Legal

Privacy Policy

This Privacy Notice sets out how Bad Pencil, a division of 9 Story Media Group Inc. (“Bad Pencil”, “we”, “us” or “our”) as Data Controller collects and processes your personal data through your use of this website. Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We collect and process personal data about:

• visitors to this website or other related company websites and/or social media accounts (collectively “websites”);
• individuals with whom we communicate or interact with in the course of business.

1. INFORMATION WE COLLECT

For Visitors to Our Websites, we may process a limited amount of personal data including but not limited to the following:

• Contact Data – including any email address which you provide if you contact us via an email link on our website:
  • Your email address and any information you include in your message will be processed.
  • This data is used solely to respond to your enquiry.
  • Emails are processed through Microsoft 365.
• Technical Data – includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website. As you interact with our website, we may collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies. Please see our cookie policy at the end of this Privacy Notice for further details.
• Usage Data – includes information about how you use our website. We also use aggregated non-personally identifiable data from certain third parties such as analytics providers such as Google to help us understand how visitors engage with our website.
• Cookies – We use cookies to enhance your experience on our website. Cookies are small text files stored on your device.

For Independent Contractors who supply services to us:

We collect and process personal data such as name, address, contact details, bank account details, payment information, ID documentation such as passport or national ID, tax documentation and in some instances (e.g. if working with children) we may collect information through background check agencies (which would include information about any previous criminal convictions).

For Individuals who are employed or engaged by suppliers of goods or services:

We collect and process personal information such as: your name, address, telephone, email, job title, IP address, and any correspondence with you or with the supplier you represent, financial information and other information that is relevant to the receipt of those services or goods. If we need to provide or allow you to have access to our systems or premises, for security reasons, we may monitor and record that access.

2. HOW WE USE YOUR PERSONAL DATA

We will not hold or process any personal data that is not necessary for our stated purposes. This means we do not retain sensitive personal data such as racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for identification purposes, or data concerning health or sexual orientation, unless legally required or explicitly consented to.

The purposes for which we use personal data and the legal basis for which the processing is necessary or permitted are as follows:

3. LEGAL BASIS FOR PROCESSING PERSONAL DATA

Receiving email correspondence (Contact): To respond to any inquiry you may have. Necessary for our legitimate interests (to respond to enquiries, run our business).

To use data analytics to understand website usage patterns, and for marketing, and to improve the user experience (Technical & Usage): Necessary for our legitimate interests (to define users of our website, to keep our website updated and relevant, to develop our business and to inform our marketing strategy).

4. SHARING OF PERSONAL INFORMATION

We may disclose personal data to:

• Third parties, including cloud service providers, who provide a service to us
• A public authority in the event that we are required to do so by law
• A third party where we are under a legal obligation to transfer it to that third party or where we provide it to a client who is under such legal obligation
• In the natural course of business where necessary in line with existing legal basis
• A prospective seller or buyer of any of our assets or business

We will not disclose your personal data to any third party except as required by law, pursuant to regulatory obligations, or with your explicit consent. We do not sell, rent, or share your personal data for marketing purposes or any unauthorized use.

5. DATA SECURITY

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

6. DATA RETENTION

We will retain personal data only for as long as necessary for the purposes for which it was collected; as required by law; and for the purposes of satisfying any legal, accounting or reporting requirements or the exercise or defence of legal claims that may be brought by or against us.

Our retention practices may be reviewed and updated from time to time in line with legal requirements and best practice.

7. YOUR LEGAL RIGHTS

Under certain circumstances, you have the right to:

• Request information about whether we hold personal information about you, and, if so, what that information is and why we are holding/using it.
• Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
• Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
• Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
• Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
• Object to automated decision-making including profiling, that is not to be the subject of any automated decision-making by us using your personal information or profiling of you.
• Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
• Request transfer of your personal information in an electronic and structured form to you or to another party (commonly known as a right to “data portability”). This enables you to take your data from us in an electronically usable format and to be able to transfer your data to another party in an electronically usable format.

If you wish to exercise any of the rights set out above, please contact us via the contact details at the top of this Privacy Policy.

Withdrawing consent: In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please email us using the email above. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.

8. THIRD-PARTY LINKS

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

9. COOKIE POLICY

Cookies are small files that are created on your computer or device when you visit a website, if enabled in your browser. These files are used to ensure the website works as intended (“Necessary cookies”), to gather data about your activity on websites in order to improve performance of the website (“Performance cookies”), to remember your preferences on websites (“Functionality cookies”), or to help deliver more relevant advertising or analyze performance of advertising on the website (“Targeting cookies”). Currently only Necessary, Performance and Functional cookies are used on this website.

Cookies can be set to be stored for a period of time (with a defined expiry), these are “persistent” cookies, or they can last only while you use the website and are discarded when you close your browser, these are “session” cookies.

Cookie consent is managed via Cookiebot, which allows you to accept or decline non-essential cookies. Cookies can be disabled if you wish, however this may result in a reduced experience. Instructions for how to do this vary depending on your browser, and if so desired, to disable cookies entirely they must be disabled in every browser and on every device you use individually. Links to instructions for popular browsers are provided below.

• Google Chrome
• Microsoft Edge
• Mozilla Firefox
• Microsoft Internet Explorer
• Opera
• Apple Safari

We reserve the right to change this Cookie Policy as required. Changes will be listed here and the “Last Updated” date will be updated. Significant changes to this Cookie Policy will be communicated using a more prominent method.

Questions, comments, requests and complaints regarding this Cookie Policy should be addressed to legal@9story.com.

Please see our full Cookie Policy.

10. CHANGES TO THIS PRIVACY NOTICE

We reserve the right to update this privacy notice from time to time. The most up to date privacy notice will be posted to our website and dated for the date of the last update. We may also notify you in other ways from time to time about the processing of your personal information.

11. ACCESSIBILITY

At Bad Pencil, we understand and appreciate that people with disabilities may have different needs. Should you require any information from our website in a different format or if you have any questions or feedback about our accessibility standards and policy, please contact us.

12. COPYRIGHT AND TRADEMARK NOTICE

Reproduction of part or all of the contents of this website is prohibited. The information and graphics contained in this site are copyright protected by Brown Bag Films and its respective clients. The trademarks and logos displayed on the site are registered trademarks of 9 Story Media Group and other organisations. No part of this site may be permanently stored or copied for further distribution, or transmitted in any form or by any means without written permission from Brown Bag Films. Exceptions are made for use of materials where downloads or embed codes are clearly stated which may be used for non-commercial purposes.