PRIVACY POLICY

Updated as of October 11, 2023

INTRODUCTION

Welcome! Blumhouse Holdings, LLC and/or its affiliates (collectively, “Blumhouse” or “we,” “us,” or “our”) respects your privacy. This Privacy Policy (the “Policy”) explains the collection, use, and sharing of information from or about you, the consumer, and certain choices offered with respect to that information, in connection with your use of this website, its features, related email communications, and any other digital offerings that link to this Privacy Policy (collectively, the “Service”), regardless of how you access it (whether via personal computers, mobile devices or otherwise). Any updates or modifications to this Policy will be posted to the Service and the updated date will be indicated above. For certain aspects of the Service, there may be additional notices about information practices and choices provided to you, which you should read carefully when provided.

By accessing, using, or otherwise interacting with any part of the Service, you acknowledge you have read and understand this Policy, consent to the practices it describes, and agree to the Service’s Terms of Use, which you should review carefully as well. If you do not agree and consent, please discontinue use of the Service.

HIGHLIGHTS 

This is a short summary of some key elements of this Policy, but please review our full policy below. To see the full text, including definitions of capitalized terms, you may click on the links to each section or scroll to the end.  

WHAT MAY WE COLLECT?

We and/or our vendors, consultants, agents, and other service providers acting on our behalf (collectively, “Service Providers”) collect information from and about you in connection with your use of the Service, as described below. Some of this may be considered “Personal Information” (or similar terms) as defined under applicable laws where you reside (collectively “Personal Information”). This may refer to information that identifies you, such as name, email, address, and other information traditionally referred to as “personally identifiable information” (or “PII”). It may also include information which relates to, or could reasonably be linked with, you or (in some cases) your household, but which may not identify you on its own, such as certain information regarding your devices, site usage, interests, and demographics. If information is aggregated or deidentified (in accordance with applicable law), it is no longer considered Personal Information. Certain publicly available data and other information may be excluded from Personal Information under applicable law as well.

Information You Provide.

We and/or our Service Providers may collect certain information, including Personal Information, that you choose to provide directly, such as:

• Contact information (e.g., name, email address) you may provide if you choose to subscribe to our marketing communications.
• Other registration information (e.g., name, email and/or mailing address, phone, social media handle) should you choose to participate in any contests, sweepstakes, or other promotions we may offer (“Promotions”), or any future opportunities to create an account to access certain features of the Service.
• Any contact or other information you may share should you choose to contact us via email, mail, or other means.
• User-generated content (e.g., photos, video, audio, written materials) and/or other information you choose to share when entering any applicable Promotions, participating in any other opportunities to share such content if ever permitted through the Service, or sharing with us on social media. Please keep in mind that such sharing may be public and you should not have any expectations of privacy if you elect to share anything in such manner. Please consult the Terms of Service for other conditions relating to user content and the submission of certain materials to us.
• Certain non-identifying information about your favorite Blumhouse projects, viewing habits, interests, demographics, and other information you may choose to share should you elect to participate in optional surveys or similar features (collectively, “Survey Data”). 

Cookies and Information Collected Automatically.

We and/or our Service Providers may use a variety of technologies that automatically or passively collect certain information about you or your device when you use the Service or certain optional features of the Service (collectively, “Usage Information”), such as:

• Device information such as IP address, device type, client ID, type of browser and/or operating system, browser ID, internet service provider, language preference, and other device or browser settings.
• Usage data related to how you use and navigate the Service such as the pages you visit, content you access, clicks and other actions within the Service, date, and time stamps, whether you open an email, and diagnostic, crash, error, and other reports.
• Geolocation information, such as approximate general location (such as your city) estimated from your IP address.

Usage Information is primarily collected by our Service Providers and processed on an aggregated basis but may constitute Personal Information where applicable.

Technologies used when collecting information automatically may include the following customary methods, depending on the features you access on the Service and the Service Providers involved:

• Cookies, which are small data files stored on your browser or device that may be served by us (“first-party cookies”) or by our Service Providers (“third-party cookies”) and may be “session” or “persistent” cookies.
• Local storage, which similarly stores browser or device data locally and may include so-called “flash cookies”, HTML5 local storage, or browser cache.
• Embedded scripts, which is programming code that may be temporarily downloaded and used by our Service Provider while you are on the Service to collect Usage Information.
• Web beacons are small images which may be used in emails sent by our Service Provider to provide information on the effectiveness of our email campaigns.
• SDKs are blocks of code installed on the Service that may be used by our Service Provider to collect Usage Information for aggregated reporting.

These technologies are used solely for the following types of purposes:

• “Strictly necessary” or “essential” (e.g., essential to the functioning of the Service).
• “Functional” (e.g., to improve functionality, remember settings and preferences, such as disabling a pop up).
• “Performance” or “Analytics” (e.g., to understand general usage patterns on the Service).
• Geolocation cookies allow us to determine your location in order to provide you with information you request.

The above technologies are primarily used by these Service Providers:

Google Analytics, which uses cookies and similar technologies above to collect and analyze aggregated information about use of the Service (such as what pages were viewed and for how long) and report on activities and trends. This helps us improve the user experience and determine site effectiveness. You can learn about Google’s practices by going to google.com/policies/privacy/partners, and opt out of them by downloading the Google Analytics opt-out browser add-on, available at tools.google.com/dlpage/gaoptout. We do not use Google Analytics to identify any individual users or to provide targeted advertising.

We also use Mailchimp as our marketing platform for sending emails, hosting surveys, and storing certain data. They use certain technologies as described above. You may learn more about their practices at https://mailchimp.com/legal/privacy/#3._Privacy_for_Contacts.

More information about our Cookie Policy can be found here.

Information from Other Sources.

We may obtain information about you from other sources, such as:

• Service Providers, such as our analytics and marketing platforms described above or social media vendors.
• Other Sources, such as social media platforms, third party blogs, and other publicly available sources, such as when you post, comment, tag, or otherwise interact with us or our content.
• Business Partners, such as merchandising licensees who may share aggregated analytics.
• Affiliates, such as Blumhouse Television.

Some of this information may be treated as Personal Information we collect under certain circumstances in accordance with applicable law.

A NOTE ABOUT THIRD PARTY SERVICES

The Service may feature functionality offered by, and/or include hyperlinks to, certain Service Providers, Business Partners, and other third parties and their websites, landing pages, social media platforms, applications, portals, or other services and features owned and/or operated by them (collectively, “Third Party Services”). Should you choose to post information on a Third Party Service, it may be viewed publicly, and if it references the Service (e.g., by using a hashtag associated with us in a tweet or status update), your post may be used in connection with the Service. Further, these Third Party Services may collect or receive certain information, which may include Personal Information, about your use of the Service or the Third Party Service (as applicable), including through the use of their cookies, web beacons, and similar technologies as described generally above, direct collection from you, or otherwise. We have no control over these Third Party Services and are not responsible for them or their privacy practices. Any information collected by a Third Party Service will be governed under the terms of its own privacy policy and terms of use. We encourage you to review such policies thoroughly before disclosing any information to them. The inclusion of links to, or functionality by, Third Party Services on our Service in no way constitutes an endorsement of their content, actions, or policies.

HOW MAY WE USE IT?

We may use your information, including Personal Information, for the following types of business and commercial purposes:

• Communications: We may use your contact information and other identifiers to (a) provide you with communications you elect to receive about us, our projects, and any promotions, (b) respond to your requests, feedback, or questions if you reach out to us, and (c) contact you with regard to your use of the Service and, in our discretion, changes to the Service and/or our policies.
• Service Operations: We and/or our Service Providers may use your Usage Information and other aggregated information to ensure that the Service functions properly, to monitor and improve the operation, delivery, and general accessibility on our Service, identify popular areas or features, and otherwise provide, maintain, and improve the Service.
• Research: We may use information such as geolocation information from our marketing platform, Survey Data, and publicly available social media engagement data from Third Party Services and other sources, to help us understand our audience generally. This facilitates our ability to develop and produce the best content and market it effectively.
• Optional Features: When applicable, we may use information to enable you to participate in any future Promotions, user-generated content, or other optional features of the Service that may be made available. Such use in connection with Promotions may include verifying your entry and eligibility, announcing you as the winner, providing any prizes, and such other uses as may be disclosed in the applicable rules governing that Promotion.
• Security, Enforcement, Etc.: We may use information to (a) maintain the safety and security of our Service, (b) to protect the rights and property of Blumhouse and others, (c) to detect, investigate, and prevent security breaches or fraud and other illegal activities, (d) to enforce our Terms of Use and other agreements and resolve disputes, (e) as may be required to comply with our legal obligations, and (f) as may otherwise be permitted by law.

We will retain any Personal Information collected as long as it is needed for the above purposes and in accordance with applicable law.

HOW MAY WE SHARE IT?

We may share the information described above with other parties as follows:

• Service Providers: We may share information with our Service Providers (e.g. analytics, marketing, website, cloud, and other technical service providers, professional services firms, etc.) as needed for business and commercial purposes such as storing data you choose to share, providing marketing communications you opt to receive, generating analytics information for our aggregated use, developing, hosting, delivering, securing, and/or maintaining the Service, providing certain functionalities or features on the Service, or other uses of information as described above. We endeavor to limit the Personal Information we provide to such providers to the minimum needed to deliver the service.
• Corporate Transactions: We may share information with other third parties in connection with corporate transactions (e.g., merger, acquisition, sale, or financing)
• Affiliates: We may share information with our affiliated entities.
• Law Enforcement: We may share information with law enforcement, certain Service Providers providing investigative or other relevant services, rights holders, or others when it is necessary for us to comply with applicable law, legal process, or government requests, to respond to legal claims, or to protect our rights or the property or personal safety of Blumhouse, its employees and contractors, licensors, licensees, other third parties, or the public.
• Promotions: We may share with sponsors and other promotional partners if you consent to do so when entering any Promotion, as well as with the public in accordance with the appliable rules and applicable law (such as winners' lists).
• Consent, etc.: We may otherwise share information about you with third parties for any other purpose properly disclosed to you (as may be required pursuant to applicable law), at your consent or direction, or as may be otherwise permitted by law.
• Aggregate/Deidentified: We may share aggregated and/or deidentified information with distributors and other licensees, licensors, business partners, and other third parties.

Information shared with third parties may be used as described in their respective privacy policies. Some of this information may be deemed Personal Information. Please rest assured we do not sell, trade, or license Personal Information for direct marketing purposes, and would not do so in the future without your consent in accordance with applicable law.

WHAT CHOICES AND CONTROLS DO YOU HAVE?

• Communications: You may elect to unsubscribe from promotional communications at any time by following the instructions in any marketing email you get from us. Please note that your opt out is limited to the email address used and will not affect subsequent subscriptions or non-promotional communications, such as replies to any communications from you or any notifications we may send regarding changes to this Privacy Policy or Terms of Service.
• Registration Data: Should we ever offer you the opportunity to create an account to access certain features, it may include functionality allowing you to view, update, and/or edit the registration data you provide.
• Cookies: You may be able to exercise certain controls through the settings available to you through your web browser or device or certain third-party browser extensions. If you elect to reject certain cookies, please note that you may not be able to take full advantage of all of the features and functions of the Service. You may also learn how to opt out of Google Analytics using the link provided above.
• Do Not Track: Certain web browsers may allow you to send “Do Not Track” requests. We do not currently take actions to respond to Do Not Track signals because there is no current industry standard concerning what, if anything, websites should do when they receive such signals. We continue to review new technologies and may adopt a standard if and when one is created. More information about “Do Not Track” is available at https://allaboutdnt.com//.

YOUR CALIFORNIA PRIVACY RIGHTS 

CCPA

If you are a California resident, then under the California Consumer Privacy Act of 2018 and its implementing regulations (collectively, as it may be amended, “CCPA”), California law provides you with specific rights regarding your Personal Information (as defined under the CCPA). These involve information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to, directly or indirectly, a particular consumer or household, subject to certain exclusions such as certain publicly available, aggregated, or deidentified information, and with certain exemptions such as information collected in an employment/contractor or business-to-business context. These rights include:

(A) The right to know what personal information the business has collected about the consumer, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom the business discloses personal information, and the specific pieces of personal information the business has collected about the consumer;

(B) The right to delete personal information that the business has collected from the consumer, subject to certain exceptions;

(C) The right to correct inaccurate personal information that a business maintains about a consumer;

(D) If the business sells or shares personal information, the right to opt-out of the sale or sharing of their personal information by the business; (Blumhouse does not sell personal information.)

(E) If the business uses or discloses sensitive personal information for reasons other than those set forth in section 7027, subsection (lm), the right to limit the use or disclosure of sensitive personal information by the business; (Blumhouse does not use or disclose sensitive personal information for such other reasons) and

(F) The right not to receive discriminatory treatment by the business for the exercise of privacy rights conferred by the CCPA, including an employee’s, applicant’s, or independent contractor’s right not to be retaliated against for the exercise of their CCPA rights.

Requests to Know or Delete

If you are a California consumer, you or your authorized agent may exercise these rights or request information about the Personal Information we have collected about you in the prior 12 months (as described under (a) above) or to request that we delete your information (as described under (b) above) by contacting us via the form provided here or by mail to Blumhouse Holdings, LLC, 2401 Beverly Blvd., Los Angeles, CA 90057, Attn: Privacy.   In the request, please specify which right(s) you are seeking to exercise and the scope of the request. In accordance with the CCPA, we may require additional information to verify your identity (or to verify that your authorized agent has the authority to make the request on your behalf) before responding to a CCPA rights request. If we are unable to so verify, we may deny your requests. We will confirm receipt and respond to all verified requests in accordance with applicable timelines required by the CCPA.

Disclosures

For purposes of California consumers, please see the following disclosures regarding how we (including our Service Providers on our behalf) may have collected, used, and disclosed your Personal Information collected in the previous 12 months in accordance with the CCPA. This will depend on how you have interacted with us and other factors. Note: though the Service has not been operational prior to the effective date of this Privacy Policy (which coincides with its launch date), we will describe categories of Personal Information enumerated in the CCPA which may have been collected by prior means in the prior 12 months, and indicate where practices are likely to change. 

The following categories of Personal Information enumerated in the CCPA may have been collected in the past 12 months from the following potential sources (as such information and sources may be more fully described in the “What May We Collect?” section above):

• Identifiers, such as your name, email, mailing address, and similar identifiers.
  • Sources: We may have collected identifiers from: You (e.g., through direct communications), Service Providers, (e.g., social media vendors), Other Sources (e.g., social media), Business Partners (e.g., licensees), Affiliates.
• Legally Protected Characteristics, such as age, gender, marital status.
  • Sources: Other Sources (e.g., social media), Service Providers, You (e.g., through direct communications).
• Commercial information, such as purchasing histories or tendencies or consumer preferences.
  • Sources: Business Partners (e.g., licensees), Other Sources (e.g., social media), Affiliates, You (e.g., through direct communications).
• Audio, electronic, visual, or other similar information (e.g., in any user-generated content)
  • Sources: Other Sources (e.g., social media), Affiliates, You (e.g., through direct communications).
• Professional or employment-related information (e.g., employment status or other information shared on social media)
  • Sources: Other Sources (e.g., social media), You (e.g., through direct communications).

These additional categories and sources may apply to information collected in the future:

• Identifiers, such as your IP address
  • Sources: Automatically, Service Providers
• Internet or other electronic network activity, such as Usage Information as described above.
  • Sources: Automatically, Service Providers
• Geolocation data, such as approximate general location estimated from your IP address
  • Sources: Automatically, Service Providers

Purposes:

In the past 12 months, any of the above categories of Personal Information collected may have been used for certain of the business and commercial purposes described in the “How May We Use It?” section above, such as Research (e.g., understanding our audience), Communications (e.g., to respond to direct requests from you), Optional Features (e.g., participation in certain activities on social media pages), and Security/Enforcement. In the future, we may use it for additional purposes such as Service Operations, and additional uses within the categories above.

Sharing:

In the past 12 months, any of the above categories of Personal Information collected may have been disclosed for business and commercial purposes described in the “How May We Share It?” section above, including Service Providers (e.g., our vendors performing services for us), Affiliates, and Law Enforcement/compliance. Future additional categories of disclosures may include the sharing of Identifiers and other information as may be required when you enter Promotions.

Note about CCPA: The above reflects our good faith understanding of the law and our data practices as of the date posted above, but the CCPA is a new law and there remain differing interpretations of it and its draft and implementing regulations.  Accordingly, we may update information in this and other notices regarding our data practices and your rights, modify our methods for responding to your requests, and/or supplement our response to your requests, as we continue to develop our compliance program to reflect the evolution of the law and our understanding of how it relates to our data practices.

“Shine the Light” Law

California’s “Shine the Light” law (California Civil Code Section 1798.83) permits California residents to request certain details about how certain types of their information are shared with third parties for such third parties’ own direct marketing purposes. We do not share such information in such manner, but should we ever do so in the future, we will provide California customers with such information upon request or permit them to opt in to, or opt out of, this type of sharing.

CHILDREN/MINORS

The Service is not directed to children under eighteen (18) years of age, who are prohibited from using the Service per our Terms of Use. Accordingly, we do not knowingly collect any Personal Information from them. If you believe we may have collected any from your child on the Service, please contact us via the form provided here and we will make reasonable efforts to delete it from our records, when required by law.

SECURITY

We take commercially reasonable steps to help protect your Personal Information against unauthorized access, disclosure, misuse, or loss. However, no data transmission or storage can be guaranteed to be 100% secure. Therefore, we cannot ensure or warrant the security of any information collected through the Service.

UPDATES/MODIFICATIONS

From time to time, we may change this Privacy Policy to accommodate new technologies, industry practices, regulatory requirements, or for other purposes. We will provide notice to you if these changes are material and, if required by applicable law, we will obtain your consent. Notice may be provided by posting notice of such changes on the Service, by email to you at the last email address you provided us (if any), or by other means consistent with applicable law.

CONTACT US

If you have any questions about this Privacy Policy, you may contact us via the form provided here. If you would prefer to reach out by mail, please send a letter to: Blumhouse Holdings, LLC, 2401 Beverly Blvd., Los Angeles, CA 90057, Attn: Privacy.