Your privacy is extremely important to us.
Last Updated June 26, 2019 | Effective Date May 25, 2018
Our updated Policy more clearly explains what information we collect from you, how we use it, and why. Of course, our commitment to respecting your privacy remains the same. We’re excited to continue building a trusting relationship with our students, customers, subscribers, and website visitors more generally, and this Policy update – along with our extensive review of our internal data processes and systems – is the latest manifestation of that mission!
Without further ado, let’s jump in!
An Overview of the Sources of Personal Data
Lights Film School obtains information about individuals in these main ways:
- When you visit one of our websites or contact us directly about becoming a student or obtaining other information,
- When you become a student and/or purchase a product or service, and
- When you’re a service provider to Lights Film School.
“You” or “your” refers to the individual who uses our websites, features, and services, or accesses available information, or engages with us directly via email or other media outlets.
The goal of all of this, of course, is (1) to serve our existing students and customers as best we can, and (2) to keep growing as a business, thereby reaching as many aspiring filmmakers around the world as we can!
Whose information does Lights Film School collect?
Lights Film School collects information from two types of individuals:
Our visitors are individuals who visit one of our websites or contact us directly about becoming a student or customer or obtaining other information. They also may opt into our marketing emails.
Our students are individuals who have enrolled in Lights Film School and created their membership accounts. Our customers include our students, but also include individuals who have purchased other products and/or services from us without enrolling in Lights Film School. They also may opt into our marketing emails.
What information does Lights Film School collect?
Depending on how you use the Lights Film School websites, features, and services – and depending on your direct interactions with us – we collect two types of information: personal information and non-personal information.
Personal information is information that identifies you or may be used in conjunction with other pieces of information to identify you. For example: your name, email address, and billing and credit card information via an industry standard-payment gateway. Know that Lights Film School never solicits sensitive personal information (for example, billing and credit card information, a student’s password, etc.) through insecure channels like email or text messages.
Students with Premium Membership also are invited, but by no means required, to share further details about themselves with the Lights Film School community. For example: their name, website, nationality, bio, project assignments, as well as posts that abide by our community guidelines and a representative photograph, like you see on traditional social media websites. For many of our students, the resulting community is an attractive aspect of their Lights Film School educational experience.
Personal information also can include information that does not identify you, but could be combined with other information in a way that enables you to be identified. This includes things like age, gender, IP address, and current location.
Non-personal information is information that cannot be used or combined with other information to identify or contact you, including browser types, device types, and statistical data involving the use of the Lights Film School websites. This helps us refine Lights Film School’s websites, features, and services from a technical standpoint.
When does Lights film School use information from third parties?
Lights Film School collects only the information necessary to run our websites and provide our features and services successfully. Some of this information comes from or otherwise involves third parties.
For example, when you place an order on our courses.lightsfilmschool.com website, we receive information from a third party that provides automated fraud detection services. We manually cross-check this information against other information, including the IP address associated with your first login (see below). Occasionally, if questions remain as to whether or not an order is fraudulent, we consult information that is made publicly available on social media websites. You can control how much of your information social media websites make public by visiting these websites and changing your privacy settings.
As another example, when you contact us via a contact form (or beacon) on our www.lightsfilmschool.com website for any reason, your message is delivered via form software to email to our help desk software (or directly through our help desk software), which can help build a more complete contact profile.
As a third example, in addition to their Lights Film School membership accounts, students are invited to subscribe to “Premium Membership” and create community accounts on a messaging platform that serves as the backbone of some of Lights Film School’s optional community features (see below). Of course, students can control how much of their information this messaging platform makes public by adjusting the settings to their liking.
What third parties does Lights Film School involve, why, and how?
We use AirTable to store internal documents, including one document that keeps track of students’ course progress across our current and legacy learning platforms. This simplified, centralized reference helps us deliver individualized customer service quickly and effectively.
Buffer Publish is the tool we use for social media-related management. It helps us curate, schedule, and publish content for our Facebook, Twitter, and Instagram accounts.
To help protect against spam bots and reduce server load, we use CleanTalk’s SpamFireWall feature, which filters inbound traffic to our WordPress-powered websites by checking an IP address against a private database blacklist of known IP addresses with spam bots. Log files are retained for 7 days, after which they are deleted.
Cloudflare is an industry-leading cloud network platform that gives our visitors to www.lightsfilmschool.com a faster, more secure, and more reliable internet experience. For example, its CDN helps speed up content delivery, and its configuration helps prevent against DDOS attacks.
We use Demio to prepare for, manage, and host webinars. It enables us to send a handful of webinar-related emails to individuals who register for webinars. Demio can manage registration directly, or its registration forms can be embedded in other services we use; for example, in a Leadpages opt-in form, which can assist us in keeping everything on-brand. Demio also integrates with MailChimp, so that a webinar registrant can opt into further email marketing. When that happens, a registrant’s name and email address are passed along to MailChimp after the webinar.
Disqus serves as the commenting system on our WordPress-powered and Leadpages-powered websites, enabling interaction around our websites’ content. For example, visitors on our blog can comment on our posts. In respect of users’ privacy and to ensure a safe experience, Disqus offers a strong Do Not Track (DNT) framework, among other privacy features. For example, they pseudonymize email and IP addresses of users next to their comments in the moderation panel.
We use Donut to facilitate virtual one-on-one networking opportunities for our students with Premium Membership. More specifically, Donut is a Slack bot that regularly pairs students who opt into a dedicated “Networking” channel in Slack. It has access to the standard minimum amount of information on Slack, via Slack’s “bot” OAuth scope. Donut Technologies Inc. complies with the EU-U.S. Privacy Shield Framework and Swiss-U.S. Privacy Shield Framework.
We use Dropbox to host downloadable files for our students – for example, videos and sound effects files necessary for the completion of the filmmaking course’s Editing and Sound Design modules. Dropbox keeps track of each file’s viewing history. The data associated with each view is anonymous, so students appear in the viewing history as “Guests”.
Facebook | Privacy Principles
We use Facebook’s advertising pixel for prospecting and retargeting, with an attribution window of 28 days (click) and 1 day (view). This allows us to build awareness of our brand, discover people who may be interested in becoming students and/or customers, further engage existing students and/or customers, and share content with people who are interested in independent filmmaking more generally.
Flywheel is our WordPress-managed hosting solution. Like all of the third parties we involve, they share our obsession with security, as we will discuss later. They are SOC2 compliant and EU Privacy Shield certified.
Google Suite serves as the tool we use to manage direct emails through our www.lightsfilmschool.com website. Emails involving said website are logged and delivered using Typeform (see “Typeform” below), then passed along to HelpScout via a forwarding rule.
We also use Google Suite to store internal documents and project assignments our students submit (as a courtesy), as well as create and share project assignment reviews.
Additionally, we make use of Google Analytics to collect information about how visitors use our websites; determine unique visitors and pageviews; establish and continue user sessions; store the types of referrals used by visitors; collect general demographic information, browser types, and device types; monitor eCommerce activity; and the like. So as to facilitate historical analysis, user and event data never expires. It resets on new activity.
We use an EU compliance add-on for a premium WordPress plugin, MonsterInsights, to help with some aspects of GDPR compliance with regards to Google Analytics. It anonymizes IP addresses on all Google Analytics hits, eCommerce hits, and form tracking hits; disables UserID tracking on Google Analytics hits, eCommerce hits, form tracking hits, and the UserID dimension in custom dimensions; enables the ga() compatibility mode; and disables the Demographics and Interests Reports for Remarketing and Advertising tracking on Google Analytics hits (for Google AdWords).
More generally, Google Analytics helps us monitor and evaluate Lights Film School’s websites, features, and services in general. It’s a tool we use as a part of improving our business and offerings.
HelpScout is our help desk software. We use it to manage contacts and correspondence received through our HelpScout knowledge bases (located at faqs.lightsfilmschool.com and help.lfscommunity.com), through the beacon onsite at www.lightsfilmschool.com, and via email. Conversations, productivity, user, happiness, and docs reports help us gauge the effectiveness of our support team and efforts. TLS encryption is supported on all inbound and outbound email. HelpScout is PCI Level I compliant, and certified under the EU/US Privacy Shield and the Swiss/US Privacy Shield.
We use Leadpages to host and create beautiful landing pages and also opt-in forms via an integration with MailChimp, all at our www.lightsfilmschool.com, lightsfilmschool.lpages.co, and extras.lightsfilmschool.com websites. Leadpages integrates with Stripe as a payment gateway, as described below. Built-in analytics help us track page views, form submissions, and conversion rates, so that we can continue to improve our business and offerings. Also, Leadpages integrates with Google Analytics so that we can assess campaign performance.
MailChimp is our marketing automation platform and email marketing service. It’s the solution we use to manage and grow our email lists. A student can opt into our email marketing when they enroll via Teachable; a webinar registrant can opt into our email marketing when they register via Demio; and a visitor can opt into our email marketing via a double opt-in signup form. From time to time, our email lists form custom audiences for our social media ads. We also use MailChimp to manage a handful of transactional emails with students. MailChimp integrates with Google Analytics so that we can assess campaign performance.
We use OptinMonster to add beautiful, minimalist bars to our websites, providing announcements, notifications, offers, and a cookie banner. It also assists with lead generation on our websites. For example, its forms can integrate with MailChimp, allowing us to invite students, other customers, and visitors to become email subscribers. The software’s use of global interaction and success cookies helps us ensure a positive user experience by preventing prompts from showing to users again and again. Currently, our global success cookies expire after 365 days. OptinMonster also integrates with Google Analytics so that we can assess campaign performance.
PayPal integrates with Teachable, the platform and service powering our courses.lightsfilmschool.com website, as a payment gateway. If you opt to pay via PayPal during checkout, then PayPal is the platform that processes your payment. Consequently, aside from the IP address associated with your first (and future) sign-ins, we do not store your payment method details on our websites. PayPal is an industry standard payment gateway, certified as a PCI Level 1 service provider.
Slack is a messaging platform that serves as the backbone of some of Lights Film School’s optional community features included with Premium Membership. For example, The Cantina, the Networking area, and the Alumni Lounge area. Students can control how much of their information this messaging platform makes public by adjusting the settings to their liking.
Stripe integrates with Teachable, the platform and service powering our courses.lightsfilmschool.com website, as a payment gateway, and also with Leadpages as a payment gateway. If you pay via credit or debit card (as opposed to PayPal) on any of our websites, then Stripe is the platform that processes your payment. Consequently, aside from the IP address associated with your order and your first (and future) sign-ins in the case of Teachable, we do not store your payment method details on our websites. Stripe is an industry standard payment gateway, certified as a PCI Level 1 service provider.
SurveyMonkey is survey software that stores (1) new students’ registration details; (2) feedback to various Lights Film School events for students; and (3) answers to other surveys, such as those included in our marketing emails.
We now use Typeform for all three of these purposes, but SurveyMonkey’s historic records are kept on-file indefinitely for reference, to help with customer support as well as to identify trends over the longterm that can help us improve our business and offerings.
SurveyMonkey logs survey respondents’ IP addresses. We occasionally use this information in context of (1), as an additional cross-check in our fraud prevention efforts.
Teachable, a leading online course development platform and service, hosts and powers our primary students-only membership website located at courses.lightsfilmschool.com. It integrates with Stripe and PayPal – both industry standard, PCI-compliant payment gateways – as described above. It also integrates with MailChimp, as described above. On its own, Teachable facilitates account-essential transactional emails for students, as well as occasional marketing emails for students who opt into email marketing when they enroll.
Additionally, Teachable integrates with Google Analytics, so that real-world data can inform how we develop and refine the Lights Film School educational experience. Insights gleaned from Google Analytics contribute to those gleaned from Teachable’s built-in analytics, which track students’ progress through their course(s).
Typeform powers the contact form experience on our www.lightsfilmschool.com website. The information a visitor shares in their message is passed to Typeform, which triggers an email to Google Suite, which is then passed along to HelpScout via a forwarding rule.
We also use Typeform to gather and store (1) new students’ registration details, which help us correctly configure new accounts in Teachable, serve as an additional cross-check in our fraud prevention efforts, and personalize the onboarding experience; (2) feedback to various Lights Film School events for students; and (3) answers to other surveys, such as those included in our marketing emails.
Typeform also helps us collect students’ mailing addresses when they request that a physical course completion certificate be mailed to an address they provide. Information is kept on-file indefinitely for reference, to help with customer support as well as to identify trends over the longterm that can help us improve our business and offerings.
Regarding (1) above, the registration details we require are: first name; last name; whether or not the new student paid the enrollment fee, and if not, the full name of the individual who did, along with their relationship to the new student; the new student’s email address for account-essential correspondence; how they heard about Lights Film School; their passion for filmmaking and what they hope to gain from their Lights Film School studies; and the country they live in. New students are also invited to share feedback to the website experience.
Typeforms are anonymous by default. Their servers are compliant with security and privacy standards, including the Privacy Shield. Information is encrypted in-transit, end-to-end. Additionally, Typeform is compliant with the Payment Card Industry’s Data Security Standards (PCI DSS 3.2).
Wistia hosts the videos we’ve made for embedding on our websites. Wistia tracks how you interact with them: for example, how much of a video you watch, at what points in a video you pause or rewind, and the like. In some videos, we pause the video and request that you provide your email address or name. You are under no obligation to provide this information, but we reserve the right to limit certain videos to identified users. Wistia aggregates the data collected through the videos here, including names and email addresses, and provides it to us. Wistia does not sell or provide the data it collects to third parties.
Where and when is information collected?
Lights Film School will collect the personal information that you submit to us. We also may receive information about you from third parties, as described above.
When a student enrolls in Lights Film School for the first time, our team either creates or approves a new membership account on courses.lightsfilmschool.com. If you wish to use this account, you will be required to provide us with information, including that required by the new student registration form (see “Typeform” above). In addition, we may obtain your personal information from you if you identify yourself to us by sending us an email with questions or comments. Extra services are available on extras.lightsfilmschool.com – for example, additional assignment reviews – the use of which also requires relevant information.
We offer a personalized course completion certificate to students who complete the course and all five assignments. If a qualifying student wishes to receive their certificate via the post, we ask them for a mailing address so that we know where to send it.
Cookies and Web Beacons
Like many websites, we use “cookies” on Lights Film School’s websites to collect information that helps us run, monitor, evaluate, grow, and ultimately improve our business and offerings. A cookie is a small data file that can be placed on your computer or mobile device in order to identify your browser and activities on our websites. Examples include Facebook’s advertising pixel and Google Analytics’ data, as described above.
You do not have to accept cookies in order to interact with Lights Film School’s websites, features, and services, although this may lead to a degraded experience. While most browsers are configured to accept cookies out of the box, it is possible to change your browser settings to notify you when you receive a cookie or even to reject cookies generally. Similarly, some third party advertising networks, like Google, allow you to opt out of or customize your preferences in relation to your internet browsing.
To learn more about how you can control privacy settings and cookie management, click the link below pertaining to your web browser:
In addition to cookies, we use “web beacons”, a web technology used to help track website or email usage information, that can be embedded on web pages and in emails. For example, web beacons in our marketing emails enable open tracking, which helps give us a general overview of our subscriber engagement. These can be blocked if you or your email client chooses not to display images.
Log Files and Other Usage Statistics
Lights Film School’s Flywheel servers automatically record information including access logs, PHP error logs, and slow error logs, all of which is retained for 7 days. We also track usage statistics on both our WordPress-powered websites and our Teachable-powered one, such as when a student last logged into their account (aiding our support and troubleshooting efforts) and their progress through the course (making it easy for them to pick up where they left off every time they login).
Does Lights Film School collect information from children?
We are committed to protecting the privacy of children. Lights Film School’s websites, features, and services are not designed for or directed to children under the age of 18, since some of our teaching materials include films that are unrated and/or have received an “R” rating from the Motion Picture Association of America. In fact, per our Terms and Conditions, a student must be 18 years of age or older at the time of enrollment, unless parent or guardian approval is clearly provided. If a parent or guardian becomes aware that his or her child has provided us with information without their consent, then he or she should contact us.
What does Lights Film School do with the information it collects from you?
In general, we use the information collected (1) to provide you with the best possible experience interacting with us and when using Lights Film School’s websites, features, and services; (2) to help us understand who engages with us; (3) to enable our advertising in some cases, including using your email to send information to you about Lights Film School if you have opted into our marketing emails; (4) to contact students and customers for customer service, billing, and essential account operation purposes (such as membership account password resets); and (5) for internal operations, including the growth, monitoring, and evaluation of our business.
Laws and Legal Rights
Lights Film School cooperates with government and law enforcement officials. We may disclose your information if we believe in good faith that we are required to do so in order to facilitate valid legal processes, protect our property and rights, protect the safety of the public or any person, or to prevent or stop activity we may consider to be illegal or unethical or at risk of becoming so. In short, we’re committed to protecting our community and upholding the rule of law!
Does Lights Film School disclose information to other third parties?
Could my information be sent to other countries?
Lights Media Collective LLC is an LLC formed in the United States. Information collected via our websites, or through direct interactions with you, may be transferred from time to time to authorized team members, or to third parties, located throughout the world, and may be viewed anywhere in the world, including countries that may not have laws of general applicability regulating the use and transfer of such data. To the fullest extent allowed by applicable law, by using any of our websites, features, and services, you voluntarily consent to the trans-border transfer of such information. For more information about transfers in relation to third party services we use, please see their Privacy Policies, linked above.
Is the information Lights Film School collects secure?
We go to great lengths to ensure that your information is safe and secure. For example, Flywheel, our WordPress-managed hosting solution, manages security at both the site and server level, proactively monitoring for malware and ensuring that all data is encrypted at rest, in transit, as well as across their hosting platform. Meanwhile, Cloudflare’s Performance and Security Services work in conjunction to reduce latency of websites, mobile applications, and APIs end-to-end, while protecting against DDoS attack, abusive bots, and data breach.
SSL is included on all of our websites. For our WordPress-powered websites, strong passwords are required by our user management systems, logins are limited to prevent brute force attacks, core files are locked down, intelligent IP blocking preempts potential attacks, and our firewall service adds an extra layer of protection against DDoS, RPC-XML, and SQL injection attacks. Additionally, strong passwords are also in place with our third party accounts, as is two-step verification in many cases. These third party services – all of which claim GDPR-compliance – go to great lengths to ensure security themselves, as suggested in several instances above.
To top it all off, we regularly monitor and ensure that both WordPress and our WordPress-powered websites’ plugins are up-to-date, thereby preventing vulnerabilities, and we conduct routine manual reviews of all of our user management systems to ensure no unauthorized access. We do not store your payment method details on our websites (aside from the billing address and IP address, depending on the payment gateway you use to checkout).
However, neither people nor security systems are foolproof, including encryption systems – this is the internet, after all. While we’re zealous about security and use reasonable efforts to protect your information, we cannot guarantee its absolute security. We will make any legally-required disclosures of any breach of the security, confidentiality, or integrity of your sensitive information via email and/or conspicuous posting on our website(s), as expediently as possible and without unreasonable delay.
What choices do I have with regards to the use of personal information?
You’re welcome to contact us in order to (1) update, correct, or obtain your personal information, (2) change your Lights Film School communication preferences, or (3) delete your personally identifiable information from our systems. Except where otherwise described, personal information in our systems does not expire so as to ensure a stellar customer support experience. For example, we sometimes have lapsed students from years ago contact us to resume their studies. Our records also assist in other business operation, evaluation, growth, and improvement efforts, such as fraud prevention.
Should you contact us to update, correct, obtain, change, or delete your personal information, we will make commercially reasonable efforts to honor your request. Of course, promptly after receiving your request, all personal information stored in databases we actively use, and other readily searchable media will be updated, corrected, exported and delivered to you, changed, or deleted as appropriate, as soon as and to the extent reasonably and technically practicable.
Who can I contact with privacy questions?
The Lights Film School team has done its very best to explain our commitment and approach to privacy here, but should you have any comments, questions, concerns, or requests at all, we’re here for you. Please go ahead and contact us via email or by post:
Lights Media Collective LLC
228 Park Ave S #72782
New York NY 10003-1502