Privacy Policy

ZCreative Media (“ZCreative,” “we,” “us”) is an Austin, Texas media production studio owned and operated by Jeff Zavala. This policy explains what information we collect on zcreativemedia.tv, why, who helps us process it, and the choices you have. We wrote it in plain language on purpose.

The short version

We collect what you type into the project brief form so we can reply to you and scope your project. We use Google’s analytics and advertising tools to understand which pages and ads bring people to the site. We do not sell your information, and we do not share it with anyone except the service providers that run this site and our email. You can ask us to see, correct, or delete your information at any time by emailing bookzcreative@gmail.com.

1. Information you give us

When you send a project brief, we collect the fields in the form: your name, email address, company or organization, project type, budget range, timeline, an optional reference link, an optional phone number, and your message. If you tick the box asking to hear from us occasionally, we record that choice too.

We use this information to respond to your inquiry, prepare an estimate or proposal, and, if you become a client, to plan and deliver the work. If you opted in, we may send occasional studio updates (a few emails a year); every one includes an unsubscribe link.

2. Information collected automatically when you submit the form

To prevent spam and understand which marketing brings us real inquiries, the form submission also records:

• A hashed version of your IP address (a one-way scramble that we cannot reverse), used only for rate-limiting abusive submissions.
• Your browser’s user-agent string, the page you submitted from, and the page that referred you to the site.
• Marketing attribution: the campaign tags (utm_*) and Google click identifiers (gclid, gbraid, wbraid, gad_source, gad_campaignid) that were on the link you arrived through, plus the first page you landed on. The site stores these in your browser’s local storage for 90 days so that, if you come back later and send a brief, we can tell which ad or email introduced you. Clearing your browser storage removes them.
• The version of this privacy notice and the form disclosure that were in effect when you submitted.

3. Analytics and advertising measurement

We use Google Tag Manager to load the following on the site:

• Google Analytics 4 — page views and interactions such as starting the form, clicking an email link, or viewing a service page. Google Analytics sets cookies and processes usage data on Google’s servers. We do not send your name, email, or message to Analytics.
• Google Ads conversion tracking — when you submit a project brief after clicking one of our ads, we tell Google Ads that a conversion happened, with an anonymous lead ID and a value band, so we can measure whether the ad was worth running.
• Enhanced conversions — as part of that conversion, the email address (and phone number, if provided) you entered is hashed in your browser with SHA-256 before it is sent to Google, which uses it only to match the conversion to a signed-in Google account for measurement. Google does not receive the un-hashed value, and we do not use this for advertising to you.
• Consent Mode — if you are visiting from the European Economic Area, the United Kingdom, or Switzerland, or if your browser sends a Global Privacy Control signal, analytics and advertising storage are set to “denied” by default and Google’s tags run in a limited, cookieless mode. We honor Global Privacy Control as an opt-out of sale/sharing under applicable U.S. state laws.

Google’s own use of data from these tools is described at How Google uses information from sites or apps that use our services. You can opt out of Analytics with the Google Analytics opt-out browser add-on and manage ad personalization at adssettings.google.com.

[If Cloudflare Turnstile is enabled on the form, keep this paragraph; otherwise delete it] We use Cloudflare Turnstile to tell people from bots on the project brief form. Turnstile may process your IP address and browser characteristics under Cloudflare’s privacy policy.

4. Who processes your information for us

We do not sell or rent personal information. We share it only with service providers that run parts of this site under contract, and only for the purposes above:

We may also disclose information if required by law or to protect our rights, safety, or property.

5. Cookies and similar technologies

Google Analytics and Google Ads set cookies (such as _ga and _gcl_*) to recognize repeat visits and attribute conversions. The site itself uses browser local storage for the 90-day attribution record described in section 2 and to remember that you’ve already submitted a form. You can block or clear cookies in your browser settings; the site works without them.

6. How long we keep information

Project briefs stay in our lead database while we are talking with you and, if you become a client, for the duration of our work together and for our business records afterward (typically up to seven years for anything tied to invoicing). Briefs that don’t lead to a project are deleted or anonymized [within 24 months — choose a period]. Attribution data in your browser expires after 90 days. Analytics data retention is governed by our Google Analytics settings ([14 months — confirm in GA4 → Data retention]).

7. Your choices and rights

Email bookzcreative@gmail.com with the subject line “Privacy request” to:

• see a copy of the information we hold about you;
• correct it;
• have it deleted (unless we need to keep it for a legal or accounting reason, which we’ll explain);
• stop receiving studio updates (or use the unsubscribe link in any email).

We’ll confirm your request within 10 business days and complete it within 45 days. We will not treat you differently for exercising these rights. Residents of Texas, California, and other states with consumer privacy laws have the rights those laws provide, including the right to appeal a decision by replying to our response. Visitors from the EEA/UK have the rights set out in the GDPR/UK GDPR; our lawful bases are performance of a contract (responding to your brief) and legitimate interests (running and measuring the site).

8. Children

The site is for businesses and adults. We do not knowingly collect information from anyone under 16. If you think a minor has sent us information, email us and we will delete it.

9. Security

Briefs are transmitted over HTTPS and stored in a database that only the studio owner can read. Email notifications are sent to a studio-controlled inbox. No method is perfect, so please don’t include sensitive personal details (health, financial account numbers, government IDs) in a project brief — we don’t need them to scope a video.

10. Changes

When we change this policy we’ll update the date at the top. Material changes will be flagged on this page for 30 days.

11. Contact

ZCreative Media · Jeff Zavala
Austin, Texas
bookzcreative@gmail.com
[Postal address — add once the PO/UPS box exists; required for CAN-SPAM marketing emails, not for this page]