1. Who is responsible
HDC Brands LLC is the controller of personal information described in this Policy. We are based in the United States. Privacy questions and requests: privacy@cargocut.com.
2. Information we collect
Information you provide. When you request a spec film or write to us, we receive the details you choose to share: your name, company, work email, website, country, sector, preferred language and channel, the content of your message, and any materials you send.
How the request form works. The Site's request form does not store what you type. When you submit it, the details are copied into a draft in your own email application, and you decide whether to send it. If you send it, we receive it as an email.
Information collected automatically. When you visit, our hosting and content-delivery provider may log technical data such as IP address, browser and device type, operating system, referring pages, pages viewed and timestamps. We use this for security, performance and aggregate statistics.
Information from public sources. To prepare a relevant spec film, we may review publicly available business information about your company, such as your website, press releases and public social-media pages. We do not buy personal data.
3. How we use information
- to respond to inquiries and evaluate and prepare work you request;
- to prepare, deliver and improve spec films and commissioned films;
- to operate, secure and improve the Site;
- to send business communications you have requested or that relate to an existing conversation;
- to comply with legal obligations and enforce our terms.
We do not use the Site to make automated decisions that produce legal or similarly significant effects about you.
4. Legal bases (EEA, UK and Switzerland)
Where the GDPR, UK GDPR or Swiss law applies, we rely on: steps you request before entering into a contract (responding to your request); our legitimate interests in operating and securing the Site, developing our business and contacting businesses about relevant services, balanced against your rights; your consent where required, which you may withdraw at any time; and compliance with legal obligations.
5. Business outreach
We may contact business professionals at their work address about services relevant to their company. Every outreach message identifies us and offers a simple way to opt out, and we honor opt-out requests promptly. Where local law requires prior consent for business email, we follow it.
6. Sharing
We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising. We share it only with:
- service providers that process it on our behalf under contractual confidentiality and security obligations, such as web hosting and content delivery (Vercel), email, file transfer and production tools;
- font services that deliver the Site's typefaces (Fontshare and Google Fonts), which may receive your IP address when fonts load;
- professional advisers where necessary;
- authorities where required by law or to protect rights and safety;
- a successor entity in a merger, acquisition or asset sale, subject to this Policy.
7. AI tools
We use AI tools from established providers under commercial terms to produce films and support our work. Materials you send are used only for your project and are not used to train our own or third-party foundation models. See our AI Policy.
8. International transfers
We are based in the United States and serve clients worldwide, so information may be processed in the United States and other countries whose data-protection laws differ from yours. Where required, we use appropriate safeguards, such as the European Commission's standard contractual clauses and the UK addendum.
9. Retention
We keep personal information only as long as needed for the purposes above: correspondence for the life of the relationship plus a reasonable period; spec films and related notes until you ask us to delete them or they are no longer needed; and technical logs for a short rolling period, unless the law requires longer.
10. Security
We use reasonable administrative, technical and organizational measures appropriate to the data, including encryption in transit (HTTPS) and access controls. No method of transmission or storage is completely secure.
11. Your rights
Depending on where you live, you may have the right to access, correct or delete personal information; object to or restrict processing; data portability; withdraw consent; and lodge a complaint with a supervisory authority.
United States. Residents of California and other US states with comprehensive privacy laws may request access to, correction of and deletion of their personal information, and information about categories collected and disclosed. We do not sell or "share" personal information as those laws define it, and we will not discriminate against you for exercising your rights.
Other regions. We also honor rights available under laws such as Brazil's LGPD, Canada's PIPEDA and Türkiye's KVKK where they apply.
To make a request, email privacy@cargocut.com. We will verify your request and respond within the time required by law. You may use an authorized agent where the law allows.
12. Children
The Site is intended for business audiences and is not directed to children under 16. We do not knowingly collect their personal information; if you believe a child has provided it, contact us and we will delete it.
13. Changes
We will update this Policy before adding new data processing on the Site, such as analytics or a stored request form. The "Last updated" date shows the current version, and material changes will be noted on this page.
14. Contact
HDC Brands LLC, doing business as CargoCut
United States
Privacy: privacy@cargocut.com · General: studio@cargocut.com