Privacy Policy for the Association of Camera Operators

1. Introduction

The Association of Camera Operators ("we," "us," or "our") is committed to protecting the privacy and security of our members and website visitors. This policy outlines how we collect, use, and safeguard your personal information when you interact with our website and membership services.

2. Information We Collect

To provide our services, we may collect the following types of information:

• Identity Data: Name, professional title, and credits.
• Contact Data: Email address, phone number, and mailing address.
• Membership Data: Subscription status, payment history (processed via secure third parties), and committee involvement.
• Technical Data: IP address, browser type, and usage data collected via cookies to improve website performance.

3. How We Use Your Data

We use your information for the following purposes:

• Membership Management: To process applications, renewals, and provide access to member-only areas.
• The ACO Directory: To display professional profiles to industry recruiters and productions (subject to your privacy settings).
• Communication: To send newsletters, event invitations, and industry updates.
• Legal Compliance: To meet our accounting and legal obligations.

4. Data Sharing and Disclosure

We do not sell your personal data. We may share information with:

• Service Providers: Secure platforms for email distribution (e.g., Mailchimp) or payment processing (e.g., Stripe).
• Public Directory: If you are a Full Member, your professional details may be visible in our online directory unless you opt out.
• Legal Authorities: If required by law to protect our rights or comply with judicial proceedings.

5. Data Security

We implement robust technical and organizational measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. Access to your personal data is limited to authorized employees and volunteers who have a business need to know.

6. Your Rights

Depending on your location, you have the following rights regarding your data:

• Access: Request a copy of the data we hold about you.
• Correction: Ask us to update or fix inaccurate information.
• Erasure: Request that we delete your data (the "right to be forgotten").
• Withdrawal of Consent: Opt-out of marketing communications at any time.

7. Cookies

Our website uses cookies to enhance your browsing experience. You can set your browser to refuse all or some cookies, but please note that some parts of the website may become inaccessible or function improperly.

8. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact our Data Protection Officer at:

Email: [email protected]

Address: [Insert Physical Address, London, UK]

Important Considerations for the ACO

• The Directory: Since the ACO likely features a "Find an Operator" tool, ensure your members have a clear checkbox in their profile settings to "Make Profile Public" or "Keep Private."
• International Transfers: If you have members outside the UK/EU, ensure your hosting and email providers comply with Standard Contractual Clauses (SCCs).

Cookie Consent Banner & Policy

This is the text for the pop-up banner and the detailed breakdown for your "Cookies" page.

The Banner Text

"We use cookies to enhance your experience, analyse site traffic, and support our Patron member features. By clicking 'Accept All,' you consent to our use of cookies. You can manage your preferences or read our [Cookie Policy] for more details."

[Accept All] [Reject Non-Essential] [Cookie Settings]

Cookie Categories (For the Policy Page)

Type	Purpose	Duration
Essential	Required for logging into the Member/Patron portal and secure payments.	Session
Functional	Remembers your preferences (e.g., directory filter settings).	1 Year
Analytical	Helps us understand which Patron pages or operator profiles are most viewed.	2 Years

2. Data Processing Agreement (DPA)

Data Processing Agreement (Summary)

1. Scope and Applicability

This agreement applies to all processing of personal data carried out by the ACO on behalf of its Members and Patrons. It ensures that data handling meets GDPR/UK GDPR standards.

2. Roles of the Parties

• The ACO: Acts as the Data Controller for member and patron registration data.
• Third-Party Vendors: (e.g., Stripe, Mailchimp) Act as Data Processors acting on our instructions.
• Patrons: Where Patrons receive member data (e.g., a list of attendees for a sponsored workshop), the Patron agrees to act as an independent Controller and protect that data under current laws.

3. Obligations of the ACO

• Purpose Limitation: Data collected from Patrons (corporate contact info, logos, marketing materials) will only be used for the fulfilment of the Patronage Agreement.
• Confidentiality: All personnel handling Member or Patron data are bound by strict confidentiality agreements.
• Data Minimisation: We only collect the professional data necessary to facilitate the relationship between Operators and Patrons.

4. Data Transfers

If data is transferred outside the UK or EEA (e.g., to a server in the US), the ACO ensures that Standard Contractual Clauses (SCCs) or equivalent safeguards are in place to protect the information.

5. Breach Notification

In the event of a data breach affecting Patrons or Members, the ACO will notify the relevant supervisory authority and the affected individuals within 72 hours of becoming aware of the breach.

3. Specific Clause for Patrons

Note for Patrons:

We collect organisational data from our Patrons, including point-of-contact details and corporate branding. This information is used to highlight your support for the craft of camera operating. Patrons are responsible for ensuring that any staff contact information provided to the ACO has been shared in compliance with their own internal privacy policies.