Privacy Policy
How The Unknown Film Company collects, processes, protects, and governs personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA) and Information Technology Act, 2000 of India.
Welcome to The Unknown Film Company (“Company”, “we”, “us”, or “our”), registered under MSME Registration UDYAM-MH-18-0194910 and GSTIN 27AAHFT3944P1ZG, operating the official web property https://www.theunknownfilmcompany.com (the “Website”).
We are committed to upholding high standards of data ethics and confidentiality. This document outlines your statutory rights as a Data Principal under the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
1. Categories of Personal Data We Collect
We collect only the minimum necessary personal data required to operate our film exhibition and communication platform:
Voluntary Communications Data
When you submit inquiries via our Contact Form (academic screenings, film licensing, press requests, or collaborative proposals), we collect your full name, email address, institutional affiliation, nature of inquiry, and message content.
Technical & Diagnostic Telemetry
When accessing our streaming player or audio excerpts, our edge security layer (Cloudflare) automatically processes standard HTTP request headers, anonymized IP addresses, browser client user-agents, referring URLs, and edge performance metrics.
Essential Session Cookies
We deploy only strictly necessary cookies for session management, bot prevention, and administrative access control. We do NOT deploy invasive cross-site advertising trackers or sell browsing data to third-party data brokers.
Bot Protection Telemetry
To protect our inquiry endpoints against automated spam and denial-of-service abuse, we utilize Cloudflare Turnstile non-interactive bot verification, which evaluates browser environment signals without reading biometric or personal identifiers.
2. Lawful Basis & Purpose Limitation (DPDPA 2023)
Under Section 4 and Section 6 of the DPDPA 2023, personal data is processed solely for specified, lawful, and legitimate purposes:
- Consent: Responding directly to your requested film screening, academic evaluation, or business distribution inquiries submitted via our contact channel.
- Legitimate Uses & Security: Maintaining edge network integrity, mitigating cyber threats, and complying with statutory record-keeping under the Information Technology (Intermediary Guidelines) Rules.
- Zero Monetization: We do NOT sell, lease, rent, trade, or monetize personal information.
3. Third-Party Infrastructure & Technical Sub-Processors
Our website utilizes verified edge and media hosting providers under strict confidentiality protocols:
DNS resolution, SSL/TLS encryption, edge CDN caching, and Turnstile bot protection telemetry.
Video streaming CDN and audio track player embeds (privacy-enhanced mode without third-party ad beacons).
Transactional processing of formal screening requests and licensing communications.
4. Statutory Rights of Data Principals (DPDPA 2023)
Under Chapter III of the DPDPA 2023, you hold the following enforceable statutory rights:
Request a summary of personal data held about you and processing activities undertaken.
Request correction of inaccurate data, completion of incomplete data, or erasure of outdated inquiries.
Direct complaints to our designated Grievance Officer with an expedited statutory response timeline.
Nominate an individual to exercise data principal rights on your behalf in the event of death or incapacity.
5. Technical Security Safeguards & Data Retention
We implement industry-standard technical security practices under Section 43A of the Information Technology Act, 2000, including end-to-end TLS 1.3 encryption in transit, strict OWASP Content Security Policies (CSP), HTTP Strict Transport Security (HSTS), and encrypted database storage with regular access audit logs.
General screening inquiries and contact submissions are retained for a maximum duration of 24 months from resolution, after which records are permanently purged or anonymized.
6. Statutory Grievance Redressal & Data Protection Officer
In accordance with Section 8(9) of the DPDPA 2023 and Rule 3(2) of the Information Technology (Intermediary Guidelines) Rules, 2021, you may submit privacy queries or exercise statutory rights by contacting:
Grievance & Compliance Officer
The Unknown Film Company
UDYAM-MH-18-0194910 • GSTIN: 27AAHFT3944P1ZG
Please submit your query via our Secure Contact Portal selecting “Academic & Institutional Screenings” or general inquiry.
We reserve the right to modify this Privacy Policy to reflect statutory amendments under Indian law or enhancements to our digital infrastructure. The latest version will always be accessible at https://www.theunknownfilmcompany.com/privacy-policy/.