Privacy Policy

Controller and contact

Rush is a brand and service operated by EVRYONE LTD, a company registered in England and Wales with company number 17019176. Our registered office is 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. “Rush”, “we”, “us” and “our” refer to that company. Contact us at support@ticket.rush.film for service, legal, privacy and rights requests.

EVRYONE LTD is the controller for the personal information described in this notice. Its ICO data-protection fee register reference is ZC182890. Registration is not ICO certification or endorsement of Rush. We apply UK data-protection law, including the UK GDPR and Data Protection Act 2018, and other applicable data-protection laws where required.

Account and security information

We use your email, account name, profile details, sign-in and verification records, linked sign-in identifiers, session information, device and network information, and security or fraud signals. A social sign-in supplies the identity details authorised in that sign-in flow; it does not give us unrestricted access to your social account.

We use this information to create and authenticate accounts, maintain sessions, deliver account communications, prevent abuse and investigate incidents. The bases are performing our contract, our legitimate interests in a secure and reliable service, and legal obligations where applicable. Optional profile information is used according to the choices you make.

Productions, uploads and AI processing

Rush processes prompts, scripts, briefs, reference images, uploaded video and audio, generated material, scene and shot settings, production history, edits, exports and activity records. These may contain personal information about you or others. Only submit material you have a lawful basis and the necessary permissions to use.

We process material to provide requested generation, editing, storage, delivery, moderation, troubleshooting and support. Relevant content and instructions may be processed by generation and other operational service providers. This is not a representation that every generation request is immediately discarded or processed only in the UK. The contract and legitimate interests in operating and securing Rush are the principal bases; additional conditions apply to sensitive information.

Permissions to produce a film do not grant an unrelated right to train general-purpose models on a person’s licensed identity. Any materially different use of personal information requires an appropriate lawful basis, transparency and any legally required consent. Do not assume that AI output is accurate information about a real person.

Faces, voices and Actor Programme

Actor applications include photographs, voice samples, selected profile attributes, licensing choices, a legal name and acceptance record, and private verification material required by the workflow. Authorised reviewers use verification material to assess identity, eligibility, rights and consent. Verification video is not a public casting asset.

Images and voices are personal data when they identify someone. They are not automatically special-category biometric data merely because they are photographs or recordings. Biometric processing for unique identification, and other special-category processing, needs an applicable additional legal condition. The actor workflow records separate explicit consents for the processing described in the personal agreement; it does not authorise an undisclosed general face-recognition database.

Approved profile and preview information can be shown in Casting. References are processed to deliver uses within the recorded licence, restrictions and voice permissions. You can use Actor Programme to withdraw an application or stop future licensing and can contact us separately about privacy rights. Withdrawal does not make earlier lawful processing unlawful or guarantee recall of every film already lawfully distributed. Minimal agreement and transaction records may still be needed for legal obligations or claims.

Creator Partners and referrals

Applications use your account details, country, biography, portfolio, public social handles or profile links, declared follower counts, supporting work and review history. Reviewers may inspect the public profiles and work you provide. We do not need your social password for that assessment.

We use referral links, attribution information, qualifying payment records, commission and reversal records, and withdrawal details to administer referrals and prevent abuse. Application assessment and programme administration use contract or steps taken at your request before a contract, and legitimate interests in a fair programme. Tax, payment and compliance records may be processed to meet legal obligations. Marketing or a separate public campaign use needs its own appropriate basis and notice.

Billing, earnings and payments

We use plan and subscription details, credit grants and reservations, quotes, accepted activity receipts, charges, invoices, payment references, billing information and transaction status. Payment services handle payment credentials through their checkout flows; do not send full card details or card security codes to Rush support.

Earnings and withdrawals can require recipient, bank or payout information, identity checks and tax or compliance details. We use these to fulfil transactions and contracts, keep accurate records, reconcile failures, prevent fraud and meet legal obligations. Only information needed for the relevant payment, review or investigation should be provided.

Support chat and verified lookups

Support processes your messages, attachments, contact information, conversation history and the account context you authorise. The chat service and an automated assistant may process those messages to answer questions and route support. Human staff may review conversations to resolve requests or investigate service and security issues.

For generation, billing and other private account queries, we require the account email and an ownership-verification step. Email alone is not proof of ownership. Authorised lookups can return the supported status, usage and payment information needed for your query. Disconnecting an identity or closing chat does not automatically erase an existing support record.

Do not include passwords, one-time sign-in codes, full payment credentials or unnecessary sensitive material. The bases are providing support under our contract and legitimate interests in resolving problems, improving service reliability and preventing abuse; legal obligations can also apply.

Public films, profiles and Recreate

When you publish, the selected film, artwork, synopsis, credits, public profile and related release details become available to other people. Public content can be viewed, shared or copied by others outside our control. Publishing a preview does not automatically make private production sources or verification recordings public.

Optional Recreate permission is separate and defaults to Not allowed. If you allow it for an eligible Auto film, Rush can prepare and offer a reusable brief associated with it. Prompt unlock and reuse records are retained to recognise a purchase and avoid charging the same account the same prompt fee again. Do not include private information or unlicensed personal identities in material you authorise for that purpose.

Device storage and usage information

Rush uses cookies and browser storage for sign-in, security, preferences, drafts and workflow continuity. Academy lesson completion and lesson notes are saved on the current device where storage is available; they are not a server-synchronised learning record. Shared-device users should use separate browser profiles or clear local site data when appropriate.

We process operational usage, generation timing and failure information, and playback or purchase records needed to provide the service, maintain security and reconcile activity. These purposes use contract or legitimate interests where appropriate. Non-essential cookies or similar technologies require any choice and consent mandated by applicable law. The Cookie Policy explains storage and browser controls.

Optional product analytics

If you allow analytics, Rush records page route categories, visit times, referring website domains, campaign labels, broad device categories, the server-observed IP address, an estimated country and actions such as opening sign-in, submitting an email-code or Google sign-in, opening a studio, requesting creation, starting checkout and applying to a programme. Server-confirmed account creation and request outcomes help us distinguish an attempt from a successful step. We do not include prompts, scripts, email or password fields, sign-in codes, payment details, full referring URLs or account names in this analytics record.

We use an IP location service to estimate the visitor’s country from the server-observed IP address. The IP address is shared with that service for this lookup; the estimate may be inaccurate, especially with VPNs or proxies. Country names and flags are shown with IP addresses in administrator reports.

Optional analytics uses a random browser identifier and a visit identifier. A visit expires after 30 minutes of inactivity; a browser identifier represents a browser, not a verified person. Analytics events are retained for up to 90 days and are available only through administrator reports. Reports cover participating browsers and do not measure every visitor. Your analytics choice is remembered for up to 180 days. You can decline without affecting Rush, or change your choice through Analytics preferences on this notice or the Cookie Policy. Declining stops new events and removes the analytics identifiers from your current browser. We also honour supported Do Not Track and Global Privacy Control signals for this optional collection.

Recipients and international processing

Information may be processed by hosting, storage, generation, authentication, communication, support, payment, analytics or security service providers as needed for the relevant feature, and by authorised staff and professional advisers. Filmmakers or viewers receive only the material made available to them through the relevant public release or licensed workflow. We may disclose necessary information for a legal obligation, rights claim, fraud investigation or a business transfer with appropriate protections.

Processing can take place outside the UK or your country. Where data-protection law restricts a transfer, appropriate safeguards are required, such as adequacy arrangements or approved contractual protections with any necessary supplementary measures. Contact us for information about relevant recipients or transfer safeguards for your use of Rush. We do not describe a fee registration as approval of those transfers.

Retention and deletion

Retention depends on the purpose and the record. Account and production information is retained while needed to provide the requested service, subject to deletion requests and applicable rights. Support and security records may be retained to resolve issues and investigate abuse. Billing, agreement, licence, earnings and audit records may need to remain for tax, accounting, legal obligations, disputes or the proof of a valid permission.

Deletion is not a promise that every record, backup, lawful licence record or third-party copy disappears immediately. We assess the request, remove or de-identify information no longer needed, and restrict retained information to the purpose that justifies keeping it. Contact us for a deletion request or information about the retention applicable to a particular record. Do not rely on the studio as your sole copy of an important film.

Your rights and complaints

Depending on applicable law, you can request access, correction, deletion, restriction or portability of your personal information, object to processing based on legitimate interests, and withdraw consent where that is the basis. Withdrawal does not affect earlier lawful processing. Rights can have legal exceptions; we explain a refusal or limitation where required.

Email support@ticket.rush.film with “Privacy” and describe your request. We may need proportionate identity verification or clarification to protect your account. We respond within the applicable legal period, normally one month, and explain any lawful extension. You can also complain about our handling of personal information using the same contact.

You may complain to the UK Information Commissioner’s Office at ico.org.uk or your relevant supervisory authority. We encourage you to contact us so we can address the issue, without limiting that right. Programme and actor reviews use human review; we do not treat this notice as consent to an undisclosed solely automated decision with legal or similarly significant effects.

Children and changes to this notice

Rush accounts are intended for people aged 16 and over; adult eligibility applies to actor licensing, payouts and relevant programme agreements. Do not submit a child’s identity for an adult licensing programme. Contact us if you believe information has been submitted by or about a child inappropriately.

We update this notice when features or data practices change and identify the effective date. We give additional notice and obtain fresh consent where required for a new purpose. A policy update does not itself expand the permissions in a previously accepted actor agreement.