Privacy Policy

Last updated: July 30, 2026

Paul Griffith Productions LLC, doing business as Griffith Media ("Griffith Media," "we," "us," or "our"), respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you:

• Visit https://www.griffith.media or another website, landing page, or digital property that links to this Privacy Policy (collectively, the "Site");
• Submit a form, request information or a proposal, schedule a meeting, subscribe to communications, or communicate with us by email, phone, text message, social media, or another channel;
• Purchase, receive, or inquire about our video production, photography, podcast, creative, branding, graphic design, website, digital marketing, social media, email marketing, print, signage, apparel, or related services (the "Services");
• Attend or participate in a production, event, meeting, or other activity involving Griffith Media; or
• Otherwise interact with us in a business or professional capacity.

For purposes of applicable privacy law, Paul Griffith Productions LLC is the controller or business responsible for the personal information covered by this Privacy Policy, except where we process personal information solely on behalf of a client as described in Section 2.

Contact: hello@griffith.media
Mail: Paul Griffith Productions LLC d/b/a Griffith Media, 1002 N Central Expressway, Suite 269, Richardson, TX 75080

This Privacy Policy does not replace a production agreement, statement of work, release, data processing addendum, or other contract that specifically governs information used in a client engagement. If a contract contains different or more specific privacy terms, that contract controls for the covered engagement.

1. Notice at Collection

The following is a summary of the categories of personal information we may collect and the purposes for which we use it. More detail appears in the sections below.

Categories we may collect: identifiers and contact information; professional and business information; project, commercial, and transaction information; communications and form submissions; payment and billing information; internet, device, and usage information; approximate location; cookie and advertising identifiers; marketing preferences; audio, visual, and production information; and inferences about interests or service needs.

Primary purposes: to operate the Site; respond to inquiries; schedule meetings; prepare proposals and agreements; provide and improve Services; manage client relationships; communicate about projects; process payments; send requested or permitted marketing communications; measure Site and campaign performance; advertise our Services; protect our systems; comply with law; and establish, exercise, or defend legal rights.

Retention: we retain information only as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide Services, maintain business and tax records, document permissions and communication preferences, resolve disputes, enforce agreements, and comply with law. Section 12 provides additional detail.

Sale, sharing, and targeted advertising: we do not sell personal information for money, and we do not currently use third-party advertising technologies on the Site. If we introduce advertising technologies in the future, they may disclose online identifiers and internet or network activity to advertising partners; depending on the law that applies, that activity may be considered a "sale," "sharing" for cross-context behavioral advertising, or processing for "targeted advertising." Any such technologies will be disclosed in this Policy and gated behind the Advertising category in the Site's cookie preference center before activation. You may opt out as described in Sections 7 and 14.

Sensitive personal information: we do not intentionally collect sensitive personal information through general Site forms and do not use or disclose sensitive personal information to infer characteristics about individuals. Please do not submit government identification numbers, financial account credentials, medical records, biometric identifiers, precise geolocation, or other highly sensitive information through a general inquiry form.

2. When We Act for a Client

Griffith Media sometimes provides websites, marketing campaigns, social media management, email or text messaging services, event coverage, production services, or related Services for a client. In those situations, we may process personal information under the client's instructions as a service provider or processor rather than for our own independent purposes.

When we act as a service provider or processor:

• The client determines why and how the personal information is processed;
• The client's privacy notice and instructions govern the processing;
• We process the information to provide the contracted Services, subject to the applicable agreement and law; and
• Requests concerning the information should generally be directed to the client first. We will assist the client with a verified request as required by our agreement or applicable law.

This Privacy Policy applies to information we process for our own business purposes, including information about our Site visitors, prospects, clients, vendors, production participants, and business contacts.

3. Personal Information We Collect

The information we collect depends on how you interact with us. We may collect the following categories.

A. Identifiers and contact information

Examples include your name, email address, telephone number, mailing address, company or organization, job title, account or contact identifier, social media handle, and signature.

B. Professional and business information

Examples include your employer, role, industry, business website, professional biography, organizational needs, and other business information you provide or that is publicly available.

C. Inquiry, project, commercial, and transaction information

Examples include project descriptions, goals, timelines, deadlines, budget ranges, requested Services, proposal and contract information, purchase history, invoices, payment status, shipping details, product specifications, and records of the Services we provide.

D. Communications and submissions

Examples include contact-form entries, emails, text messages, chat messages, meeting notes, call records, feedback, survey responses, creative briefs, reference materials, files, and other content you choose to provide.

We may record calls or meetings only after providing notice or obtaining consent when required by law.

E. Payment and billing information

We may collect billing contacts, billing addresses, tax information, payment status, and transaction records. Payment card or bank account information is generally collected and processed directly by our payment processor. We do not intend to store full payment card numbers on the Site or in our customer relationship management platform.

F. Internet, device, and usage information

Examples include IP address, browser type, device type, operating system, referring and exit pages, pages or content viewed, links clicked, date and time stamps, session duration, interaction events, error information, and security or access logs.

G. Approximate location

We or our providers may derive a general location, such as city, state, or country, from an IP address. We do not intentionally collect precise geolocation through the Site.

H. Cookies, pixels, and advertising information

Examples include cookie identifiers, browser or device identifiers, campaign attribution information, ad impressions, ad interactions, form-submission events, and information about how you interact with the Site and our advertisements.

I. Marketing and communication preferences

Examples include newsletter subscriptions, consent records, unsubscribe or opt-out status, preferred communication method, and interests relevant to our Services.

J. Audio, visual, and production information

In connection with productions or events, we may collect or create photographs, video footage, audio recordings, names, likenesses, voices, statements, call sheets, release information, and other production-related information. The applicable production agreement, client instructions, and appearance or location releases may provide additional terms.

K. Inferences

We may infer broad interests, likely service needs, or marketing preferences from the information described above. We do not use inferences to make solely automated decisions that produce legal or similarly significant effects concerning an individual.

L. Sensitive personal information

We do not intentionally request sensitive personal information through general Site forms. A project may nevertheless involve information considered sensitive under applicable law, such as information about a minor, disability accommodation, health-related subject matter, religious content, or other sensitive topics. When that occurs, we process the information only as reasonably necessary for the project, with appropriate instructions, permissions, or consent, and subject to the applicable agreement and law.

We do not use facial recognition, voice recognition, or similar biometric technology to uniquely identify individuals unless we separately disclose that use and obtain any consent required by law. Ordinary photographs, video, and audio are not used by us for biometric identification.

4. Sources of Personal Information

We collect personal information from the following sources:

• Directly from you, including through forms, meetings, proposals, contracts, email, text messages, phone calls, social media, payments, and project collaboration;
• Automatically from your browser or device, including through cookies, pixels, analytics tags, server logs, and similar technologies;
• From clients, including when a client identifies contacts, production participants, vendors, employees, customers, or audience members in connection with a project;
• From service providers and business partners, such as scheduling, payment, analytics, advertising, referral, email, communications, hosting, and production providers;
• From referrals, including a person or organization that introduces you to us;
• From publicly available sources, such as company websites, professional profiles, social media, public directories, and public records; and
• From your authorized representatives, agents, employers, or organization.

5. How We Use Personal Information

We may use personal information to:

1. Operate and secure the Site, including hosting, content delivery, troubleshooting, fraud prevention, spam prevention, access control, and security monitoring.
2. Respond to inquiries, provide information, schedule meetings, prepare estimates and proposals, and determine whether our Services may be a fit.
3. Enter into and administer engagements, including contracts, statements of work, releases, project plans, scheduling, staffing, approvals, change orders, invoicing, and collections.
4. Provide the Services, including production, editing, photography, podcasting, design, branding, web development, advertising, campaign management, social media, email or text messaging, printing, signage, apparel, and fulfillment.
5. Communicate with you, including project updates, appointment reminders, support, delivery notices, security notices, billing communications, and other service-related messages.
6. Manage relationships in our customer relationship management system, including lead status, communication history, project history, preferences, and follow-up tasks.
7. Send marketing communications, where permitted by law, and maintain opt-out and suppression records.
8. Measure and improve performance, including Site analytics, audience measurement, attribution, testing, user-experience improvements, and evaluation of advertising effectiveness.
9. Advertise and promote Griffith Media, including interest-based or targeted advertising where permitted and subject to your choices.
10. Create and use portfolio materials, testimonials, case studies, behind-the-scenes content, or awards submissions where permitted by an agreement, release, or applicable law.
11. Process payments and maintain records, including tax, accounting, audit, insurance, and compliance records.
12. Protect people, property, and rights, including investigating suspected fraud, abuse, infringement, security incidents, or violations of our agreements.
13. Comply with legal obligations, respond to lawful requests, and establish, exercise, or defend legal claims.
14. Support business transactions, such as a financing, merger, acquisition, reorganization, bankruptcy, or sale of assets.
15. Create aggregated or deidentified information that is not reasonably linkable to an individual. We may use such information for lawful business purposes and will not attempt to reidentify it except as permitted by law.

We do not use personal information for solely automated decision-making that produces legal or similarly significant effects concerning you.

6. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients for the purposes described in this Privacy Policy.

A. Hosting and infrastructure providers

We use Vercel to host and deliver the Site. Vercel may process IP addresses, request information, technical logs, and related data as part of providing hosting, security, content delivery, and infrastructure services.

We use Sentry (Functional Software, Inc.) for error monitoring, which helps us detect and fix technical problems on the Site. If an error occurs in your browser or on our servers, Sentry may receive technical diagnostic information such as browser and device type, operating system, the page URL involved, and details about the error. We configure Sentry for diagnostics only: it does not receive the contents of forms you submit, does not record your session, and is not used for analytics or advertising.

B. Customer relationship management, forms, scheduling, and communications providers

We use HighLevel Inc. (also known as GoHighLevel or HighLevel) for customer relationship management, forms, scheduling, lead management, email, text messaging, automation, and related functions. Information you submit through an integrated form or scheduling tool may be transmitted to and stored in HighLevel and its authorized subprocessors.

C. Analytics providers

We use Google Analytics to understand how visitors interact with the Site. Google Analytics may receive first-party cookie identifiers, device and browser information, Site activity, and an IP address during transmission. Google states that Google Analytics does not log or store individual IP addresses. Our use of Google Analytics is subject to our account settings, Google's terms, and your cookie choices.

D. Advertising partners

We do not currently use third-party advertising technologies (such as advertising pixels) on the Site. If we introduce an advertising partner in the future, we will update this Policy and the Site's cookie preference center before those technologies are activated, and they will remain subject to your cookie choices and applicable opt-out rights.

We do not intentionally send sensitive personal information, unrestricted form-field contents, payment information, or information that directly identifies a person's medical condition to Google Analytics or any advertising partner.

E. Communications, productivity, and cloud providers

We may use business email, file storage, document-signature, scheduling, project-management, collaboration, telephone, video-conferencing, and related providers to communicate and perform Services.

F. Payment, accounting, and financial providers

We may disclose transaction and billing information to payment processors, banks, bookkeepers, accountants, and tax providers as necessary to process payments and maintain records.

G. Production, creative, and fulfillment providers

We may disclose information to crew members, editors, photographers, designers, subcontractors, talent, venues, rental houses, printers, manufacturers, shipping companies, web developers, media buyers, and other vendors as reasonably necessary to perform the Services. We require recipients to handle information consistently with their role, our agreement, and applicable law.

H. Media, social, and embedded-content providers

The Site may embed or link to content hosted by services such as Vimeo, YouTube, podcast platforms, Instagram, LinkedIn, or other social or media services. These providers may collect information when you load or interact with their content, subject to their own terms and privacy notices.

I. Professional advisors and insurers

We may disclose information to attorneys, accountants, auditors, consultants, and insurers under appropriate confidentiality or professional obligations.

J. Clients and parties involved in a project

We may disclose information to the client that engaged us, production participants, venues, agencies, vendors, or other parties when reasonably necessary to coordinate a project, fulfill client instructions, obtain approvals, or deliver the Services.

K. Legal, safety, and rights-protection recipients

We may disclose information if we reasonably believe disclosure is necessary to comply with law, regulation, legal process, or a lawful governmental request; enforce an agreement; detect or prevent fraud or security issues; or protect the rights, property, health, or safety of Griffith Media, our clients, or others.

L. Business transaction recipients

We may disclose or transfer information in connection with a proposed or completed merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction. A recipient will be required to handle the information in accordance with applicable law and any commitments that continue to apply.

M. Recipients you direct or authorize

We may disclose information at your direction, with your consent, or as reasonably apparent from the circumstances in which you provided it.

7. No Sale for Money; Advertising Disclosures and Opt-Out Rights

We do not sell personal information for money.

Some privacy laws define "sale," "sharing," or "targeted advertising" more broadly than an exchange for money. We do not currently use advertising technologies of this kind. If we introduce them in the future, they may involve disclosure of identifiers and internet or network activity to an advertising partner for measurement, audience creation, or advertising across different websites or services. Depending on the applicable law, that activity may be considered:

• A sale of personal information;
• Sharing of personal information for cross-context behavioral advertising; or
• Processing of personal information for targeted advertising.

You may opt out by:

• Selecting Cookie Settings or Your Privacy Choices in the Site footer and disabling advertising cookies;
• Enabling a legally recognized Global Privacy Control (GPC) signal in your browser, where applicable; or
• Emailing hello@griffith.media with the subject line Targeted Advertising Opt-Out.

We do not knowingly sell or share the personal information of anyone under 16. We do not use or disclose sensitive personal information for purposes that require a right to limit under California law.

We do not offer a financial incentive or price or service difference in exchange for personal information.

8. Cookies and Similar Technologies

Cookies are small files or identifiers placed on or read from a browser or device. Pixels, tags, local storage, software development kits, and similar technologies can perform related functions.

We may use the following categories:

A. Strictly necessary technologies

These technologies support core Site functions, security, load balancing, fraud prevention, form submission, consent management, and network delivery. The Site may not work properly without them.

B. Functional technologies

These technologies remember settings or support optional features, such as scheduling tools, media players, and form preferences.

C. Analytics technologies

Google Analytics and similar tools help us understand traffic, interactions, referrals, errors, and Site performance.

D. Advertising technologies

We do not currently use technologies in this category. If introduced, advertising pixels and similar tools measure advertisements, attribute inquiries, create audiences, and deliver or improve targeted advertising; they will be gated behind the Advertising category in the cookie preference center.

E. Customer relationship management and attribution technologies

HighLevel may use cookies or related technologies to support forms, scheduling, session continuity, lead attribution, and campaign measurement.

Your choices

• Cookie banner and settings. Where required by law, we request consent before activating non-essential analytics or advertising technologies. You can accept, reject, or adjust non-essential categories through the Site's cookie banner and can reopen the preference tool through the Cookie Settings link in the footer.
• Browser controls. Most browsers allow you to block or delete cookies. Blocking all cookies may affect Site functionality.
• Google Analytics opt-out. Google provides a Google Analytics Opt-out Browser Add-on.
• Meta controls. You can manage certain advertising and off-Meta activity settings through your Facebook or Instagram account settings.
• Global Privacy Control. Where required by law, we treat a recognized GPC signal as a request to opt out of sale, sharing, or targeted advertising for the browser or device sending the signal.

Do Not Track

Because there is no generally accepted standard for browser "Do Not Track" signals, the Site does not currently respond to DNT signals. This does not affect our treatment of GPC signals as described above.

9. Email, Telephone, and Text Message Communications

A. Email

We may send service-related emails concerning an inquiry, proposal, appointment, project, payment, security issue, or other business matter. We may also send marketing emails where permitted by law.

Marketing emails include an unsubscribe method. We will honor a valid unsubscribe request promptly and within the period required by law. We may retain limited information on a suppression list so that we can respect your choice. Unsubscribing from marketing does not prevent non-marketing communications about an active inquiry, project, transaction, security matter, or legal obligation.

B. Telephone calls

If you provide a telephone number, we may call you to respond to an inquiry, schedule a meeting, coordinate a project, provide support, or discuss Services. We will make marketing calls only as permitted by applicable law and your communication preferences.

C. Text messages

If you provide a mobile number and consent to text messaging, Griffith Media may send conversational, informational, appointment-related, project-related, or marketing text messages as described at the point of consent.

• Consent to marketing texts is not a condition of purchasing Services.
• Message frequency varies.
• Message and data rates may apply.
• Reply STOP, QUIT, END, CANCEL, UNSUBSCRIBE, REVOKE, or OPT OUT to request that messages stop.
• Reply HELP for help, or email hello@griffith.media.
• We may send one non-marketing confirmation that your opt-out was received.
• After a valid revocation, we will stop non-emergency text messages from the applicable sending number that require consent unless you later re-enroll.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Subcontractors in support services may include messaging platforms, telecommunications carriers, and vendors that help us deliver messages, provide support, prevent fraud, or maintain consent and opt-out records.

You represent that you are the subscriber or customary user of any mobile number you provide and will notify us if the number changes or is reassigned.

10. Client Productions, Footage, and On-Camera Participants

As a production and creative company, we may capture photographs, video, audio, names, likenesses, voices, performances, and statements in connection with client work.

• Production information is governed by the applicable service agreement, statement of work, client instructions, location agreement, and talent or appearance release, in addition to this Privacy Policy.
• Depending on the engagement, a client may be the controller or business responsible for determining how production content is used. Griffith Media may act as the client's service provider or processor.
• The party identified in the applicable agreement is responsible for obtaining required permissions, releases, parental or guardian consents, and union or guild clearances unless the agreement assigns that responsibility differently.
• We may retain project files, working files, footage, and backups as provided in the applicable agreement and our production workflow.
• If you appeared in a production and have a privacy question, contact hello@griffith.media. If a client controls the relevant use, we may direct your request to that client or assist the client in responding.

11. Marketing Services and Client-Supplied Data

A client may provide contact lists, audience information, customer data, social media data, analytics information, or other personal information for use in a campaign or project. The client is responsible for confirming that it has a lawful basis, notice, consent, and other authority required for us to process that information under its instructions.

We do not use client-supplied personal information for another client's marketing and do not combine client lists for unrelated campaigns. We may refuse, suspend, or limit processing that we reasonably believe is unlawful, deceptive, unsafe, inconsistent with a platform's rules, or outside the agreed scope.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy. Retention depends on the nature of the information, the relationship, contractual requirements, legal obligations, security needs, and applicable limitation periods.

Typical considerations include:

• Inquiries and prospective-client records: generally for up to two years after the last meaningful interaction, unless an engagement begins, you ask us to retain the information, or a longer period is reasonably necessary.
• Client, contract, billing, and tax records: generally for the engagement and approximately seven years afterward, subject to legal, accounting, insurance, and dispute requirements.
• Project files, footage, recordings, and deliverables: according to the applicable agreement, project needs, archival practices, backup cycles, and storage capacity.
• Marketing subscriptions: until you unsubscribe or we discontinue the list, plus a limited suppression record needed to honor your choice.
• Consent and opt-out records: for as long as reasonably necessary to document consent, revocation, and compliance, including applicable limitation periods.
• Analytics and advertising information: according to our account settings, cookie duration, provider retention controls, and your choices.
• Security and technical logs: for the period reasonably necessary to operate, secure, diagnose, and protect the Site and our systems.

We may retain information longer if required by law, subject to a legal hold, necessary to resolve a dispute, needed to enforce an agreement, or required to protect rights or safety. Information may remain temporarily in encrypted backups until overwritten through the ordinary backup cycle.

When personal information is no longer reasonably necessary, we delete it, deidentify it, or securely dispose of it as appropriate.

13. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, acquisition, alteration, disclosure, loss, or destruction. Depending on the context, safeguards may include encryption in transit, access controls, multifactor authentication, least-privilege practices, reputable hosting and communications providers, contractual protections, backups, and monitoring.

No website, transmission, storage system, or security measure is completely secure. You are responsible for using reasonable care when sending information, protecting your own devices and credentials, and avoiding the submission of unnecessary sensitive information through general forms.

If we discover a security incident involving personal information, we will investigate and provide notice as required by applicable law.

14. Your Privacy Rights and Choices

Depending on where you live and whether a particular law applies to Griffith Media, you may have the right to:

• Confirm whether we process your personal information;
• Access or obtain a copy of personal information we maintain about you;
• Correct inaccurate personal information;
• Delete personal information, subject to legal exceptions;
• Obtain a portable copy of certain information;
• Opt out of sale, sharing, or targeted advertising;
• Opt out of certain profiling in furtherance of decisions that produce legal or similarly significant effects;
• Limit certain uses or disclosures of sensitive personal information;
• Withdraw consent where processing is based on consent;
• Appeal a decision concerning a privacy request; and
• Receive equal service and not be retaliated against or unlawfully discriminated against for exercising a privacy right.

Even where a comprehensive state privacy law does not apply to us, we will make reasonable efforts to honor verified access, correction, deletion, and opt-out requests as a matter of policy, subject to legal, contractual, security, and operational limitations.

How to submit a request

You may submit a request by either method below:

1. Email hello@griffith.media with the subject line Privacy Request; or
2. Mail a request to Privacy Request, Paul Griffith Productions LLC d/b/a Griffith Media, 1002 N Central Expressway, Suite 269, Richardson, TX 75080.

For an advertising opt-out, you may also use the Cookie Settings or Your Privacy Choices link in the Site footer or send a GPC signal as described in Section 7.

Verification

We may ask for information reasonably necessary to verify your identity and locate the relevant records. We will use verification information only for verification and security. We will not require identity verification for a browser-level opt-out request unless verification is reasonably necessary to apply the request beyond the browser or device.

Authorized agents

Where permitted by law, an authorized agent may submit a request for you. We may require proof of the agent's authority and may contact you directly to verify the request.

Response timing and appeals

We will respond within the time required by applicable law, generally within 45 days for covered U.S. state privacy requests, subject to any permitted extension. If we deny a request, we will explain the basis where required. You may appeal by replying to our decision or emailing hello@griffith.media with the subject line Privacy Appeal. If an appeal is denied, you may contact the attorney general or privacy regulator in your state.

Exceptions

Privacy rights are not absolute. We may retain or continue processing information as permitted by law, including to complete a transaction, provide requested Services, protect security and integrity, exercise free speech or another legal right, comply with law, maintain privileged information, establish or defend claims, or keep a record of an opt-out request.

15. Additional U.S. State Disclosures

A. California

This section supplements the remainder of this Privacy Policy for California residents. Terms such as "personal information," "sell," "share," and "sensitive personal information" have the meanings assigned by the California Consumer Privacy Act, as amended ("CCPA"). This section applies only to the extent the CCPA applies to Griffith Media or the relevant processing.

During the preceding 12 months, we may have collected the following categories of personal information described by California law:

1. Identifiers;
2. Personal information categories listed in California Civil Code section 1798.80(e);
3. Commercial information;
4. Internet or other electronic network activity;
5. Approximate geolocation information;
6. Audio, electronic, visual, or similar information;
7. Professional or employment-related information;
8. Inferences drawn from other information; and
9. Sensitive personal information only where voluntarily provided or needed for a specific project, and not for the purpose of inferring characteristics.

We collect these categories from the sources described in Section 4 and use them for the purposes described in Section 5.

During the preceding 12 months, we may have disclosed each of the categories above for a business purpose to the recipient categories described in Section 6, as relevant to the recipient's function.

During the preceding 12 months, we have not sold or shared personal information as those terms are defined by the CCPA. If we introduce advertising technologies in the future, their use could involve the sale or sharing of the following categories to advertising and marketing partners:

• Identifiers, such as cookie, device, or online identifiers and IP address; and
• Internet or other electronic network activity, such as interactions with the Site or advertisements and related inferences.

We do not sell personal information for money. We do not knowingly sell or share personal information of individuals under 16. We do not use or disclose sensitive personal information for purposes that require a right to limit. California residents may exercise the rights described in Section 14, including the right to opt out of sale or sharing.

California Shine the Light: California Civil Code section 1798.83 permits certain California customers to request information about specified disclosures of personal information to third parties for their own direct marketing. To submit a request, email hello@griffith.media with the subject line California Shine the Light Request.

B. Texas and other U.S. states

To the extent the Texas Data Privacy and Security Act or another state comprehensive privacy law applies, the categories of personal data we process, purposes of processing, categories of personal data shared, categories of third parties, request methods, and appeal process are described in this Privacy Policy.

We process personal data for targeted advertising only as described in Sections 6 through 8 and provide the opt-out methods described in Sections 7 and 14. We do not process personal data for profiling in furtherance of decisions that produce legal or similarly significant effects.

C. Nevada

Nevada residents may request to opt out of a future sale of covered information as defined by Nevada law by emailing hello@griffith.media with the subject line Nevada Opt-Out Request. We do not currently engage in a sale covered by Nevada's opt-out law.

16. International Visitors

Griffith Media is based in Texas, United States. The Site and Services are primarily directed to businesses and professional users in the United States. If you access the Site from another country, your information may be transferred to and processed in the United States and other countries where our providers operate. Those countries may have data protection laws different from those in your location.

Where the European Economic Area, United Kingdom, or Swiss data protection law applies, our legal bases may include:

• Contract: processing needed to take steps at your request, enter into an agreement, or perform an agreement;
• Legitimate interests: operating and improving our business, responding to business inquiries, securing our systems, preventing fraud, maintaining records, and marketing our Services, where those interests are not overridden by your rights;
• Consent: where we request consent, including for certain cookies, marketing communications, or uses of information; and
• Legal obligation: processing needed to comply with law, accounting, tax, court orders, or regulatory requirements.

Subject to applicable law, you may have rights to access, rectify, erase, restrict, port, or object to processing, and to withdraw consent. You may also lodge a complaint with your local supervisory authority. To exercise a right, use the methods in Section 14.

Where required, we and our providers use appropriate safeguards for international transfers, such as contractual protections or another legally recognized transfer mechanism.

17. Children's Privacy

The Site is intended for adults and business or professional users. We do not knowingly collect personal information online from a child under 13 through the Site. We do not knowingly sell or share the personal information of anyone under 16.

If we learn that a child submitted personal information through the Site without required authorization, we will take reasonable steps to delete it. A parent or guardian may contact hello@griffith.media.

A client production involving a minor is governed by the applicable agreement, guardian consent, release, child labor and education requirements, and other applicable law. The responsible party under the agreement must obtain and maintain required permissions.

18. Third-Party Websites and Services

The Site may link to or embed third-party websites, applications, social networks, booking tools, media players, maps, or other services. We do not control their independent privacy practices. Information you provide directly to a third party is governed by that third party's privacy notice and terms.

A link or embed does not necessarily mean that Griffith Media endorses the third party or is responsible for its content, security, or practices.

19. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, technology, Services, or legal obligations. The "Last updated" date shows when the current version was posted.

If a change materially affects how we use personal information already collected, we will provide additional notice or obtain consent where required by law. We encourage you to review this Privacy Policy periodically.

20. Contact Us

Questions, requests, or complaints concerning privacy may be sent to:

Paul Griffith Productions LLC d/b/a Griffith Media
Attn: Privacy
1002 N Central Expressway, Suite 269
Richardson, TX 75080
Email: hello@griffith.media