Legal
Privacy.
What we collect, why we collect it, and who else sees it.
Last updated September 24, 2026
The short version
We collect what we need to run a booking and nothing more. We do not sell your personal information, and we never have. We do not create accounts, and we do not build a profile of you to advertise with.
This notice covers Linkeno Corp dba Seven Film Studios, at 120 S Victory Blvd, 1st Floor, Burbank, CA 91502. It is also our notice at collection under the California Consumer Privacy Act, as amended by the CPRA.
What we collect, and why
Booking a studio or registering for a course
Your name, email address, and phone number, together with the booking itself — the room, the dates, any equipment or kits, and any notes you add. We use it to hold your dates, take payment, send your confirmation and a link to manage the booking, and reach you if something about it changes. Joining a course waitlist keeps the same contact details so we can offer you a place.
Paying
We never see or store your card details. Payment happens on Stripe’s own pages. We receive a payment reference, the amount, and whether it succeeded. If you pay with Apple Pay or Google Pay, Apple or Google also handles that payment under its own privacy policy.
If you pay for a course by Zelle, the transfer runs between your bank and ours; we are not part of it. We see what our bank shows us — the name the payment came from, the amount, the date, and the memo — and use it only to match your payment to your registration.
Signing the liability waiver
Everyone hiring a stage signs a release before the booking. We record the name you type, your email, the date and time, your IP address, your browser’s user agent string, and a fingerprint of the exact document you were shown. That last part is the point: it is what lets either of us say later what was actually agreed to.
Showing ID at reception
Staff check photo ID when you collect keys or equipment. We record the kind of document, the last four characters of its number and no more, the name printed on it, its expiry date, and whether that name matched the booking. No photograph or scan of the document is taken or kept.
If you ask us to hold a paper copy, that is noted so the physical file is destroyed on the same schedule as the digital record. Every time a member of staff opens these details, that is logged with their name.
Condition checks after a hire
We inspect the stage and equipment after every booking. If something is damaged we record a description, photographs of the damage, and the amount charged. The photographs are of the premises and the equipment, not of people, though a production’s own property may appear in them.
Transferring a course place to somebody else
If you hand your place to another person, you give us their name, email address and telephone number. We are collecting their details from you rather than from them, so we ask you to confirm they have agreed to it — and we email them straight away, so the first they hear of us is not on the day.
We use those details for the same things as any other registration: to confirm the place, to reach them about it, and to know who is in the room.
Credits
A credit is tied to the email address it was issued to, which is the only way to stop somebody else spending it. We keep the code, what it is worth, when it expires, and which registration it came from, until it is spent or expires.
A record of what you did
We keep a log of the things you do that change something — registering, paying, signing the waiver, uploading a certificate of insurance, transferring a place, cancelling, sending us a message. Each entry is your email address, what happened, and when.
We do not log what you read. No pages visited, no links opened, no browsing trail. The log exists so that if there is ever a disagreement about what happened and when, there is an answer that is not somebody’s memory — not to build a picture of you.
Contacting us
Your name, email address, an optional phone number, and whatever you write to us.
Automatically, as you browse
Server logs, which include your IP address, and aggregate analytics about which pages get visited. We use these to keep the site up and to see which parts of it are worth the effort.
Categories, in the law’s own terms
California requires this stated by category. Over the past twelve months we have collected:
- Identifiers — name, email address, phone number, postal address, IP address.
- Customer records — name, signature, contact details, and the partial document number from an ID check.
- Commercial information — bookings, course registrations, payment and refund records including money taken by cash, transfer or Zelle, credits issued, and any damage charged.
- Internet activity — pages visited, referring page, browser and device type.
- Sensitive personal information — the partial document number described above. See below.
We do not collect biometric information, precise geolocation, or information about your race, religion, health, union membership, sex life, or sexual orientation. We draw no inferences about you and build no profile.
Sensitive personal information
A government document number counts as sensitive personal information under California law, and we treat the four characters we keep as though the whole number were sensitive.
We use it for one thing: confirming that the person collecting the keys is the person who made the booking. That sits inside the purposes the CPRA permits without a separate opt-out, so there is no Limit the Use of My Sensitive Personal Information link on this site. We do not use it to infer anything about you, and we never disclose it for anyone else’s purposes.
How long we keep it
- ID checks — 90 days. The document number, the name on it, and its expiry are erased automatically 90 days after the check. What survives is the fact that a named member of staff checked ID on a given date and whether the name matched. Any paper copy is shredded on the same clock.
- Bookings, registrations, and payment records — seven years, which is what accounting and tax record-keeping needs.
- Signed waivers — for as long as a claim could still be brought, which in California can be several years after a booking. A release nobody can produce is not a release.
- Damage reports and photographs — seven years, alongside the charge they relate to.
- Contact-form messages — while we are dealing with them and for a reasonable period after.
- The record of what you did — seven years, alongside the booking or registration it relates to. It is the same evidence trail as the transaction itself and is worth no less than it.
- Credits — until spent or expired, then kept with the accounting records for the same seven years.
- Waitlist entries — until the course runs or you leave the list.
- Server logs and analytics — kept in aggregate; the log retention our hosting provider applies is measured in weeks, not years.
Who else sees it
We use a small number of service providers, each processing data on our behalf under their own terms:
- Stripe — payments. Receives your name, email, and the amount, and handles your card details directly.
- Renacy Corp. — the billing entity that collects Zelle payments on the studio’s behalf. Its bank account receives your payment and the details that come with it: your name, the amount, the date, and the memo.
- Resend — transactional email. Receives your email address and the contents of what we send you.
- Supabase — the database and file storage behind the site.
- Vercel — hosting, and aggregate analytics that set no cookie.
- Google Analytics — aggregate analytics about site usage.
We may also disclose information where the law requires it, or where we need to establish or defend a legal claim — a signed waiver or a damage report is kept precisely so it can be produced if it comes to that.
Selling and sharing
We do not sell personal information, and we never have. We do not share it for cross-context behavioral advertising, and we run no advertising pixels. Google Analytics is here to count page views, not to follow you.
We honor the Global Privacy Control. If your browser or extension sends that signal, analytics does not load for you at all and nothing about your visit is sent to Google. Turning analytics off costs you nothing on this site — there is no feature behind it.
Cookies
Analytics sets a cookie. There are no advertising cookies. Stripe sets its own cookies on its checkout pages for fraud prevention, which is outside our control and covered by Stripe’s policy.
Keeping it safe
Data is encrypted in transit and at rest. The admin portal is restricted to named studio staff, every administrative action is written to an audit log, and the sensitive parts of an ID check are behind a deliberate second step so that looking at them is a decision somebody made and is recorded as such. No system is perfect, which is the reason we hold as little as we do.
Your rights
If you are a California resident, you have the right to:
- Know what personal information we have collected about you, why, where it came from, and who we disclosed it to.
- Get a copy of it, in a portable form.
- Correct anything inaccurate.
- Delete it, subject to the exceptions the law allows — we cannot delete a tax record we are required to keep, or a signed waiver or damage report while a claim relating to it could still be brought.
- Opt out of sale or sharing, and to limit the use of sensitive personal information. Neither applies here, as described above, but the right exists and we will not pretend otherwise.
- Not be treated differently for exercising any of this. We will not charge you more, serve you worse, or refuse you a booking.
Making a request
Email hello@sevenfilmstudios.com and say what you want. You can also write to us through the site, or by post at the address above.
We will confirm we have your request within ten business days and answer it within forty-five, or tell you why we need up to forty-five more. It is free twice in any twelve-month period.
We will ask you to verify yourself first — usually by confirming details of a booking we already hold — because handing someone else’s records to the wrong person is the failure that matters most here. An authorized agent may act for you with written permission, and we may still ask you to confirm it directly.
If you think we have got it wrong, tell us and we will look again. You can also complain to the California Privacy Protection Agency or the California Attorney General.
Children
This site is not directed at children and we do not knowingly collect information from anyone under 13. We do not sell or share the personal information of anyone under 16, and we have no knowledge of ever having done so. Minors on the premises are handled through the booking itself, with a parent or guardian, rather than through this site.
Changes
If this policy changes, the date at the top of this page changes with it. The version in force is the one published when you booked.
Contact
Questions about any of this: contact the studio or email hello@sevenfilmstudios.com. By post: Linkeno Corp dba Seven Film Studios, 120 S Victory Blvd, 1st Floor, Burbank, CA 91502.