Legal

Privacy Policy

Last updated 24 June 2026. Plain language. No legalese.

Interpretation and Definitions

The defined terms below apply throughout this policy.

“Account” means a unique account created for You to access the Service.
“Company” (“the Company,” “We,” “Us,” “Our”) refers to Gold Tea Productions, LLC, 109 East 17th Street Suite 80, Cheyenne, Wyoming 82001.
“Cookies” are small files placed on Your device by a website.
“Personal Data” (or “Personal Information”) is any information that relates to an identified or identifiable individual.
“Service” refers to goldteamusic.com, including its password-protected catalog access area for Music Supervisors.
“Service Provider” means a third party that processes data on Our behalf.
“You” means the individual accessing or using the Service.

What We Collect

We collect the following information directly from You:

Account information — username, email address, and password. Your password is stored as a one-way bcrypt hash; we cannot see, recover, or reconstruct it.
Contact form submissions — name, email address, company name, position/title, the reason for your enquiry (selected from a list), and your message.

We also collect limited technical information automatically:

Server access logs — IP address, browser type, page visited, and timestamp.
A single session cookie — used solely to keep You signed in while accessing the password-protected catalog area. This cookie is deleted when you close your browser and expires automatically after 1 hour of inactivity. It is set with security flags (HttpOnly, Secure, SameSite=Strict), does not track You across other websites, and is not used for advertising or analytics. We do not use any persistent cookies, web beacons, tracking pixels, or a cookie preferences tool, because none of these are used on this Site.

We do not use Google Analytics, Facebook Pixel, or any other third-party analytics or advertising tracking technology anywhere on this Site.

Third-Party Services We Use

Cloudflare Turnstile — used on the contact form to verify submissions come from a real person rather than automated spam. Processes limited technical information (such as IP address and browser characteristics) for this purpose only; does not receive Your name, email, or message content. Cloudflare’s privacy policy.
YouTube (Google LLC) — video embeds on our Placements page are served via youtube-nocookie.com, YouTube’s privacy-enhanced embed mode. This reduces cookie usage compared to standard YouTube embeds, but requests to load the embedded player are still directed to Google’s servers, which may process limited technical information (such as your IP address and browser type) when that page is visited. Google’s privacy policy.
Vimeo, Inc. — certain advertising placement videos on our Placements page are served via Vimeo’s embed player (player.vimeo.com). When that page is visited, Vimeo may process limited technical information (such as your IP address and browser type). Vimeo’s privacy policy.
Catalog infrastructure — the catalog browsing experience for authenticated Music Supervisors is powered by a third-party backend service. Requests to this service are made server-to-server and contain only catalog-related data (such as search parameters and playback requests). Your name, email address, IP address, and any other personal data you have provided to us are not transmitted to this service.
Our own mail server — transactional email (password resets, account status notifications) is sent from infrastructure we operate directly, not a third-party email marketing platform.

We do not use any other third-party processors, analytics platforms, advertising networks, or embedded services that receive personal data from this Site beyond those listed above.

How We Use Your Information

We use the information we collect to:

Create and manage your account
Respond to contact form enquiries
Send password reset and account status emails
Maintain the security of the Site

We do not send marketing or promotional emails, and we do not use Your information for any purpose beyond what’s listed above. We do not engage in any transaction with You through this Site — the Service does not process payments or sell goods.

How We Share Your Information

We do not sell, rent, or trade Your personal information to third parties, and we do not share it with advertisers or data brokers.

The only parties who process any part of Your information are the third-party services listed in the Third-Party Services section above, each limited strictly to the function described.

We may disclose information if required to do so by law, such as in response to a valid legal request from a court or regulatory authority, or where necessary to protect the rights, property, or safety of the Company or others. If this Company is ever involved in a merger, acquisition, or sale of assets, Your information may be transferred as part of that transaction; we will provide notice before this happens and before Your data becomes subject to a different privacy policy.

How Long We Keep Your Information

Account data is retained for as long as your account remains active. If you request deletion, we will delete your account and associated personal data, except where we are required to retain limited records for legal or accounting purposes.
Server access logs are retained for up to 30 days.
IP addresses collected for security rate-limiting (to prevent automated abuse of our login and contact forms) are retained for up to 24 hours.

Children’s Privacy

This Site is intended for use by music industry professionals and is not directed at children. We do not knowingly collect personal information from anyone under the age of 18. If you believe a child has provided us with personal information, contact us at publishing@goldteamusic.com and we will delete it.

Your Rights

Regardless of where you are located, you have the right to:

Request a copy of the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and associated data
Object to or request restriction of certain processing of your data

To exercise any of these rights, email us at publishing@goldteamusic.com with the subject line “Privacy Request.” We will acknowledge your request and respond within 14 days. We may need to verify your identity before fulfilling certain requests.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your country or region.

South African Data Subjects — Protection of Personal Information Act, 2013 (POPIA)

For the purposes of POPIA, Gold Tea Productions, LLC is the responsible party in respect of the personal information processed through this Site. The Information Officer designated in terms of Section 55 of POPIA may be contacted at publishing@goldteamusic.com.

South African data subjects specifically have the right to:

Be notified of what personal information is being collected and why
Object to the processing of their personal information on reasonable grounds, unless legislation provides for such processing
Lodge a complaint with the Information Regulator of South Africa: complaints.IR@justice.gov.za — inforegulator.org.za
Request the correction or deletion of their personal information in accordance with Section 24 of POPIA
Withdraw consent to the processing of their personal information at any time, without affecting the lawfulness of processing carried out prior to such withdrawal. To withdraw consent, contact us at publishing@goldteamusic.com. Please note that withdrawal of consent may result in the Company being unable to provide certain aspects of the Service to You.

Lawful basis for processing: We process Your personal information in accordance with the conditions for lawful processing set out in Chapter 3 of POPIA, on the following bases: Your consent (such as when You submit the contact form or register for an account); the necessity of processing to perform a contract with You (such as managing Your account); compliance with a legal obligation to which the Company is subject; and our legitimate interests in operating this Site securely, balanced against Your privacy rights. The provision of personal information through the contact form and account registration is voluntary; however, failure to provide the required information may result in our inability to respond to Your enquiry or to create and maintain Your account.

Cross-border transfer: Some of Your personal information may be processed on servers located in the United States. Under Section 72 of POPIA, we only transfer personal information outside South Africa where doing so is necessary to perform our contract with You, or where You have consented to the transfer after being informed of the risks involved. We take reasonable steps to ensure that any such transfer is protected to a standard consistent with POPIA’s requirements.

Data breach notification: If a security compromise occurs that we have reasonable grounds to believe has resulted in unauthorised access to or acquisition of your personal information, we will notify both the Information Regulator and you, as soon as reasonably possible after becoming aware of it, in accordance with Section 22 of POPIA.

Direct marketing: The Company does not use Your personal information for the purpose of direct marketing by means of unsolicited electronic communications, automated decision-making, or any other channel. In the event that this position changes in the future, we will obtain Your prior consent in accordance with Section 69 of POPIA before sending any such communications, and You will have the right to opt out at any time.

Security of Your Personal Data

The security of Your personal information is important to us, but no method of transmission over the Internet or method of electronic storage is 100% secure. We take reasonable technical and organisational measures to protect Your information in accordance with our obligations under applicable law, including Section 19 of POPIA, including:

Passwords stored using bcrypt hashing — never in plain text, never recoverable by us
Role-based access controls
HTTPS encryption for all data transmitted to and from the Site
Security-hardened session handling (HttpOnly, Secure, SameSite flags)

If we become aware of a data breach affecting Your personal information, we will notify affected individuals and any relevant regulatory authority without undue delay, consistent with our legal obligations in the applicable jurisdiction, including the notification requirements set out in Section 22 of POPIA for South African data subjects.

GDPR Privacy (EEA / UK Users)

For the purposes of the GDPR and UK GDPR, Gold Tea Productions, LLC is the data controller in respect of the personal information processed through this Site. You may contact the data controller at publishing@goldteamusic.com.

Legal basis for processing under GDPR may include: Your consent; performance of a contract with You; compliance with a legal obligation; or Our legitimate interests, balanced against Your rights.

The provision of personal information through the contact form and account registration is voluntary; however, failure to provide the required information may result in our inability to respond to Your enquiry or to create and maintain Your account.

If You are in the EEA or UK, You have the right to access, correct, or request erasure of Your personal data; to restrict or object to certain processing; to request data portability; and to withdraw consent at any time. You also have the right not to be subject to solely automated decision-making, including profiling, that produces legal or similarly significant effects; we do not carry out any such processing. To exercise these rights, contact us at publishing@goldteamusic.com. We aim to respond within one month, extendable by up to two further months where necessary.

Withdrawal of consent: Where We rely on Your consent as the lawful basis for processing, You have the right to withdraw that consent at any time by contacting us at publishing@goldteamusic.com. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal. Please note that withdrawal of consent may result in the Company being unable to provide certain aspects of the Service to You. Withdrawing consent is as straightforward as providing it — simply email us at the address above.

Direct marketing: The Company does not use Your personal information for the purpose of direct marketing by means of unsolicited electronic communications or automated decision-making. In the event that this position changes in the future, we will obtain Your prior consent before sending any such communications, and You will have the right to object at any time under Article 21(2) of the GDPR.

If we transfer personal data outside the EEA/UK to a country not deemed to provide an adequate level of protection, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or the UK International Data Transfer Agreement, together with supplementary measures such as encryption and access controls.

You have the right to lodge a complaint with the data protection authority in your jurisdiction. In the EEA, this is your national supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO): https://ico.org.uk.

CCPA/CPRA Privacy Notice (California Residents)

This section supplements the rest of this Privacy Policy and applies to California residents.

Categories of personal information collected, per the categories defined in the CCPA/CPRA:

Category A: Identifiers (name, email address, account username, IP address) — Collected: Yes.
Category B: Personal information listed in the California Customer Records statute (financial, medical, insurance) — Collected: No.
Category C: Protected classification characteristics — Collected: No.
Category D: Commercial information — Collected: No.
Category E: Biometric information — Collected: No.
Category F: Internet or other similar network activity (browsing activity on this Site, server log data) — Collected: Yes.
Category G: Geolocation data — Collected: No.
Category H: Sensory data — Collected: No.
Category I: Professional or employment-related information (company name and job title, collected optionally via the contact form) — Collected: Yes.
Category J: Non-public education information — Collected: No.
Category K: Inferences drawn from other personal information — Collected: No.
Category L: Sensitive personal information — Collected: No.

Sensitive personal information: Since we do not collect sensitive personal information as defined under the CPRA (Category L above), no right to limit the use or disclosure of sensitive personal information arises. We do not use any personal information collected for purposes beyond those set out in this policy.

Sources: We obtain this information directly from You (account registration, contact form) and automatically (server logs, the single session cookie described above).

Use: We use this information solely to operate the Service, respond to Your enquiries, and maintain the security of the Site. We do not use it for advertising, profiling, or any commercial purpose beyond operating this Service.

Sale or sharing of personal information: We do not sell or share Your personal information as defined under the CCPA/CPRA, and have not done so in the preceding twelve months. We have not disclosed any category of personal information for monetary or other valuable consideration.

We may disclose Category A, Category F, and Category I information to the Service Providers listed in the Third-Party Services section above, solely to operate the Service.

Your rights under the CCPA/CPRA: California residents have the right to: notice of what is collected and why; the right to know/access; the right to request correction; the right to request deletion (subject to limited exceptions); the right to data portability; the right to opt out of automated decision-making and profiling that produces legal or similarly significant effects (we do not engage in any such processing); and the right not to be discriminated against for exercising these rights. Since we do not sell or share personal information, there is no opt-out mechanism required for that purpose, but You may still contact us with any privacy request.

Authorized agent requests: You may submit a CCPA/CPRA rights request through an authorized agent. To do so, the agent must provide written proof of their authorization to act on Your behalf, and we may require You to verify Your identity directly with us before we fulfil the request. Contact publishing@goldteamusic.com to initiate an agent request.

Financial incentives: We do not offer any financial incentive programs, price differences, or service differences in exchange for the collection, retention, or sale of personal information, and we do not discriminate against You for exercising any rights under the CCPA/CPRA.

To exercise any CCPA/CPRA right, email publishing@goldteamusic.com. We will verify your identity before responding and will respond within 45 days (extendable once by a further 45 days where reasonably necessary).

Sale of minors’ information: We do not sell personal information of California residents under 16, and have not done so.

Other US State Privacy Laws

A number of US states have enacted consumer privacy laws since CCPA, including Virginia, Colorado, Connecticut, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, and others. These laws generally apply to businesses that process personal data above certain volume or revenue thresholds. As a small B2B company, Gold Tea Productions does not meet the applicability thresholds of these laws. However, we honour data access, correction, and deletion requests from residents of any US state and will respond in accordance with the principles described in this policy. To make a request, contact us at publishing@goldteamusic.com with the subject line “Privacy Request.”

“Do Not Track” Policy (CalOPPA)

This Service does not respond to Do Not Track browser signals. Some third-party websites linked from this Site may track Your activity; You can manage Do Not Track preferences in Your browser settings.

California Shine the Light Law

Under California Civil Code Section 1798, California residents with an established relationship with Us can request information once a year about any sharing of their personal data with third parties for direct marketing purposes. Since We do not share personal information for third parties’ direct marketing purposes, there is nothing to disclose under this section, but You may still contact us to confirm this directly.

California Privacy Rights for Minor Users

California residents under 18 who are registered users of this Site may request removal of content they have publicly posted, by contacting publishing@goldteamusic.com with the email address associated with their account. This request does not guarantee complete removal in all circumstances permitted by law.

Links to Other Websites

Our Service may contain links to other websites not operated by Us, including YouTube, Vimeo, and Instagram for embedded or linked content. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party site.

Changes to This Privacy Policy

If we make material changes to this policy, we will update the “Last updated” date above and, where appropriate, notify active account holders by email or a notice on the Service prior to the change taking effect.

Contact Us

Questions about this policy or Your data:

Gold Tea Productions, LLC
109 East 17th Street Suite 80, Cheyenne, Wyoming 82001
publishing@goldteamusic.com