This Privacy Policy explains how Elevate Media Productions ("we", "us") collects, uses and protects your personal data when you visit https://elevate-media-productions.vercel.app or use our services.

We are a digital studio based in Kenya. We are committed to protecting your privacy in line with the Kenya Data Protection Act, 2019 and its regulations, as well as the EU General Data Protection Regulation (GDPR) where it applies to individuals in the European Economic Area.

Contact form: name, email address, subject and message when you contact us.

Account registration: full name and email address when you create an account.

Forum: your username, posts, replies and votes when you participate in the community.

Newsletter: your email address (and possibly name) when you subscribe.

Technical data: IP address, browser type and device information, collected automatically by our hosting provider (Vercel) and email provider (Brevo) to operate and secure the service.

To respond to enquiries you send through the contact form.

To create and manage your account and authenticate you securely.

To operate the forum and display your public contributions.

To send the newsletter you subscribe to (with your consent, via double opt-in).

To improve the site, ensure security, and comply with legal obligations.

We process personal data on the following lawful bases: your consent (newsletter; you can withdraw anytime), performance of a contract (account creation and forum participation), legitimate interest (responding to enquiries, security and abuse prevention), and legal obligation (record-keeping where required).

For GDPR purposes, consent is obtained at the point of collection and can be withdrawn at any time by contacting us.

Supabase (authentication, database and object storage) — stores account, profile and forum data.

Brevo (transactional email) — processes contact form and newsletter emails.

Vercel (hosting) — stores server logs including IP addresses.

Cloudflare (Turnstile, CAPTCHA) — processes a widget response token to verify you are human; it is subject to Cloudflare's own Privacy Policy.

These processors may transfer data across borders, including to the United States and the EU, under appropriate safeguards such as the European Commission's Standard Contractual Clauses and the Kenya ODPC's cross-border transfer provisions.

Contact form messages: up to 24 months.

Accounts and forum contributions: for as long as your account remains active; deleted when you request deletion.

Newsletter subscriptions: until you unsubscribe or withdraw consent.

Server logs: as retained by Vercel in line with their retention policy.

Under the Kenya Data Protection Act, 2019 you have the right to: access your data, correct inaccuracies, request deletion, restrict or object to processing, data portability, and lodge a complaint with the Office of the Data Protection Commissioner (ODPC).

You can exercise these rights at any time by emailing elevatemediaproductions1@gmail.com. We respond within 30 days.

If you are in the EU/EEA, the GDPR gives you corresponding rights, including the right to complain to your local supervisory authority.

We do not use advertising or analytics cookies. We use essential authentication cookies (Supabase) to keep you signed in, and a small consent cookie to remember your preference about this policy.

A CAPTCHA (Cloudflare Turnstile) may process minimal data when you use our forms to prevent abuse.

You can clear cookies at any time through your browser settings.

We protect your data with HTTPS, secure password storage (hashed by Supabase Auth), email verification, rate limiting to prevent abuse, and access controls. No method of transmission is 100% secure, but we take reasonable and proportionate safeguards.

Our services are not directed to children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy from time to time. The current version is always published on this page with the effective date shown above.

Questions or data requests: email elevatemediaproductions1@gmail.com.

Operator: Elevate Media Productions, registered/based in Kenya.