Who controls the data
The Max Powers is the controller for information submitted through this website. Privacy requests can be made through the Email route in Find Me. Production contact and legal identity details must be published before deployment.
What the site processes
- Adult-entry acknowledgement and optional analytics preference.
- Minimal Book Me selection: service, tier, contact channel, age acknowledgement, terms version and explicit sensitive-data consent.
- Minimal Wardrobe selection: item, tier, supported destination country, contact channel and agreement versions.
- Verified editing identity, purchases, token ledger, projects, approved structured briefs, temporary intake originals and protected delivery metadata.
- Financial events, configuration changes and immutable reason-coded admin audit records.
What is deliberately excluded
Analytics never receives typed briefs, handles, addresses, payment names, upload links, delivery links or message contents. This website does not host explicit footage or delivery media. Detailed adult briefs and full shipping addresses move to the selected private channel only after an initial request.
Purposes and lawful bases
- Contract steps and service delivery for requested bookings, editing work, credits and wardrobe quotes.
- Legitimate interests for service security, fraud prevention, operational audit and aggregated performance measurement where those interests do not override individual rights.
- Legal obligations for financial records and lawful requests.
- Separate, explicit and unticked consent where a selection may reveal special-category sexual-life information. This consent is versioned and withdrawable.
Analytics choice
Optional visitor analytics is off by default and retained as a preference for six months. Before consent, journey measurement exists only in memory for the continuous page session and creates no persistent visitor identity. Consent can be changed from Privacy settings in every public footer. Withdrawing it removes the local analytics visitor identifier.
Storage and retention
- Nonfinancial Book Me and Wardrobe request records: 12 months.
- Editing tokens: token-lot and financial records follow the stated token policy and applicable accounting retention.
- Original intake files: application-encrypted temporary R2 storage until confirmed PC receipt or 30 days, whichever comes first.
- Approved structured briefs: encrypted D1 storage and deletion 30 days after delivery.
- Protected delivery metadata and links: expiry after 30 days.
- Financial and immutable audit records: conservative six-year default, configurable to the owner legal form and accountant guidance.
- Workers Analytics Engine reporting is treated as a rolling three-month operating window.
Processors and transfers
Production may use Cloudflare Pages, Access, D1, R2, Turnstile and Analytics Engine; Revolut Merchant and PayPal for payment; and an approved email provider for operational notifications. Their final production configuration, locations and contractual safeguards must be recorded before deployment.
Your controls
- Request access, correction, deletion, restriction, portability or objection where applicable.
- Withdraw optional analytics or special-category consent without affecting earlier lawful processing.
- Request account deletion through the protected portal or direct Email contact.
- Complain to the UK Information Commissioner if a concern is not resolved.
Security and incidents
Mutations require validation, origin and CSRF controls, rate limits, idempotency and audit. Production secrets are not shipped to the browser. No internet service can promise absolute security; a confirmed material incident will be handled under applicable notification duties.