Legal
Privacy Policy
Awaiting legal review. This is a working policy published so that HEC membership can describe how it handles personal information. It has not yet been reviewed by counsel and will be replaced by a reviewed version. It describes what the site does today.
1. What we collect
When you create a membership: your first name, last name, email address and a password. The password is never stored as you typed it — only a one-way hash of it is kept, which cannot be reversed to recover the password.
When you build a profile or add a project: whatever you choose to enter — a display name, company, headline, biography, specialties, regions, website, contact email and telephone number, and project titles and descriptions.
When you send an inquiry: your name, email, company and message, and which page you sent it from.
When you sign in: a session record, the browser's user-agent string, and a one-way hash of your IP address. We keep the hash rather than the address itself so a session can be recognised without the address being readable.
2. What we do not collect
We do not collect card numbers or any other payment details. HEC has not connected a payment provider; membership selections are recorded as requests only.
3. Why we use it
To create and operate your membership; to answer inquiries; to make a professional profile discoverable where you have asked us to; and to keep the service secure. If you opt in, we also use your email address to send HEC announcements, film news and audience surveys.
4. Marketing consent
Marketing email is optional and off unless you turn it on. The box is never pre-selected. You can withdraw consent at any time by contacting us, and withdrawing it does not affect your membership.
5. Who else sees it
We do not sell personal information. It is handled by the suppliers that run this service on our behalf — our website host and our database and file-storage provider — and by HEC staff who need it to do their work. We may disclose information where the law requires it.
A professional profile you submit and ask to be listed is intended to be seen by productions and filmmakers. That is its purpose; do not put anything in it you would not want shown.
6. How long we keep it
Membership and profile information is kept while your account is open. Sign-in sessions expire on their own. Inquiries are kept so we can answer them and keep a record of what was agreed.
7. Your choices
You can ask us for a copy of the personal information we hold about you, ask us to correct it, ask us to delete it, or ask us to stop sending marketing. Contact HEC and say which.
8. Security
Passwords are hashed, sessions are stored as hashes rather than as usable tokens, and the Control Center is not indexed or publicly linked. No system is perfectly secure, but these are the measures in place.
9. Children
This site is not directed at children and we do not knowingly collect information from them.
10. Changes
We will update the date at the top of this page when this policy changes.
11. Contact
Questions about privacy, or to make a request: contact HEC.