Privacy notice.
A short, honest account of what data we collect, why, and how to get rid of it any time you like.
This notice describes how LeleKai (the festival operator behind lelekaifest.com) handles personal data. It is written in plain language and aligned with the EU General Data Protection Regulation (GDPR).
Who we are.
Data controller: LeleKai · Europe · contact hello@lelekaifest.com
For any data-protection question — access, correction, deletion, complaint — write to privacy@lelekaifest.com. We reply within seven working days.
What we collect.
When you subscribe to the dispatch
- Your email address (required to deliver the dispatch)
- The role you selected (reader, filmmaker, educator, partner) — used only to make future messages more relevant
- Date and time you subscribed
When you visit the site
- Standard web server logs (IP address, browser type, page visited, referrer) — kept for 30 days for security and analytics
- No third-party advertising cookies. No cross-site tracking. No social-media trackers.
Why we use it.
- To send the monthly dispatch — the legal basis is your explicit consent, given when you submit the form
- To run and secure the website — legitimate interest in keeping the site online and safe
- To respond when you write to us — your message and email are kept for as long as we need to answer you
We do not sell, rent, or trade personal data. Ever. We do not use your data to train AI models.
Who helps us.
A small list of trusted processors:
- Resend (United States, with EU Data Processing Addendum) — stores subscriber addresses and sends transactional and marketing email on our behalf. Resend privacy policy.
- Supabase (EU region · Frankfurt) — hosts the submissions database for forms on the site (creator applications, school inquiries, partner inquiries, press inquiries). Row-level security is enabled; access is restricted to our team. Supabase privacy policy.
- Vercel (United States, EU regions used where available) — hosts the website. Vercel privacy policy.
- GoDaddy — domain registrar and DNS host.
What forms collect.
If you submit one of our inquiry forms (newsletter, creator application, school, partner, press, or general contact), we store the information you provide in our Supabase database, including:
- Name and email address
- Any optional links you share (social media, work portfolio)
- Organisation name (where relevant)
- The message you write to us
- Age bracket (creator applications only, optional)
- A one-way hashed version of your IP address (used purely to rate-limit spam — we cannot recover the original IP)
- The page you submitted from, and your browser's user-agent string
- Timestamp of submission
We use this information only to respond to you and, in the case of newsletter signups, to send you the dispatch. Submitting a form opts you in to email communication for that purpose. You can unsubscribe at any time.
These providers operate under contractual obligations that match GDPR standards. We choose them deliberately and keep the list small.
How long we keep it.
- Subscriber data — until you unsubscribe or ask for deletion. We do not auto-purge inactive subscribers; you decide when to leave.
- Email replies and other correspondence — up to 24 months after the last exchange, then deleted.
- Server logs — 30 days, then auto-rotated.
Your rights.
Under the GDPR you have the right to:
- Know what we hold about you
- Ask us to correct or delete it
- Withdraw your consent at any time (without affecting earlier processing)
- Receive a copy of your data in a portable format
- Object to processing based on legitimate interests
- Lodge a complaint with your national data-protection authority (in France that is the CNIL)
One-click unsubscribe: every email we send includes a link that removes you from the list immediately. Or write to privacy@lelekaifest.com.
International transfers.
Our processors may store data in the United States. Where this happens we rely on Standard Contractual Clauses approved by the European Commission, and on the EU-U.S. Data Privacy Framework where applicable.
Cookies and local storage.
We use a tiny number of cookies and one localStorage entry:
cookie_consent— stores your acceptance choice for this banner. Required, no opt-out (otherwise the banner would appear forever).- Vercel-set performance cookies for static asset caching. No tracking.
No marketing or advertising cookies are loaded. If that changes, this page changes first.
Changes to this notice.
If we materially change how we handle data, we will email everyone on the list before the new version takes effect.
← Back to LeleKai