Privacy policy

01Who is responsible for your data

Criteria Films, a film production studio domiciled in Panama City, Republic of Panama, is the data controller.

For anything relating to your personal data, write to hello@criteriafilms.com.

02What we collect

We only collect what you hand over voluntarily. We do not use hidden forms and we do not buy databases.

• Forms: your name, email, organization and role, and whatever you choose to tell us about the project (including the order you build on the rates page). If you ask for examples, just your name and email.
• Direct contact: whatever you include when you email or message us.
• Booking a session: if you book a call, Google Calendar collects your name and email under its own terms.
• Browsing: aggregated, pseudonymized usage data via Google Analytics, and which page or campaign brought you here (an ad, for example), so we know what works.
• Private proposals: if you open a proposal we sent you through a personal link, we record which sections you view, for how long, whether you play the video and whether you book a meeting, tied to that link and to the country it is opened from. It uses no cookies and does not store your IP address. It tells us whether the proposal arrived and what caught your interest.

03What we use it for

We do not sell your data, we do not pass it to third parties for commercial purposes, and we do not add you to mailing lists you did not ask for.

• Answering your request and preparing the proposal or project you asked for.
• Issuing the invoice and meeting tax and accounting obligations.
• Producing the contracted piece and coordinating approvals with you.
• Understanding how the site is used and improving it.
• If you accept in the cookie notice: measuring our campaigns and showing you our ads on Meta (Facebook and Instagram), TikTok and LinkedIn.

04Who we share it with

Only with providers needed to deliver the service, and only what each one requires:

• Google (Tag Manager, Analytics, Calendar, mail) — analytics and scheduling.
• Pymenton (app.pymenton.com) — the system where we receive and answer your requests.
• Meta, TikTok and LinkedIn — only if you accept advertising cookies, to measure campaigns and show ads.
• Vimeo — hosting for the videos on this site.
• Vercel — hosting for the site itself.
• Our invoicing system, to issue invoices and keep the books.

05How long we keep it

• Enquiries that do not become projects: up to 12 months.
• Clients: for the length of the relationship, then for whatever period Panamanian tax and accounting law requires.
• Analytics data: per the retention configured in Google Analytics.
• Private proposal views: up to 12 months after the conversation closes.

06International transfer

Some of these providers operate outside Panama, which involves international data transfer. In every case they are companies with published data protection policies.

07Your rights

Law 81 of 2019 grants you rights of access, rectification, cancellation, objection and portability over your personal data. You can exercise them by writing to hello@criteriafilms.com.

We will respond within the periods the law sets. If you believe your request was not handled properly, you can go to the National Authority for Transparency and Access to Information (ANTAI).

08Cookies and analytics

We use Google Tag Manager to load Google Analytics, which tells us in aggregate how the site is navigated: which pages get visited, from where, and for how long. Tag Manager is only the container that loads those tags; it does not collect data itself.

Advertising cookies: if you accept them in the notice, Tag Manager also loads the Meta, TikTok and LinkedIn tags. They tell us whether one of our ads led to a visit or a request, and let us show you our ads later. If you decline, they are not loaded. In the European Union, the UK and Switzerland they stay off until you accept.

You can change your choice at any time with the “Cookies” link in every page footer, or block cookies in your browser without breaking the site.

09YouTube API Services

Beyond this site, Criteria Films operates internal editorial research tools that use YouTube API Services to query public information about videos and channels — titles, descriptions and statistics such as view counts — to plan the original content we produce. When using those tools we are bound, in addition to this policy, by the YouTube Terms of Service and the Google Privacy Policy.

These tools do not access personal data of YouTube users: they do not request OAuth authorization, they do not read third-party account information, and they only query data publicly available through the API.

Data obtained from the API is stored temporarily for analysis, is refreshed or deleted within a maximum of 30 calendar days, and is never sold or shared with third parties.

10Content produced with artificial intelligence

This site and much of our work are produced with artificial intelligence tools, and we say so openly. The personal data you give us is not used to train models — not ours and not anyone else’s.

Our full commitments on AI use are in the ethics section of the site.

11Changes to this policy

If we change this policy we will update the date in the header. If the change materially affects how we handle your data, we will tell you at the email address you gave us.