Velvet Frame Pte. Ltd. (“we”, “us”, “our”) operates mdmfilmreview.pro (the “Site”), an independent editorial publication devoted to Jerry Ciccoritti’s film Million Dollar Murder (also marketed as Murder in the Hamptons). This privacy policy explains what personal data we may process when you read our review, browse stills and cast notes, follow outbound links, or otherwise interact with the Site. We have written it in plain language because transparency matters even on a small, editorial website. If anything here is unclear, you may reach us at [email protected] or through our contact page.

Who is responsible for your data

The data controller for personal data processed in connection with the Site is Velvet Frame Pte. Ltd., a private company limited by shares incorporated in Singapore. Our registered office is 162 Robinson Road, #11-08, The Robinson, Singapore 068913. We publish under the editorial name Velvet Frame, which is a trade presentation of our review desk rather than a separate legal entity. When this policy refers to “Velvet Frame”, we mean Velvet Frame Pte. Ltd. in its capacity as publisher of the Site.

We are not a streaming service, a film distributor, or an Amazon storefront. We do not sell tickets, process rental payments, or operate user accounts. Our role is limited to criticism, context, and curated links. That narrow scope shapes what data we actually see: mostly technical signals generated by your browser and hosting infrastructure, plus a few optional items stored locally on your device.

Scope of this policy

This policy applies to the Site and to any subpages served from mdmfilmreview.pro, including the review homepage, about and contact pages, legal documents, and the purchases information page. It does not govern third-party websites you reach after leaving us, such as Amazon, Google, or social platforms. Those services maintain their own privacy policies, and you should read them before you sign in, purchase, or consent to their tracking.

If we materially change how we process personal data, we will update the “Last updated” date at the top of this page and, where appropriate, post a concise notice on the Site. Continued use after an update constitutes acceptance of the revised policy, except where applicable law requires a different form of consent.

What personal data we collect

We collect and process only a modest amount of information. We do not operate a newsletter, a comment section with login, or a checkout flow on the Site itself.

Browser local storage

The Site uses your browser’s local storage — not traditional HTTP cookies set by our origin — for two specific purposes:

• vf-cookies. When you respond to the cookie notice, we store your choice (“accepted” or “declined”) under the key vf-cookies. This prevents the banner from reappearing on every visit and records whether you have agreed to optional storage. The value remains on your device until you clear site data or change your choice.
• vf-poll. On the review page, you may vote in a simple poll about whether the film’s ending surprised you. If you have not declined optional storage, your selection is saved locally as vf-poll so the page can reflect your vote on return visits. We do not transmit poll answers to our servers; they never leave your browser unless you later choose to tell us about your opinion by email.

Because these items live in local storage, they are not automatically sent with each HTTP request. Our server-side logs therefore do not contain your poll answer or cookie-banner preference unless you separately communicate that information to us.

Server and security logs

Like most websites, the Site is served from cloud infrastructure. Hosted on secure cloud infrastructure in the Asia-Pacific region (Singapore). Our hosting provider and any content delivery layer in front of it may automatically record technical data when you request a page or asset. Typical log fields include your IP address, date and time of access, requested URL, HTTP method, response status code, referrer URL, user agent string, and approximate transfer size.

We use these logs to keep the Site available, diagnose misconfiguration, detect abusive traffic patterns, and understand aggregate readership trends. We do not use server logs to build individual marketing profiles, and we do not combine log data with poll answers stored in your browser.

Information you choose to send us

If you email us or use the details on our contact page, we receive whatever you include: typically your email address, your name if you provide it, and the substance of your message. We do not require you to create an account to correspond with the desk. Please do not send sensitive personal data unless it is necessary for your inquiry; we are equipped to handle editorial correspondence, not medical or financial records.

What we do not collect on the Site

We do not collect payment card numbers, government identifiers, precise geolocation from device sensors, or advertising identifiers through our own scripts. We do not run social login, behavioral retargeting pixels, or analytics dashboards that fingerprint individual readers across sessions. If that changes in the future, we will update this policy and the cookie policy before deploying new tracking.

Legal bases for processing

Although the Site serves a global audience, our controller entity is in Singapore and we look to the Personal Data Protection Act 2012 (“PDPA”) as our primary compliance frame. Depending on context, we rely on the following bases:

• Legitimate interests. We process server logs and security signals to operate, protect, and improve the Site. Our interest is keeping an editorial publication online without undue downtime or abuse. We balance that interest against your privacy by limiting retention, restricting access, and avoiding profiling.
• Consent. Optional local storage for the poll depends on your cookie choice. If you decline optional storage, we instruct the Site not to save vf-poll. Essential remembrance of your banner decision uses local storage because it is strictly necessary to respect the choice you already expressed.
• Contractual or pre-contractual steps. If you contact us about a editorial matter, licensing question, or correction, we process your message to respond. That processing is necessary to take steps at your request before any formal agreement.
• Legal obligation. We may retain or disclose information where Singapore law, court order, or lawful request by authorities requires it. We will narrow disclosures to what is legally compelled.

Where other jurisdictions grant additional legal bases — for example, “legitimate interests” under UK GDPR or “performance of a contract” under EU GDPR — we map our practices to the closest equivalent basis and honor mandatory local rights.

How we use personal data

We use the categories described above for specific, limited purposes:

• Delivering pages, images, stylesheets, and scripts you request;
• Remembering your cookie and optional poll preferences locally;
• Responding to reader mail about factual corrections, typos, or press inquiries;
• Protecting the Site from automated scraping that degrades performance for others;
• Maintaining internal records of correspondence where a thread continues over time;
• Complying with applicable law and enforcing our terms of use.

We do not sell personal data. We do not rent mailing lists derived from server logs. We do not use your poll vote for automated decision-making with legal or similarly significant effects.

Google Fonts

The Site’s typography is loaded from Google Fonts. When your browser requests font files, Google may receive your IP address, user agent, referrer, and the fact that you visited a page on mdmfilmreview.pro. Google processes that data under its own policies as a separate controller or processor depending on the service configuration. We selected Google Fonts for reliable delivery of Cormorant Garamond and Outfit across devices; we do not receive a user-level report from Google listing your visits. If you prefer to block these requests, browser extensions and network filters can prevent font downloads, though the visual presentation may fall back to system typefaces defined in our stylesheet.

Google Maps on the contact page

Our contact page embeds an interactive map provided by Google Maps so readers can locate our Singapore office. Loading the embed may cause your browser to contact Google servers and may allow Google to set or read cookies or similar identifiers under Google’s terms. The map displays 162 Robinson Road, #11-08, The Robinson, Singapore 068913. We do not receive a copy of your map interactions on our servers; any telemetry associated with panning or zooming is handled between your browser and Google. If you do not wish to load the embed, you may still read our address and hours in plain text on the contact page without interacting with the map frame.

Amazon and other outbound links

Editorial review sites routinely link to places where readers can watch or buy a discussed film. We link to Amazon for Million Dollar Murder using a standard product URL. When you click “Watch on Amazon” or similar calls to action, you leave mdmfilmreview.pro and become subject to Amazon’s privacy policy, terms, and cookie practices. Amazon may attribute traffic to referral parameters in the URL; we do not control how Amazon uses that signal. Purchases, refunds, playback quality, and account security are entirely between you and Amazon. Our affiliate disclosure explains the editorial nature of these links; it does not expand our role into payment processing.

Sharing and disclosure

We share personal data only in these situations:

• Infrastructure providers. Hosting, TLS certificate, and email routing vendors process logs or messages solely to provide their services to us under confidentiality obligations.
• Professional advisers. Lawyers or accountants may review correspondence if a dispute or compliance question arises.
• Legal process. We may disclose data when required by valid legal process, or when we believe disclosure is necessary to protect rights, safety, or the integrity of the Site.
• Business continuity. If we reorganize or transfer the publication, a successor may assume data handling under commitments consistent with this policy.

We do not authorize third parties to use personal data obtained through our infrastructure for their independent marketing.

International transfers

Our primary hosting footprint is in the Asia-Pacific region, aligned with Singapore. However, the internet is global: a request for Google Fonts or Google Maps may route through servers outside Singapore, and email delivery may cross borders. Where PDPA or another applicable law requires safeguards for overseas transfers, we rely on contractual protections, provider certifications, or your explicit initiation of the transfer — for example, when you choose to load a third-party embed or send us email through your provider’s network.

Readers in the European Economic Area, United Kingdom, Switzerland, or other regions with transfer rules should assume that limited technical data may be processed in the United States or other countries where large platform providers operate data centers. We minimize such transfers by not deploying optional analytics beyond what is described here.

Retention

We keep personal data only as long as necessary for the purposes outlined in this policy:

• Local storage keys (vf-cookies, vf-poll) persist on your device until you clear them. We cannot delete them remotely.
• Server logs are retained for a rolling window sufficient for security investigation and capacity planning, typically not longer than twelve months unless an incident requires extended preservation.
• Email correspondence is kept while a thread is active and for a reasonable period afterward so we can reference prior context if you write again. You may ask us to delete non-essential emails where no legal hold applies.

When retention periods expire, we delete or anonymize data so it can no longer be associated with an identifiable individual.

Security

We implement measures appropriate to a small editorial site: HTTPS transport encryption, restricted access to hosting consoles, timely application of security patches on managed infrastructure, and least-privilege credentials for anyone who can change Site content. No method of transmission or storage is perfectly secure; we cannot guarantee absolute protection against unauthorized access caused by factors outside our control, such as a compromised reader device or a vulnerability in a third-party library.

If we become aware of a breach affecting personal data we control, we will notify affected individuals and regulators as required by Singapore law and other applicable rules.

Your rights under the PDPA and comparable laws

Singapore’s PDPA grants individuals several rights in relation to personal data held by organizations. Depending on your location, similar rights may exist under GDPR, UK GDPR, or local consumer privacy statutes. Subject to exceptions, you may:

• Request access to personal data we hold about you and information about how we have used it;
• Request correction of inaccurate or incomplete personal data;
• Withdraw consent where processing is consent-based, without affecting the lawfulness of earlier processing;
• Request deletion where data is no longer necessary, consent is withdrawn, or processing is unlawful;
• Object to processing based on legitimate interests where those interests do not override your rights;
• Lodge a complaint with the Personal Data Protection Commission in Singapore or your local supervisory authority.

Because poll data and cookie preferences reside in your browser, the fastest way to erase them is through your browser’s site settings. For server-side data, email [email protected] with enough detail for us to locate relevant logs or messages. We may need to verify your identity before fulfilling a request. We respond within timeframes required by law and will explain if an exception applies — for example, where retention is necessary for legal claims.

Children

Million Dollar Murder is adult-oriented crime drama. The Site is written for general audiences interested in film criticism and is not directed at children under sixteen. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact us and we will take reasonable steps to delete it from our systems.

Automated processing

We do not use automated profiling that produces legal or similarly significant effects. Server-side rules may temporarily block IP ranges exhibiting malicious patterns, but those measures affect connection attempts rather than reader identity profiles tied to poll answers or email content.

Relationship to other policies

This privacy policy should be read together with our cookie policy, which lists storage keys in tabular detail; our terms of use, which govern acceptable conduct; and our affiliate disclosure, which clarifies independence from Amazon and rights holders. In the event of conflict between a summary banner and this document, this policy controls for data protection matters.

Changes to this policy

We may update this policy to reflect new features, regulatory guidance, or changes in third-party services. The “Last updated” date will always show the effective revision. Material changes will be described in plain language on the Site where practicable. We encourage periodic review, especially if you return after a long absence.

Contact

For privacy questions, rights requests, or concerns about how Velvet Frame Pte. Ltd. handles personal data, contact:

Velvet Frame Pte. Ltd.
162 Robinson Road, #11-08
The Robinson
Singapore 068913
Email: [email protected]
Phone: +65 6812 9044
Hours (SGT): Monday–Friday, 9:00–18:00 SGT

You may also use our contact page for office location and map details. We aim to acknowledge substantive privacy correspondence within a reasonable period.