Privacy Policy

1. Who is responsible

Catcent Corporation, a corporation incorporated under the laws of Ontario, Canada, operating under the Efuah Media brand, is responsible for personal information handled through this marketing website. Efuah Media is an operating brand, not a separately incorporated corporation.

Privacy questions and requests may be sent to info@efuahmedia.art. A private residential address is not published. If a postal address becomes mandatory for a specific transaction or jurisdiction, Catcent Corporation will provide an appropriate business contact address before that activity begins.

2. Scope

This policy applies to the Efuah Media marketing website, project-inquiry form and creator-introduction form. Efuah Moments is a related but separate application at https://moments.efuahmedia.art with separate functionality and applicable privacy information. This marketing website does not receive or store private Efuah Moments event uploads.

3. Information we collect

A project inquiry may include name, company, email, optional phone number, project type, project location, budget range, timeline and message. A creator introduction may include name, email, optional phone number, location, creative specialty, portfolio URL, experience, optional capabilities and message. Both forms record an affirmative consent choice and confirmation that the submitter is at least 16; they do not request a birth date.

For delivery, security and abuse prevention, the service processes request origin, IP address, form type, timestamps, Turnstile token and verification result, delivery metadata and a salted cryptographic rate-limit identifier. The D1 rate-limit table does not store form messages, names, email addresses or phone numbers. Communications sent outside the forms, and follow-up correspondence, are also retained as part of the relevant business interaction.

4. Why we use information

We use information to evaluate and respond to project inquiries and creator introductions, communicate about requested next steps, deliver submissions to authorized personnel, protect forms and systems from abuse, diagnose delivery failures, maintain records of relevant business communications, establish or defend legal rights, and meet applicable legal obligations. A submission does not enrol the sender in marketing.

5. Consent and choices

The forms request express agreement at the point of collection and link to this policy. Consent may be withdrawn for future processing by contacting us, subject to legal, contractual or record-retention restrictions. Withdrawal does not invalidate earlier lawful processing and may prevent us from continuing an inquiry or application. We do not require consent to advertising or behavioural profiling because those activities are not configured for this website.

6. Age eligibility

You must be at least 16 years old to submit either form. The checkbox is an eligibility attestation, not guaranteed age verification, and no birth date is collected. People under 16 must not submit personal information through these forms. Requirements for minors vary by jurisdiction; before intentionally offering a service to younger users or collecting their information, Catcent Corporation must complete a separate legal and privacy review and implement any required parental or guardian authorization.

7. Worldwide submissions

The forms are intended to accept submissions worldwide. The laws that apply may depend on where a person lives, whether Catcent Corporation targets or offers services in that location, and the nature of the relationship. Local rights, lawful bases, age rules, representative requirements, transfer safeguards and response deadlines may differ. This policy does not claim universal compliance; Catcent Corporation will assess jurisdiction-specific requirements before targeted campaigns, monitoring, sales or sustained operations in a new jurisdiction.

8. Service providers and processing locations

ChatGPT Sites and its infrastructure providers host, maintain and secure the website and may process request, device, usage, log and hosted form data. Cloudflare provides Turnstile bot protection and the Sites-managed D1 rate-limit database. Resend transmits the form email. Google Workspace receives and stores messages in the approved Efuah Media mailbox. These providers may use subprocessors and may process information outside Canada, including in the United States and other locations described in their applicable terms.

Catcent Corporation remains responsible for selecting providers and giving appropriate instructions where it acts as controller. Provider contracts, data-processing terms, security documentation, locations and subprocessors must be reviewed periodically; this policy does not promise safeguards that have not been verified.

9. Authorized access and disclosure

Personal information may be accessed only by authorized Catcent Corporation personnel who need it for legitimate business operations. It may be disclosed to the providers described above, professional advisers subject to appropriate duties, a successor in a properly protected business transaction, or authorities where disclosure is required or permitted by law. Catcent Corporation does not intend to sell form information. Mailbox and provider permissions require periodic administrative review and are not represented here as independently audited.

10. Retention

The standard retention period is 12 months after the last relevant interaction. Information may be kept longer where reasonably necessary for an ongoing business relationship, a legal obligation, dispute, investigation or the establishment, exercise or defence of legal claims. When no exception applies, records should be securely deleted or anonymized.

Stale salted rate-limit records are deleted by an event-driven cleanup when the limiter runs. Form bodies are not stored in D1 or application logs. Mailbox copies, Resend records, platform logs and provider backups require the operational review and deletion procedures described in Catcent Corporation's internal retention schedule; provider-controlled backup cycles may delay final removal.

11. Cookies and similar technologies

The website source does not configure advertising cookies, behavioural tracking cookies or third-party marketing analytics. Cloudflare Turnstile and ChatGPT Sites may use essential security, authentication, fraud-prevention, load-balancing or functionality technologies. Non-essential analytics, advertising or personalization technology must not be enabled without a separate privacy review, policy update and consent mechanism wherever required by applicable law.

12. Security

Measures include transport encryption supplied by the platform, encrypted secret storage, server-side schema and origin checks, Cloudflare connecting-IP enforcement, Turnstile verification, D1 rate limiting, request-size and timing controls, escaped email content, minimal metadata-only application logging and non-cacheable form responses. No online system can be guaranteed completely secure.

13. Access, correction and deletion requests

Subject to applicable law and exceptions, you may ask whether Catcent Corporation holds personal information about you, request access or correction, withdraw consent for future processing, or request deletion. Email info@efuahmedia.art. We aim to acknowledge requests within five business days and provide a substantive response within 30 calendar days, while complying with any shorter or otherwise mandatory deadline.

Before disclosure, correction or deletion, we may request proportionate information needed to verify identity and locate records. Do not send government identification unless specifically requested through a secure method. We may retain a minimal record of the request and outcome where required for accountability, and will explain any lawful refusal, extension or exception and available complaint route.

14. Privacy incidents

Catcent Corporation will investigate, contain, assess and record suspected loss, unauthorized access, use or disclosure of personal information. It will notify affected individuals, regulators and other organizations where applicable law requires notification or where doing so is appropriate to reduce harm. This commitment is supported by an internal procedure; it is not a claim that a formal incident-response exercise has already been completed.

15. Complaints and policy changes

Questions or complaints may be sent to info@efuahmedia.art. Where applicable, an individual may also complain to the Office of the Privacy Commissioner of Canada or another competent regulator. We may update this policy prospectively when practices, providers or legal requirements change; the published version will identify its effective date and material changes where appropriate.