Four Chambers – Privacy Notice

Last updated July 26, 2026

1. Summary

We take your privacy seriously. We use your data to create the best experience you can have while viewing our site. If we don’t need it, we will delete it. We understand your data is precious and needs to be treated with the utmost respect and privacy. We promise to keep your data safe and secure.

2. What data we hold: visitors

As a site visitor we collect the following information about you:

  • Information about your device and how you use our website.
  • Your IP address.

3. What data we hold: subscribers

As a paid subscriber, we will collect some additional information about you:

  • Your email address.
  • Your password, in an encrypted form.
  • Subscription information, collected from our payment processor partners.
  • If you live in a country where age verification is required by law: your age verification status (a yes/no confirmation that you are over 18), when and how it was completed, and an anonymous reference number from our age verification partner.

4. What we do not hold

We never hold or store the following information:

  • Your unencrypted password.
  • Card information or bank details. These are processed by our third-party payment processors.
  • Your date of birth, identity documents, or any details you provide when verifying your age. These are processed by OneID and are never shared with us.

5. Using your information

References in this section to a basis of processing (e.g. GDPR Art 6(1)(a)) are references to the relevant lawful basis we use to process your data under the General Data Protection Regulation (GDPR).

5.1 Information about your device and how you use our website

We collect information about your device and how you use our website. This may take the form of our own server logs, or information passed to us by Google Analytics when you load our website.

Basis: GDPR Art. 6(1)(f) – “legitimate interests” – this logging information forms part of our business strategy planning.

5.2 Your IP address

We may collect your IP address when you browse and interact with our website.

Basis: GDPR Art. 6(1)(f) – “legitimate interests” – this logging information forms part of our business strategy planning and helps us maintain a secure site for our visitors and subscribers.

5.3 Your email address

When you subscribe to our site, we collect your email address. We use this for various purposes such as: sending you updates, information, invoices and billing information, or for resetting your password.

Basis: GDPR Art. 6(1)(c) – “performance of contract” – we need to collect your email address to authenticate you as a subscriber to our site and to provide you with customer support where needed.

Basis: GDPR Art. 6(1)(f) – “legitimate interests” – this information helps us to keep in contact with you to provide you with relevant updates.

5.4 Your password

Your password is required to authenticate you as a user of our services. We will never store it on our systems in its unencrypted “plaintext” form.

Basis: GDPR Art. 6(1)(c) – “performance of contract” – we need to collect your password to authenticate you as a subscriber to our site.

Basis: GDPR Art. 6(1)(f) – “legitimate interests” – we require you to set a password to ensure that our content is only accessible to paid subscribers.

5.5 Subscription Information

We collect information about our subscribers to link your subscription information collected by our third-party payment providers to your account on our site, to ensure that you are authorised to access paid content.

Basis: GDPR Art. 6(1)(c) – “performance of contract” – we need to collect your subscription information to authenticate you as a subscriber to our site.

Basis: GDPR Art. 6(1)(f) – “legitimate interests” – we need to ensure users are authorised to access paid content to protect our business interests, and that we have the relevant information to resolve disputes and prevent fraud and abuse.

5.6 Age verification status

If you are a subscriber in a country where the law requires us to verify your age (for example, the United Kingdom under the Online Safety Act 2023), we record whether you have been verified as over 18, when and how the check was completed, and an anonymous reference number from our age verification partner, OneID. The verification itself is carried out entirely by OneID – we never see or store the personal details you provide to them, only a yes/no confirmation that you are over 18. A verification is valid for 12 months, after which we will ask you to verify again.

Basis: GDPR Art. 6(1)(c) – “legal obligation” – we are required by law to verify the age of subscribers in certain jurisdictions before providing access to our content.

6. Your rights

You have a number of relevant rights in respect of our processing of your personal data. The relevant rights are:

  • You may request access to your personal data, and information about our processing of it.
  • You may request us to rectify information about you which you think is inaccurate.
  • In some circumstances, you may restrict our processing of your data or request that we delete it.
  • You have the right to object to our processing of the personal data we collect about you when you visit or browse the site.

If you wish to exercise any of these rights, please contact us.

You also have the right to lodge a complaint about our processing with a supervisory authority. In the case of the UK, for example, this would be the Information Commissioner’s Office.

7. Third parties

We use a minimal number of third parties in order to provide an effective service to you.

7.1 Google Analytics

We make use of Google Analytics on our site to collect data about our visitors for technical capacity planning and for business strategy planning.

The privacy policy for Google Analytics can be found here.

You can opt out of data processing by Google Analytics by enabling Google’s “Google Analytics Opt-out Browser Add-on” on your device.

7.2 Epoch

We use Epoch Payment Solutions to process payments on our behalf. This allows us to ensure your payment data is processed by a trusted third-party provider and we never process any of your financial information directly.

The privacy policy for Epoch can be found here.

7.3 Mux

We use Mux as the video streaming platform for our site. Short-form trailers and long-form complete works are both streamed using the Mux platform. When you watch videos on our site, Mux may collect some information about you or your device, such as your IP address and playback data, on our behalf to deliver and improve video streaming.

The privacy policy for Mux can be found here.

7.4 OneID

We use OneID to verify the age of subscribers in countries where this is required by law. OneID is certified under the UK Government’s Digital Identity and Attributes Trust Framework. When you verify your age, any details you provide – such as your date of birth, bank login or mobile number – are processed by OneID and never shared with us. We receive only a yes/no confirmation that you are over 18.

The privacy policy for OneID can be found here.

8. Retention periods

We hold on to the information we collect about you, detailed above, for as long as you have your account, or for as long as is needed to be able to provide the services to you, or (in the case of any contact you have with our customer support) for as long as is necessary to provide support-related reporting and trend analysis.

If reasonably necessary or required to meet legal or regulatory requirements, resolve disputes, prevent fraud and abuse, or enforce our terms and conditions.

9. Changes and updates to this notice

From time to time, we may make changes to this notice to reflect how we are processing your data.

If we make significant changes, we will make this clear on the website, or by some other means of contact such as email.

10. Contact us

If you have any questions regarding your data, please contact us at vex@afourchamberedheart.com.

And also if you have any questions about our products, your order with us or for any other reason, contact us at vex@afourchamberedheart.com.