Legal
Privacy Policy
What this website collects, what happens to it, and what you can ask us to do about it. Written to describe this site specifically rather than websites in general.
Last reviewed September 24, 2026
01Who we are
This site, https://hazelproduction.us, is owned and operated by Hazel Production LLC — a creative production company registered in the United States, based in Culver City, California, and also operating from Istanbul, Turkey. We are the controller of the personal data described here.
Questions about anything on this page go to info@hazelproduction.us.
02The short version
This website has no user accounts, no shopping cart, no payments and no database. The only personal data it collects is what you type into the enquiry form, and that is sent to us as an email rather than stored here.
Everything below is the detail behind that sentence. If a section describes something that sounds like it belongs to a different kind of website — subscriptions, card details, login credentials — it is not here, because none of it exists on this one.
Separately, and only if you allow them, analytics and marketing cookies record how you use the site. Marketing cookies send information about your visit to Meta (Facebook and Instagram) so we can measure and target our advertising. Nothing optional runs until you choose, and you can change your mind at any time from the “Your Privacy Choices” link at the bottom of every page.
03What we collect
When you send an enquiry through the Book Now form, we collect the fields you fill in:
- Your first and last name
- The company you work at, and your job title there
- Which services you are interested in
- How you describe feeling about the project — excited, confident or overwhelmed
- Your budget, if you choose to give one — this field is optional
- Your timeline
- Your email address, and your phone number if you give one
We do not ask for, and this site cannot accept, payment card details, bank details, government identifiers, or any of the categories that data protection law treats as sensitive — health, race, religion, political opinion, sexual orientation, trade union membership, biometrics, or criminal history.
Separately, our web host records standard server logs when your browser requests a page: your IP address, the page requested, the time, and your browser's user-agent string. That is ordinary infrastructure logging and happens whether or not you accept cookies.
If you allow analytics or marketing cookies, we also collect information about your visit: the pages you view, your device and browser type, your approximate location as inferred from your IP address, the website or advert that brought you here, and identifiers stored in cookies. See our Cookie Policy for exactly which cookies exist and what each one does.
04Where your enquiry goes
Submitting the form sends its contents to us as an email. It is not written to a database, a spreadsheet, or a customer system — there is no such system behind this website.
The email is delivered by Resend, a transactional email provider in the United States, acting as our processor. Resend handles the message in transit; we receive and read it in our own company mailbox, which is hosted by Google Workspace.
That means your enquiry lives in an email inbox, with the same practical consequence as any email you send us directly: we keep it for as long as it is useful to the conversation and to our records, and you can ask us to delete it.
05Why we are allowed to hold it
Where the UK and EU General Data Protection Regulation applies to you, these are the legal bases we rely on:
| What we do | Why we are allowed to |
|---|---|
| Read and reply to your enquiry | Steps taken at your request before entering into a contract |
| Keep a record of work discussed and delivered | Legitimate interests — running and accounting for a business |
| Keep the site available and free of abuse | Legitimate interests — security and reliability |
| Analytics | Your consent, which you can withdraw at any time |
| Measure and target our advertising with the Meta Pixel | Your consent, which you can withdraw at any time |
We do not send marketing email off the back of an enquiry unless you have asked us to. We never sell personal data for money. If you allow marketing cookies, information about your visit is shared with Meta for advertising — see “Advertising and the Meta Pixel” below.
06How long we keep it
- Enquiries that lead to work: kept with the project records, for as long as we have a business or tax reason to keep them.
- Enquiries that do not lead to work: kept while the conversation is live and for a reasonable period afterwards, then deleted.
- Server logs: kept by our host for a short, rolling period and then rotated out.
- Analytics data: retained by Google for the period set on our Analytics property. It is not tied to your name, because we never send it one.
- Advertising data: the Meta cookies on this site expire after 90 days. What Meta receives is kept under Meta's own data policy.
- Your cookie choices: remembered for six months, then you are asked again.
Ask us to delete your enquiry at info@hazelproduction.us and we will, unless we are required to keep it — for example, for tax records on work already delivered.
07Other companies this site connects to
A web page is assembled from several places, and some of them are not us. These are all of them:
| Who | What for | When |
|---|---|---|
| Sanity | Serves the photographs and video clips, and hosts the content management system our team uses | On every page load |
| Hostinger | Hosts the website itself | On every page load |
| Resend | Delivers your enquiry to us by email | Only when you submit the form |
| Google Analytics | Usage statistics — which pages are read, and how visitors found us | On every page load, without cookies unless you allow analytics cookies |
| Meta (Facebook, Instagram) | Measures whether our ads lead to visits and enquiries, and lets us show ads to people who have visited | Only if you allow marketing cookies, and never while your browser sends Global Privacy Control |
| YouTube (Google) | Streams the full films on project pages | Only once you press play |
Nothing is requested from YouTube until you actually press play on a film. Until then a project page shows a still image served from our own content network, and Google learns nothing about your visit.
Our typefaces are downloaded when the site is built and served from our own domain, so your browser never contacts a font provider. Links to our social profiles are ordinary links — following one takes you to that company's own site, under that company's own privacy policy, which we do not control.
08Advertising and the Meta Pixel
We advertise on Facebook and Instagram, and use Meta's Pixel to find out whether those adverts work. It runs only if you allow marketing cookies. Until then this site requests nothing from Meta at all — not a page view, not your IP address, not the fact that you opened the page.
If you allow it, Meta receives: the pages you view here; the fact that an enquiry was sent, if you send one; your IP address and browser details; and the identifiers in Meta's cookies, including which Meta advert you clicked to get here. Meta may connect this to a Facebook or Instagram account if you have one, and uses it under its own data policy.
Meta never receives what you type into the enquiry form — not your name, email, phone number, company or message. We send the fact that an enquiry happened, and nothing about who sent it or what it said.
Turn marketing cookies off at any time from the “Your Privacy Choices” link at the bottom of every page. The Pixel stops sending immediately and its cookies are deleted from this site. You can also control the adverts Meta shows you in your Meta ad preferences.
09Do Not Track and Global Privacy Control
Global Privacy Control (GPC) is a setting in some browsers and extensions that tells websites you do not want your personal information sold or shared. We honour it: while your browser sends it, marketing cookies stay off and nothing is sent to Meta, whatever you chose in the cookie banner. We treat it as a valid request to opt out of the sale and sharing of your personal information.
Do Not Track is an older browser signal with no agreed meaning, and most browsers have retired it. This site does not respond to it. GPC is the signal we honour, and the cookie banner gives you the same choice directly.
10International transfers
We operate in the United States and in Turkey, and the providers listed above are based in the United States and Europe. Your data may therefore be processed outside the country you live in. Where a transfer is made from the UK or EEA, we rely on the safeguards those providers put in place, which for our providers means the European Commission's standard contractual clauses or an equivalent mechanism.
11Security
The site is served over HTTPS. The content management system is reachable only by named members of our team, each signing in with their own account, and can be reached by nobody else. Access to enquiry email is limited to the people who need to answer it.
No system is perfectly secure, and anyone claiming otherwise is selling something. If we ever suffer a personal data breach that is likely to affect you, we will tell you and the relevant regulator as the law requires.
12Children
This is a business-to-business website and it is not intended for children. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us something, tell us and we will delete it.
13Your rights
Depending on where you live, you may have some or all of the following rights over the personal data we hold about you:
- Know what we hold, and get a copy of it
- Have it corrected if it is wrong
- Have it deleted
- Object to us using it, or ask us to restrict how we use it
- Ask for it in a portable form, or have it sent to someone else
- Withdraw consent you previously gave, at any time, without affecting what was done before you withdrew it
- Not be treated worse for exercising any of these rights
To exercise any of them, email info@hazelproduction.us. We will respond within the time the applicable law allows — 45 days under California law, one month under the GDPR. We may need to confirm who you are first, which is a protection for you rather than an obstacle: we are not going to hand your data to somebody who emails us claiming to be you.
You may also authorise an agent to make a request on your behalf, with written proof of that authority.
14If you are in California
The California Consumer Privacy Act, as amended by the CPRA, gives you the rights listed above. This section is our notice at collection: what we collect, where it comes from, why, who receives it, and how long we keep it.
| What we collect | From | Why | Sold or shared? | Kept for |
|---|---|---|---|---|
| Identifiers you give us — name, email, phone | You, through the enquiry form | To reply to you and to do business with you | Neither | As described under “How long we keep it” |
| Professional and commercial information — company, job title, the services, budget and timeline you describe | You, through the enquiry form | The same | Neither | The same |
| Online identifiers — IP address, cookie identifiers | Your browser | Security, analytics, and measuring and targeting our adverts | Shared with Meta for advertising, only if you allow marketing cookies. Never sold for money | Server logs: a short rolling period. Meta cookies: 90 days. Analytics: our Google Analytics retention setting |
| Internet activity — pages viewed, how you arrived, device and browser, whether an enquiry was sent | Your browser, through cookies you allow | Analytics, and measuring and targeting our adverts | Shared with Meta, only if you allow marketing cookies | The same |
| Approximate location, inferred from your IP address — city or region, never precise | Your browser | Analytics | Shared with Meta as part of the above, only if you allow marketing cookies | The same |
We do not collect sensitive personal information as the statute defines it, so there is nothing for a “Limit the Use of My Sensitive Personal Information” request to act on.
Selling and sharing. We do not sell personal information for money. Allowing marketing cookies lets Meta receive information about your visit for cross-context behavioural advertising, which California law calls “sharing”. You can opt out in any of three ways:
- The “Your Privacy Choices” link at the bottom of every page — switch Marketing off, or choose Essential only. It takes effect immediately.
- A Global Privacy Control signal from your browser, which we treat as an opt-out automatically.
- An email to info@hazelproduction.us saying you want to opt out of the sale and sharing of your personal information.
We do not knowingly sell or share the personal information of anyone under 16.
Other requests — to know, correct or delete what we hold — go to info@hazelproduction.us or +1 424-235-0009, and are handled as described under “Your rights”, including verification and requests from an authorised agent. We will not treat you differently for making one.
Shine the Light. California Civil Code section 1798.83 lets California residents ask, once a year, whether a business has disclosed their personal information to third parties for those third parties' own direct marketing. Send that request to info@hazelproduction.us.
15If you are in the UK or the EEA
You have the rights listed above under the UK GDPR or the EU GDPR, and you can complain to your national supervisory authority — in the UK, the Information Commissioner's Office — if you think we have handled your data badly. We would rather you told us first so we can put it right.
16Changes to this policy
We update this page when what the site does changes — most likely when we add or remove an analytics or advertising tool. The date at the top is the date of the last substantive review. Material changes will be flagged on the page rather than slipped in quietly.
17Contact
Hazel Production LLC, 11281 Braddock Dr, Culver City, CA 90230. Email info@hazelproduction.us, or call +1 424-235-0009.
