Privacy
Last updated: 22 September 2026.
This policy explains what personal data KAMX Chroma Studios collects through kamxchromastudios.com and the Directed Cinema newsletter, why we collect it, who processes it, and what rights you have. It is written to meet the EU General Data Protection Regulation (GDPR), the UK GDPR and the Data Protection Act 2018, and applicable United States law, including the California Online Privacy Protection Act (CalOPPA).
1. Who is responsible
The controller of your personal data is Aliantico LLC, 99 Wall Street, #467, New York, NY 10025, United States. KAMX Chroma Studios is a division of Aliantico LLC. For any privacy question or request, write to [email protected].
2. In short
- This website uses no cookies, no analytics, no advertising and no tracking technologies, and it loads no fonts or scripts from third parties.
- We collect only the personal data you choose to give us, such as your email address, plus the technical data our hosting provider needs to deliver the site securely.
- We never sell your personal data or share it for advertising.
3. What we collect and why
3.1 Visiting the website
Our hosting provider, Cloudflare, processes technical data needed to deliver each page and to protect the site against attacks: your IP address, browser type, the page requested and the date and time. We do not use this data to identify you or build a profile of you. Legal basis (EU/UK): our legitimate interest in running a secure, working website (Art. 6(1)(f) GDPR).
The website also stores one small setting in your browser’s session storage, so that the opening animation plays only once per visit. It contains no personal data, never leaves your device and is deleted when you close the browser tab.
3.2 The Directed Cinema newsletter
If you subscribe, we collect your email address, the dates you subscribed and confirmed, and your subscription status. Our newsletter service also records the technical details of your confirmation, such as the time and IP address, as proof of your consent. The subscribe form sends your address to our newsletter service only when you press Subscribe; nothing is loaded from that service before then.
We use this data only to send you new issues of Directed Cinema and occasional news about the journal. Legal basis (EU/UK): your consent (Art. 6(1)(a) GDPR). You are subscribed only after you confirm through the link in the email we send you (double opt-in).
Every email includes a link to unsubscribe at once. We have switched off open and click tracking, so we do not see whether you open our emails or which links you click.
3.3 When you contact us
If you email us, including through the Start a project button, which opens your own email app, we receive your email address, your name if you include it, and your message. We use them to reply and, if you ask about working with us, to discuss your project. Legal basis (EU/UK): our legitimate interest in answering messages (Art. 6(1)(f) GDPR) or, for project enquiries, steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
3.4 What we do not collect
We do not knowingly collect special categories of personal data, such as health, political opinions or religious beliefs. Please do not send us such information.
4. Who processes your data for us
We use a small number of service providers, who process personal data only on our instructions and under data processing terms:
- Cloudflare, Inc. (United States): website hosting, security, and forwarding of emails sent to our kamxchromastudios.com addresses.
- Buttondown (United States): storing newsletter subscriber details and sending the newsletter.
- Our email provider: receiving and storing correspondence in our aliantico.com inbox.
We may also disclose personal data where the law requires it, for example to comply with a court order. We do not sell, rent or trade personal data.
5. International transfers
Aliantico LLC and our service providers are based in the United States. If you are in the EU or UK, your data is therefore transferred outside the EU/UK. Where a recipient is certified under the EU-US Data Privacy Framework (and its UK Extension), we rely on that certification; otherwise, transfers are protected by the European Commission’s Standard Contractual Clauses and, for the UK, the International Data Transfer Addendum. You can ask us for a copy of the relevant safeguards.
6. How long we keep your data
- Newsletter: for as long as you are subscribed. When you unsubscribe, we stop emailing you at once. We keep only a minimal record (your address and the date you unsubscribed) so that you are not emailed again by mistake and so we can show we respected your choice. If you ask us to erase that record too, we will.
- Correspondence: for as long as needed to handle your message and any follow-up, and then we delete it, normally within 24 months of our last contact, unless a contract with you requires us to keep it longer.
- Hosting data: for the short periods set by our hosting provider for security and delivery purposes.
7. Your rights in the EU and UK
You have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict how we use it;
- receive it in a portable format;
- object to processing based on our legitimate interests;
- withdraw your consent at any time, for example by unsubscribing, without affecting the lawfulness of earlier processing.
To exercise any of these rights, write to [email protected]. We will answer within one month. You also have the right to complain to a data protection authority, in particular in the EU country where you live or work, or, in the UK, to the Information Commissioner’s Office (ico.org.uk).
8. Your rights in the United States
Whatever state you live in, you can ask us to tell you what personal data we hold about you, to correct it or to delete it, by writing to [email protected]. We will not treat you differently for making a request.
We do not sell personal information and do not share it for targeted advertising, as those terms are defined in California and other state privacy laws, and we do not use it for profiling.
Do Not Track and Global Privacy Control: because this website does not track visitors, there is no tracking to switch off. We nonetheless treat a Global Privacy Control signal as a valid request to opt out of any sale or sharing of personal information.
9. Children
This website and the newsletter are not directed at children. We do not knowingly collect personal data from children under 16. If you believe a child has given us personal data, contact us and we will delete it.
10. Security
The website is served only over encrypted connections (HTTPS) with modern security settings. Access to subscriber data is limited to the people who need it, and our accounts are protected with two-factor authentication. No method of transmission or storage is completely secure, but we take reasonable measures to protect your data.
11. Automated decisions
We do not make decisions about you based solely on automated processing, including profiling.
12. Other websites
Our Chroma Store (kamxchroma.com), our YouTube channel and pages hosted by Buttondown, such as the subscription confirmation page, are covered by their own privacy policies.
13. Changes to this policy
If we change this policy, we will update the date at the top. If a change materially affects how we use your data, we will tell newsletter subscribers by email before it takes effect.
14. Contact
Aliantico LLC, 99 Wall Street, #467, New York, NY 10025, United States
[email protected]
See also our legal notice.
KAMX