Media
Work

Privacy

Privacy notice

How AY Media Work handles inquiries, newsletter choices, security data, and optional website analytics.

Last updated 25 August 2026

Scope and who handles your information

This notice describes how AY Media Work handles personal information submitted through this website and information used to operate and protect it. It applies to visitors, prospective clients, collaborators, and newsletter subscribers.

AY Media Work is responsible for the website's use of this information. Verified public contact details have not yet been published, so privacy requests can be sent through the contact form. Select the journey that best fits your request and clearly state that it concerns privacy.

Information collected

The website may collect:

  • Client inquiries: name, email, optional contact number, optional company or brand, selected services, preferred timeline, project details, and your consent choices.
  • Partner inquiries: name, email, optional contact number, specialty, portfolio URL, availability, selected services, collaboration details, and your consent choices.
  • Newsletter requests: email address, consent, source, and subscription timestamps.
  • Security information: request and challenge data needed to validate form submissions. A one-way keyed hash derived from the network address is temporarily used for rate limiting; the raw address is not stored in the website database for this purpose.
  • Optional measurement information: page visits, device or browser context, approximate location, and performance measurements when a configured analytics provider is enabled and you have opted in.

The forms do not request payment details, passwords, or budget information. Please do not include confidential, sensitive, or unnecessary personal information in free-text fields.

Why information is used

Information is used only as needed to:

  • review, respond to, and manage an inquiry;
  • record and administer a newsletter request you expressly selected;
  • deliver forms, prevent abuse, and secure the website;
  • operate, troubleshoot, and maintain the service; and
  • understand website use and performance when optional analytics is configured and you consent.

Inquiry privacy consent and newsletter consent are separate. Submitting an inquiry does not subscribe you unless you select the optional newsletter checkbox.

Service providers

The website uses service providers only for specific operational functions. Depending on deployment configuration, these may include:

  • Vercel for website hosting and, only after analytics consent, Web Analytics or Speed Insights;
  • Supabase for secure inquiry, newsletter, and administrative data storage;
  • Cloudflare Turnstile to distinguish valid form submissions from abuse; and
  • Resend for private inquiry notifications when the notification service is configured.

Google Analytics may also be enabled as an optional provider. It is not loaded before consent, advertising storage and advertising signals remain disabled, and this site configures its first-party analytics cookies with a maximum lifetime of 180 days.

Providers may process information in locations where they or their infrastructure operate. Their handling is also governed by their own terms and privacy documentation.

Analytics choices and device storage

Optional analytics and performance providers are disabled unless they are explicitly configured for the deployment and you accept analytics. Rejecting analytics does not prevent you from viewing the site or sending a form.

Your choice is stored in your browser for up to 180 days. You may change or withdraw it at any time. Withdrawing consent stops future optional measurement on this site and triggers removal of accessible first-party Google Analytics cookies. It cannot recall information already sent while consent was active.

Essential browser storage and processing may still be used for form security and to remember your privacy selection. Cloudflare Turnstile is an essential anti-abuse control, not an optional analytics provider.

Retention and security

Information is kept only for as long as reasonably needed to handle the purpose for which it was collected, maintain security, resolve disputes, and meet applicable obligations. Newsletter records remain until consent is withdrawn or the record is otherwise no longer required. Inactive rate-limit records are eligible for automated cleanup after 24 hours.

The website uses access controls, row-level database security, server-side validation, same-site checks, abuse detection, and restricted administrative access. No internet service can promise absolute security, so only necessary information should be submitted.

Your choices and requests

Subject to applicable law, you may ask for access, correction, or deletion of your personal information, object to or restrict certain processing, or withdraw consent. You may also request removal from the newsletter.

Send a request through the contact formand include enough detail to identify the relevant submission. Identity may need to be verified before a request is completed. Analytics consent can be changed immediately using the control above or the footer link.