What this policy covers
This policy explains what personal information Aavira Films collects through this website, why we collect it, how we protect it and what rights you have over it.
P
Legal
Privacy Policy
How Aavira Films handles the information you share with us.
Last updated · 24 August 2026
Information we collect
Account information — your name, email address and, if you choose to give it, your phone number. Your password is never stored in a readable form; we keep only a salted one-way hash of it. Enquiry information — the details you submit through our contact form, including the message itself and any event details you share. Technical information — your IP address, browser type and the time of a request. We record this for security purposes such as rate limiting, detecting abuse and keeping an audit trail of administrative actions.
Why we use it
To create and secure your account, to send one-time verification codes and password-reset codes, to respond to your enquiry, to keep the website safe from abuse, and to meet our legal and accounting obligations. We do not sell your personal information, and we do not use it for advertising profiling.
We send transactional email only — email verification codes, password-reset codes, security notices such as a password change, and replies to your enquiries. We do not add you to a marketing list without your explicit consent.
How long we keep it
Account data is kept for as long as your account is open. One-time codes are deleted automatically shortly after they expire. Enquiries are retained while they are relevant to a project or a legal obligation, and are deleted afterwards.
How we protect it
Data is stored in an access-controlled managed database and transmitted over encrypted connections (HTTPS/TLS). Passwords are hashed with bcrypt. Sessions use signed, HTTP-only cookies with rotating refresh tokens, and administrative areas are restricted by role and protected against cross-site request forgery. Uploaded files are re-encoded on our server so they cannot carry hidden executable content.
Cookies
We use only the cookies needed to run the site: a session cookie, a refresh cookie and a cross-site request forgery token. We do not use third-party advertising or tracking cookies. Video and map embeds may set their own cookies when you interact with them.
Your rights
You can view and update your name and phone number at any time from your account page, and change your password there. You may ask us to provide a copy of your data or to delete your account and its associated data by writing to our contact page. We will respond within a reasonable period.
Children
This website is not directed at children under 13, and we do not knowingly collect their personal information.
Changes and contact
If this policy changes, the updated version will be published here with a new "last updated" date. For any privacy question, or to exercise the rights above, contact our contact page.