. Who has access to your data (processors)

We only share data with parties needed to provide our service:

  • Shopify: our ecommerce platform, for processing orders and hosting the website.
  • Payment providers: for securely handling your payment (such as iDEAL).
  • Email service providers: for order confirmations, delivery of your film and (with consent) newsletters.
  • AI service providers for image production: we use specialised AI tools in the production of your film. Supplied material may be processed by service providers based (partly) outside the European Economic Area. In that case we ensure appropriate safeguards, such as the European Commission's standard contractual clauses.

Where required, we conclude data processing agreements with processors. We never share more data than necessary.

6. Retention periods

  • Supplied photos and production files: deleted no later than 90 days after delivery.
  • Order data and invoices: 7 years, due to tax retention requirements.
  • Contact messages: up to 2 years after handling.
  • Newsletter data: until you unsubscribe.

7. Cookies and online marketing

Our website uses cookies. Strictly necessary cookies (for example for your cart and the checkout) are always placed. Analytics and marketing cookies, such as Google Analytics and the Meta pixel, are only placed with your consent via the cookie banner. You can change your preferences at any time and delete cookies via your browser settings.

8. Security

We take appropriate technical and organisational measures to protect your data, including encrypted connections (SSL/TLS), secure storage and restricted access to supplied material.

9. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and the right to object to processing. If you gave consent (for example for the newsletter), you can withdraw it at any time. Send your request via the contact page; we respond within one month.

If you disagree with how we handle your data, we would like to hear from you first. You also always have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl.

10. Changes

We may update this privacy policy, for example in case of new functionality or changed regulations. The current version is always available on this page, with the date of the last change at the top.