Privacy Policy

Who runs this site

This Site is operated by Kash Rupareliaa ("we", "us", "Kash"). For any question about this policy or the information held about you, contact privacy@TBD.media.

What we collect

We try to collect as little as possible. In practice that means three buckets of information:

• What you give us. When you fill in a form on the Site — newsletter signup, contact, booking, brand-partnership, sponsorship, or guest application — we receive the fields you submit (typically your name, email, and message, plus whatever extra context you choose to share).
• What your browser sends automatically. Our hosting provider keeps standard server logs — IP address, request time, browser type, referring page — for security, debugging, and abuse prevention. These logs are short-lived.
• What third-party services see. Some content (typeface files from Google Fonts, and in future video embeds from YouTube) is loaded from third-party servers. Those providers may log your IP address as part of serving their content. See "Third parties" below.

We do not currently run analytics, advertising, tracking pixels, or session-replay tools on the Site. If that changes, this policy will be updated and you will see it reflected in our cookie policy.

How we use what we collect

We use the information above to:

• reply to your enquiry and continue the conversation;
• send you the newsletter you signed up for, and only that newsletter;
• keep the Site secure and operational;
• understand which pages are working and which are broken.

We will not sell your personal information. We will not share it with anyone except the limited service providers listed below, or where we are required to by law.

Legal basis (UK / EU visitors)

Where the UK GDPR or EU GDPR applies, our legal basis for processing is one of: your consent (for example, subscribing to a newsletter), the performance of a contract or pre-contract steps at your request (for example, responding to a booking enquiry), or our legitimate interest in running and protecting the Site (server logs, security).

Third parties

The Site relies on a small set of third-party providers:

• Hosting. The Site runs on Cloudflare Workers, Cloudflare's edge platform, deployed via Lovable. Cloudflare may log standard request metadata (IP address, request time, user agent) as part of routing requests and protecting the Site from abuse. See Cloudflare's privacy notice for details.
• Google Fonts. The Schibsted Grotesk, Inter, Anton, and Material Symbols typefaces load from fonts.googleapis.com / fonts.gstatic.com. Google may log request IP addresses when fonts are served. See Google's privacy notice for details.
• YouTube (when embedded). Embedded video content is served by Google/YouTube. When you play an embedded video, YouTube may set cookies and receive your IP address. Embeds are not present on every page; the cookie policy tracks which pages currently embed video.
• Newsletter (Mailchimp). Newsletter subscriber records (email address, signup source, tags identifying which newsletter you joined) are stored in Mailchimp, which we use to send The Divine Upgrade and the Relearn newsletter. See Mailchimp's privacy notice ↗ for how they handle your data.
• Contact form delivery. Submissions to the contact, booking, brand-partnership, sponsorship, and guest application forms are processed by our hosting platform's transactional email infrastructure (delivered via Mailgun from notify.risevoice.media) and forwarded to us by email. The platform may temporarily store form submissions for delivery and abuse prevention. Contact form submitters are also added to Mailchimp tagged as a website contact (see above).

How long we keep it

Enquiry correspondence is kept while it is useful (typically the lifetime of the relationship plus a short administrative window). Newsletter subscriber records are kept until you unsubscribe. Server logs are kept for a short rolling window by the hosting provider for security and debugging.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or port your personal information; to object to or restrict its processing; and to withdraw your consent at any time. You can also unsubscribe from any email we send by using the unsubscribe link in that email, or by replying with "unsubscribe". To exercise any of these rights, email privacy@TBD.media.

If you believe we have not handled your information properly, you have the right to complain to your local data-protection regulator (in the UK, the Information Commissioner's Office at ico.org.uk ↗).

International transfers

Some of our service providers operate outside your country of residence. Where personal information is transferred internationally, we rely on the safeguards made available by those providers (for example, standard contractual clauses or equivalent transfer mechanisms).

Children

The Site is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has submitted information to us, email privacy@TBD.media and we will delete it.

Security

We use industry-standard measures to protect information in transit (HTTPS) and at rest, and we limit who can access it on our side. No method of transmission over the internet is completely secure; if you have reason to believe your information has been compromised, contact us right away.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the "Last updated" date at the top of this page, and — where required — we will notify subscribers by email.

Contact

Privacy questions: privacy@TBD.media.