Privacy Policy

Toca Media is an Arizona-based creative marketing agency. This policy explains how information is handled when you use our website, contact us, or engage us for creative and marketing services. It covers information we handle, not the independent practices of social media platforms or other third parties.

References to Toca Media, we, and us mean the business identified in the contact section below. This is a draft pending confirmation of business details and legal review.

Our contact form collects your name, business name, email address, phone number, business industry, services of interest, project type, business description, and goals. You may also provide your business website, Instagram handle, and preferred start date. Submitted inquiries are saved so they can be reviewed and answered.

If you communicate with us or become a client, information may also include other social media handles, correspondence, booking and project details, approvals, and media or materials you voluntarily supply, such as photographs, footage, logos, and brand assets. The current website does not provide online booking or a media-upload form. Please do not include passwords, payment card details, or unnecessary sensitive personal information in an inquiry.

When your browser connects to this website and its supporting services, those services receive network information needed to respond, including your IP address and information sent by your browser. This website also loads external fonts and hosted media, so the providers serving those resources receive the connection information required to deliver them.

The website includes error reporting for troubleshooting. An error report can contain an error message, stack trace, page address, and technical context. We have not confirmed all hosting-provider logging fields, device details, site-usage collection, or retention settings; this draft does not represent those unknown settings as verified practices.

Information you provide is used to handle inquiries, prepare proposals, communicate about projects, coordinate scheduling and approvals, and deliver agreed services. Relevant technical information may be used to troubleshoot errors, improve website reliability, and help maintain security.

If you request marketing communications, we may use the contact details you provide to send those communications, subject to applicable consent and opt-out requirements. Sending an inquiry alone is not a request to receive unrelated marketing. No newsletter subscription feature is currently offered on this website.

Any access to a client's social media accounts must be authorized by the client and limited to providing agreed services. Use of account access is subject to the relevant platform's rules and the client's written agreement. Where available, access should be provided through the platform's delegated business-access features rather than by sending a password.

This website's inquiry form does not request social media passwords or access tokens and does not connect client social accounts. Any future account-access process must be separately confirmed and documented; this policy makes no assurance about credential or token storage that has not been implemented and verified.

The website relies on hosting, a hosted inquiry database, error-reporting services, externally delivered fonts, and media delivery. These providers process information needed for their functions. The inquiry form submits your details to the hosted database; it is not an automated booking service.

Instagram, TikTok, and other platforms may be involved in a separately agreed client engagement. Their own privacy notices and terms govern information they collect independently. Additional production, scheduling, communication, or delivery tools used for an engagement should be disclosed as relevant before information is supplied to them. We do not list unverified vendors as current integrations.

No advertising pixel, analytics script, or cookie-consent control has been added to the website's current page code. That does not establish whether the hosting service or third-party resources use cookies or other storage; those published-service settings still need confirmation. We do not claim that this website is cookie-free or that a consent mechanism is available when none has been implemented.

You can manage cookies and site storage through your browser settings, although blocking necessary storage may affect functionality. Before introducing nonessential analytics or advertising tracking, we will assess applicable notice and consent requirements and provide any legally required controls. This draft does not treat continued browsing as consent to tracking that requires opt-in permission.

Information may be shared with service providers to the extent needed to operate the website, respond to requests, or carry out an agreed engagement. Client-approved content may be supplied to social platforms or other recipients as necessary to perform the client's instructions.

Information may also be disclosed when required by law, a valid legal process, or to protect rights, safety, and security. Any other disclosure must have an appropriate legal basis. This policy does not promise that information is never shared.

The website's inquiry storage is configured in the application to accept public submissions and restrict reading and updating inquiries to authorized administrators. The deployed access settings and operational safeguards must still be confirmed before adopting this policy. Access controls are one measure, not a guarantee of security; reasonable safeguards should be appropriate to the information and risks involved.

No website, network, or storage system is completely secure. We cannot guarantee that unauthorized access, loss, or interception will never occur. Do not send confidential credentials or particularly sensitive information through the contact form. Any additional security practices must be verified before they are represented as implemented.

Information is retained according to the need to respond to inquiries, manage client relationships, perform agreements, maintain relevant business records, resolve disputes, and comply with applicable law. The appropriate duration depends on the information and purpose; this policy does not set an unverified fixed retention period.

When information is no longer needed, it should be deleted or de-identified as appropriate. Backup and provider-held copies may follow separate processes. No automatic deletion schedule or immediate removal from backups is promised by this draft.

You may contact us to request access to, correction of, or deletion of information you supplied, or to stop requested marketing communications. We may need to verify your identity and authority before acting. Some information may need to be retained to meet legal obligations or protect legitimate rights.

Depending on your location and whether a law applies to this business, state laws may provide additional rights, including information about processing, access, correction, deletion, portability, or opting out of specified processing such as targeted advertising, sale, or sharing. For example, California residents may have rights under California privacy law if that law applies. Other states may provide an appeal or authorized-agent process. These rights are not represented as universally applicable; mandatory rights and response requirements will be honored where applicable, without unlawful discrimination for exercising them.

Use the contact details below for requests. The legal business identity, privacy contact, and state-law applicability must be confirmed before this draft is adopted. If the email placeholder has not yet been replaced, use the website's Contact page to submit a privacy inquiry rather than sending email to the placeholder.

This website is directed to businesses and adult clients, not children under 13. We do not knowingly seek personal information from children under 13 through the website. If you believe a child has supplied such information, contact us so the situation can be reviewed and appropriate removal steps taken. Any production involving minors requires appropriate permissions and compliance with applicable law.

If you follow a link to another website or social platform, its operator controls its own information practices. Review that operator's privacy notice before providing information. Toca Media does not control those independent sites.

We may update this policy as practices or legal requirements change. The effective date above identifies the version presented here. Where required, we will provide additional notice or obtain consent before applying a material change.

Legal business name: [Verified legal business name]. Location: Scottsdale, Arizona. Privacy contact: [Verified privacy and legal contact email].

These business details are pending verification. Until a verified email is provided, privacy inquiries can be submitted through our Contact page. This draft should be reviewed by a qualified attorney before adoption.