How we collect, use, store, share and protect personal data — in full, and in line with GDPR, the Irish Data Protection Act 2018 and the ePrivacy Regulations.
Last updated 10 August 2026
MiloFlix (“MiloFlix”, “we”, “us”, “our”) is a social media marketing and content production agency based in Dublin, Ireland, providing video production, photography, and social media management services to businesses across Ireland. This Privacy Policy applies to our website www.miloflix.ie (the “Site”) and explains, in full, how we collect, use, store, share, and protect personal data in accordance with:
By using our Site or submitting your details through our enquiry form, you acknowledge that you have read and understood this policy. If you do not agree with how we handle your data, please do not submit personal information to us.
MiloFlix is the data controller responsible for your personal data collected via this Site.
If you have any questions, concerns, or requests relating to this policy or your personal data, you can contact us using the details above.
We collect personal data in the following categories:
When you complete our “Start your project” enquiry form, we collect:
| Field | Required? | Purpose |
|---|---|---|
| Name | Yes | To identify and address you |
| Email address | Yes | To respond to your enquiry |
| Phone number | No | To contact you by phone, if you provide it |
| Business name | No | To understand your business context |
| Project type (Video production / Social media content / Photography / A mix of the above / Not sure yet) | No | To route your enquiry to the right service area |
| Project details ("Tell us about it") | Yes | To understand and scope your request |
Enquiries submitted through this form go directly to MiloFlix’s founder, Milosz, who aims to respond within one working day.
If you contact us by email, phone, or social media directly (rather than through the form), we will also collect whatever personal data you choose to share with us through those channels (e.g. your name, contact details, and the content of your message).
When you browse the Site, we automatically collect technical and usage data via Google Analytics 4 (GA4), including:
This data is collected only where you have given consent via our cookie banner, except for data that is strictly necessary for the Site to function (see Section 6).
We do not knowingly collect:
We only use your personal data for clearly defined purposes, and never sell it. Specifically:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Responding to your enquiry and discussing your project | Name, email, phone, business, project details | Consent / Steps prior to entering a contract |
| Providing our services if you become a client | Name, email, phone, business, project details, and any further information provided during the engagement | Performance of a contract |
| Understanding Site usage and improving performance | Analytics data (see 3.2) | Consent (analytics cookies) |
| Meeting legal, accounting, and tax obligations | Client billing and contract records | Legal obligation |
| Preventing fraud or misuse of our enquiry form | Submission metadata (e.g. timestamp, general technical data) | Legitimate interest |
We do not use your enquiry data to add you to a marketing or newsletter list. We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on you.
We rely on the following legal bases, depending on the specific processing activity:
Cookies are small text files placed on your device when you visit a website. They allow a site to recognise your device and store certain information.
Strictly necessary cookies — Required for the Site to function properly (e.g. maintaining session state, security). These do not require consent under the ePrivacy Regulations, as they are essential to the service you’ve requested.
Analytics cookies (Google Analytics 4) — Used to understand how visitors use our Site — pages visited, time on page, general engagement patterns. These are only set once you consent via our cookie banner. If you decline, no analytics cookies are set, and no data is sent to Google Analytics for that session.
Analytics cookies (Mux) — Our video player sets a cookie so that Mux, our video host, can count views and measure playback quality. Like the above, it is only set once you consent, and the site’s videos play normally if you decline. The complete list of what we set, with exact names and durations, is in our cookie policy.
Google Analytics may use identifiers to distinguish unique visitors and may share limited data with Google for its own purposes, subject to Google’s privacy policy (https://policies.google.com/privacy) and, where applicable, Google’s EU-U.S. Data Privacy Framework commitments.
You can manage or withdraw cookie consent at any time via:
Please note that blocking strictly necessary cookies may affect the Site’s functionality.
We do not sell, rent, or trade your personal data. We only share data with the following categories of recipients, each acting as a data processor or sub-processor on our instructions:
| Recipient | Purpose | Location |
|---|---|---|
| Web3Forms | Delivery of enquiry form submissions to our inbox | Outside the EEA (see Section 8 on international transfers) |
| Google Analytics | Website analytics | USA (see Section 8 on international transfers) |
| Mux | Video hosting, streaming, and playback analytics | USA (see Section 8 on international transfers) |
| Google Cloud Storage | Hosting of media assets (images, video files) used on the Site | USA / EU depending on configuration |
| Railway | Website hosting infrastructure | Varies by hosting region selected |
| Payload CMS | Content management for the Site | Depends on deployment configuration |
We may also disclose personal data where required to do so by law, regulation, legal process, or governmental request, or where necessary to protect the rights, property, or safety of MiloFlix, our clients, or others.
We do not use any additional third-party advertising, retargeting, or data-broker services on this Site beyond what is listed above. If this changes, we will update this policy accordingly.
Some of our service providers (notably Google) may process personal data on servers located outside the European Economic Area (EEA), including the United States.
Where this occurs, we ensure appropriate safeguards are in place, such as:
You may request further information about these safeguards by contacting us.
We retain personal data only for as long as necessary for the purposes outlined in this policy:
| Data Type | Retention Period |
|---|---|
| Enquiry form submissions (non-converting) | Up to 12 months from the date of submission, then deleted |
| Client records (if you engage our services) | Retained for the duration of the business relationship plus 6 years to meet Irish tax and accounting obligations |
| Analytics data | Retained according to our configured Google Analytics settings (14 months), after which it is automatically deleted or aggregated by Google |
| Email correspondence | Retained as long as reasonably necessary for record-keeping, typically no longer than 24 months |
After the applicable retention period, data is securely deleted or anonymised such that it can no longer be linked to you.
We take appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, including:
No method of transmission or storage is 100% secure, but we take reasonable steps proportionate to the sensitivity of the data involved.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Irish Data Protection Commission within 72 hours as required, and notify affected individuals where the breach is likely to result in a high risk to them.
As a data subject, you have the following rights in relation to your personal data:
To exercise any of these rights, contact us at miloflixie@gmail.com. We will respond within one calendar month, as required under GDPR, and may request proof of identity before processing certain requests.
Irish Data Protection Commission (DPC)
21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
Website: www.dataprotection.ie
Our Site may contain links to third-party websites (e.g. our social media profiles, client websites shown in our portfolio). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies separately.
We do not use your personal data for any form of automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.
We may update this Privacy Policy periodically to reflect changes in our practices, services, or legal requirements. The “Last updated” date at the top of this page will always reflect the most recent revision. Where changes are significant, we will take reasonable steps to bring them to your attention (e.g. a notice on the Site).
We encourage you to review this policy periodically.
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact:
You may also contact the Irish Data Protection Commission directly if you believe your rights have not been respected (see Section 11).
Cookies
We’d like to set analytics cookies so we can see which work people actually watch. Nothing is set until you say yes, and you can change your mind at any time. Read our cookie policy and privacy policy.
Cookies
Choose what you’re happy for us to set. You can come back to this any time from “Cookie settings” in the footer. The detail is in our cookie policy and privacy policy.
Strictly necessary Always on
Remembers the choice you make here, and keeps the site working. It can’t be switched off, and it never tells anyone else you were here.
Analytics
Anonymous stats about which pages get read and how much of a video gets watched, so we know what’s worth making more of. Sets a Mux cookie and, if enabled, Google Analytics.
Marketing
Would let advertising platforms recognise you across sites to measure or target ads. Nothing on this site uses this today — the switch is here so it can’t start without you.