Privacy Policy

This Privacy Policy describes how Catsoup Media (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or otherwise communicate with us through catsoupmedia.com (the "Site") or any related service (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as a visitor, prospective client, current client, blog reader, or any other individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the Services.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date above, and take any other steps required by applicable law.

How we collect and use your personal information

To provide the Services, we collect and have collected over the past 12 months personal information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us.

In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

What personal information we collect

The types of personal information we obtain about you depend on how you interact with our Site and use our Services. When we use the term "personal information", we are referring to information that identifies, relates to, describes, or can be associated with you. The following sections describe the categories and specific types of personal information we collect.

Information you provide directly to us

Information you submit through our Services may include:

• Contact details — your name and email address, submitted via our contact form or meeting-request form.
• Project details — the message content you choose to send us, including any information about your business, goals, or project requirements.
• Meeting preferences — the time slot you select when requesting a consultation (date and time, in San Diego time).
• Email correspondence — any information you include in emails to us, including replies and follow-ups.

Some features of the Services may require you to provide certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing those features.

Information we collect through cookies and similar technologies

We also automatically collect certain information about your interaction with the Services ("Usage Data"). To do this, we may use cookies, pixels, and similar technologies ("Cookies"). Usage Data may include information about how you access and use our Site, including device information, browser information, information about your network connection, your IP address (which we treat as personal information where required by law), and other information regarding your interaction with the Services.

For details about which cookies we use and how to manage them, see our Cookie Policy.

Information we obtain from third parties

We may also obtain information about you from third parties, including from vendors and service providers who collect information on our behalf, such as:

• Cloudflare — our hosting and edge-network provider. Cloudflare may collect information such as IP address, browser headers, and security signals to defend the Site against malicious traffic. Cloudflare also provides the Turnstile CAPTCHA we use on form submissions, which may collect anonymized signals about your browser and interaction.
• Google (via Google Analytics 4) — when you have consented to analytics, GA4 may collect Usage Data such as pages viewed, time on page, approximate location derived from IP, and device/browser information. IP addresses are anonymized.
• Brevo (formerly Sendinblue) — our transactional email provider. When you submit a contact or meeting-request form, the contents (including your name, email address, message, and selected slot) are transmitted via Brevo so we can receive and reply to you.

Any information we obtain from third parties will be treated in accordance with this Privacy Policy. We are not responsible for the accuracy of information provided to us by third parties and are not responsible for any third party's policies or practices. For more information, see the section below, "Third-party websites and links".

How we use your personal information

• Providing the Services. We use your personal information to respond to inquiries, schedule and conduct consultations, and provide the studio services you have requested.
• Communicating with you. We use your personal information to provide customer support, send follow-up communications related to your inquiry, and improve our Services. This is in our legitimate interests in being responsive and maintaining business relationships.
• Marketing and updates. Where you have opted in, we may send occasional updates about the studio (case studies, new posts, service launches). You may opt out at any time using the unsubscribe link in any such email.
• Security and fraud prevention. We use your personal information — including IP address, browser headers, and Cloudflare Turnstile signals — to detect, investigate, and prevent fraudulent, abusive, or malicious activity (such as automated form spam). We also maintain per-IP rate-limit counters in Cloudflare KV storage to protect the contact form.
• Analytics. Where you have consented, we use Google Analytics to understand and improve how the Site is used.
• Legal and operational obligations. We may use information to comply with applicable law, enforce our terms, and defend our rights.

Cookies

Like most websites, we use Cookies on our Site. We use Cookies to power and improve our Services (such as remembering your consent choices and language preference), and — with your consent — to run analytics that help us understand how the Site is used. We do not use third-party advertising cookies. For a full breakdown of the cookies we set and how to control them, see our Cookie Policy.

Most browsers automatically accept Cookies by default, but you can choose to set your browser to remove or reject Cookies through your browser controls. Removing or blocking Cookies may negatively impact your experience and may cause some features of the Services to work incorrectly.

How we disclose personal information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

• With vendors or service providers who perform services on our behalf (e.g., hosting, email delivery, analytics, security, fraud-prevention).
• When you direct, request, or otherwise consent to our disclosure of information to third parties — for example, when you click a third-party link from our Site or submit a contact form whose response we route through Brevo.
• With our affiliates or otherwise within our corporate group, in our legitimate interests in running our business.
• In connection with a business transaction such as a merger or sale, or to comply with any applicable legal obligations (including responding to subpoenas, search warrants, and similar requests), to enforce any applicable terms of service, or to protect or defend the Services, our rights, and the rights of our users or others.

Categories of personal information disclosed in the past 12 months

We have disclosed the following categories of personal information about users for the purposes set out above:

• Identifiers — basic contact details such as name, email address, and IP address.
• Internet or other similar network activity — Usage Data, including pages viewed, referrers, and device/browser information.
• Commercial information — limited details about the nature of your inquiry or project request, as you choose to share them.

Categories of recipients have included:

• Service providers who perform services on our behalf (hosting, email delivery, analytics, security and fraud-prevention).
• Our affiliates and personnel.
• Public authorities or other parties, where required by law.

We do not sell your personal information for money. Our use of Google Analytics may constitute "sharing" of personal information for analytics purposes as that term is defined under the California Consumer Privacy Act (CCPA). You may opt out at any time on our Do Not Sell or Share My Personal Information page, or by enabling the Global Privacy Control (GPC) signal in your browser — we honor GPC.

We do not use or disclose sensitive personal information for the purposes of inferring characteristics about you.

Third-party websites and links

Our Site may provide links to websites or other online platforms operated by third parties (for example, our portfolio links, social media accounts, or referenced articles). If you follow links to sites not affiliated with or controlled by us, you should review their privacy and security policies and other terms. We do not guarantee and are not responsible for the privacy, security, or accuracy of information found on those sites. Information you provide on public or semi-public venues, including information shared on third-party social-networking platforms, may be viewable by other users of those platforms without limitation as to its use.

Children's data

The Services are not intended to be used by children, and we do not knowingly collect any personal information about children under 13 (or under 16, depending on jurisdiction). If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the details below to request that it be deleted.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) personal information of individuals under 16 years of age.

Security and retention of your information

We use reasonable administrative, technical, and physical safeguards to protect your personal information. Form submissions are protected by Cloudflare Turnstile and per-IP rate limiting; traffic to and from the Site is encrypted via HTTPS. That said, no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." Any information you send to us may not be secure while in transit. We recommend that you do not use unsecured channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on different factors, such as whether we need the information to respond to your inquiry, provide the Services, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies. Contact form submissions are retained for as long as the active engagement requires, and then archived or deleted in line with our internal retention schedule.

Your rights and choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. These rights are not absolute, may apply only in certain circumstances, and in certain cases we may decline your request as permitted by law.

• Right to access / know. You may have a right to request access to personal information that we hold about you, including details relating to the ways in which we use and share your information.
• Right to delete. You may have a right to request that we delete personal information we maintain about you.
• Right to correct. You may have a right to request that we correct inaccurate personal information we maintain about you.
• Right of portability. You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
• Right to opt out of sale or sharing or targeted advertising. You may have a right to direct us not to "sell" or "share" your personal information, or to opt out of processing of your personal information for purposes considered to be "targeted advertising", as those terms are defined in applicable privacy laws. We honor the Global Privacy Control (GPC) opt-out preference signal — if you visit our Site with GPC enabled, we will automatically treat this as a request to opt out of the "sale" or "sharing" of information for the device and browser you use to visit the Site.
• Restriction of processing. You may have the right to ask us to stop or restrict our processing of personal information.
• Withdrawal of consent. Where we rely on consent to process your personal information (such as analytics), you may withdraw this consent at any time using the consent controls on our Site.
• Appeal. You may have a right to appeal our decision if we decline to process your request. You can do so by replying directly to our denial.
• Communication preferences. We may send you occasional emails about the studio. You may opt out of these at any time using the unsubscribe option displayed in each email. If you opt out, we may still send you non-promotional emails relating to active conversations or projects.

You may exercise these rights by contacting us at cat@catsoupmedia.com or by using the controls on our Do Not Sell or Share My Personal Information page where applicable.

We will not discriminate against you for exercising any of these rights. We may need to collect information from you to verify your identity (such as your email address or details of your prior inquiry) before providing a substantive response. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf; before accepting such a request from an agent, we will require that the agent provide proof of your authorization.

International users

Catsoup Media operates from the United States. If you access the Services from outside the United States, please be aware that information collected through the Services may be transferred to, stored, and processed in the United States or any other country where we or our service providers operate. By using the Services, you consent to such transfer, storage, and processing.

Contact us

Questions about this Privacy Policy, or wish to exercise any of the rights described above? Email cat@catsoupmedia.com.