Legal & privacy
Privacy Policy
This policy explains ECG's website and inquiry data practices and the choices available under laws such as the GDPR and the California Consumer Privacy Act, as amended.
Effective and last updated: July 15, 2026
1. Who we are and what this covers
Entertainment Creative Group Productions, Inc., doing business as ECG Productions (ECG, we, us, or our), is the controller or business responsible for personal information described in this policy. ECG is based in Atlanta, Georgia, United States. This policy applies to ecgprod.com, project inquiries, scheduling, website analytics, website chat or automated assistants, and telephone workflows connected to the site.
It does not replace a client's production agreement, release, employment notice, or another policy that expressly applies to a different relationship. A signed agreement controls if it conflicts with this website policy.
2. Notice at collection
The table below identifies the categories ECG may collect, examples, the purposes for collection and use, and the retention criteria. We collect information directly from you, automatically from your browser after any required choice, from service providers, and from public or business sources you direct us to review.
| Category | Examples | Purpose | Retention criteria |
|---|---|---|---|
| Identifiers and contact details | Name, email, phone, company, account or inquiry identifiers | Respond to requests, schedule calls, provide services, prevent abuse, maintain records | For the inquiry or business relationship and a reasonable period afterward based on legal, accounting, dispute, and operational needs |
| Project and commercial information | Project type, goals, budget range, timeline, message, source materials, services considered | Qualify and respond to an inquiry, prepare scope and follow-up, improve service | For the inquiry or resulting client relationship; longer where required for contracts, rights, disputes, or legal obligations |
| Internet and device activity | Page path, referrer, campaign parameters, device/browser data, user agent, screen size, session/visitor IDs, hashed IP address | Security, rate limiting, site operation, and—only with permission—analytics | Security records according to risk and legal needs; consent records and analytics according to the configured service periods and business need |
| Communications and audio information | Emails, chat content, call metadata, recordings or transcripts when notice and consent are provided | Respond, preserve project context, quality assurance, staff follow-up, and recordkeeping | For as long as needed for the conversation, relationship, quality review, disputes, or legal obligations |
| Professional information | Employer, role, company, business interests, project authority | Business-to-business communication, qualification, and service delivery | For the inquiry or business relationship and a reasonable period afterward |
| Inferences | Lead priority, likely project fit, spam signals, and suggested follow-up generated from the information submitted | Route inquiries and draft human-reviewed follow-up | Generally with the underlying inquiry record; reviewed and deleted under the same criteria |
ECG does not intentionally collect sensitive personal information through the public inquiry form and asks you not to submit government identifiers, financial credentials, health data, precise geolocation, account passwords, or similarly sensitive material. If a project requires sensitive information, contact ECG first so an appropriate method and agreement can be established.
ECG does not sell personal information for money. Analytics is disabled until the visitor permits it. Some laws may characterize certain analytics disclosures as a sale or sharing even without payment; you can reject those disclosures through Privacy Choices, and ECG honors Global Privacy Control signals.
3. How and why we use information
- Respond to inquiries, schedule conversations, prepare estimates or proposals, and take steps requested before a contract.
- Provide and improve production, post-production, animation, editorial, and related services.
- Protect the site, enforce terms, prevent fraud or spam, rate-limit abuse, and maintain security logs.
- Measure site performance and content effectiveness only when analytics permission has been granted.
- Comply with law, preserve evidence, resolve disputes, and establish or defend legal claims.
Where the GDPR applies, ECG relies on one or more of these legal bases: consent for optional analytics and other processing identified as optional; steps at your request before a contract and performance of a contract; legitimate interests in responding to business inquiries, securing and improving services, and maintaining appropriate records; and compliance with legal obligations. You may withdraw consent at any time without affecting processing already completed lawfully.
4. AI-assisted inquiry review and automated tools
ECG may use a configured AI service provider to analyze the text of a project inquiry for spam signals, likely project fit, priority, missing details, and a suggested response. The result assists staff; it does not accept or reject a client, set binding pricing, enter a contract, or make a decision with legal or similarly significant effects. ECG personnel remain responsible for follow-up and business decisions. You may request human review or ask ECG not to use AI for your inquiry by emailing info@ecgprod.com before submitting details.
5. Service providers and disclosures
ECG may disclose information to providers acting on its behalf or supporting a feature you choose to use, including:
- Render for website hosting and delivery; Supabase for database, authentication, and operational storage.
- Resend and email providers for inquiry and operational messages.
- Google Tag Manager and Google Analytics, only after analytics permission; Google Calendar for scheduling when enabled.
- Twilio, Deepgram, and ElevenLabs for telephone, voice-assistant, and transcription workflows when used with notice and consent.
- OpenAI or another configured AI provider for limited, human-reviewed inquiry analysis.
- Vimeo and YouTube when you choose to load or play embedded media.
- Professional advisers, authorities, transaction parties, or counterparties when reasonably necessary for law, safety, claims, or a corporate transaction.
Providers may process information in the United States or other countries. ECG uses contractual and technical safeguards appropriate to the service and, where required, approved transfer mechanisms such as Standard Contractual Clauses.
7. Your privacy rights
Depending on your location and applicable law, you may have rights to know or access personal information; obtain a portable copy; correct inaccurate information; delete information; restrict or object to processing; withdraw consent; opt out of sale, sharing, targeted advertising, or certain automated processing; limit use of sensitive personal information; and receive equal service without retaliation for exercising a right.
EEA and UK residents may also complain to their local supervisory authority. California residents may use an authorized agent where permitted. ECG may verify access, correction, portability, or deletion requests to protect information, but does not require identity verification to reject optional cookies or opt out on the current browser. Exceptions may apply when information is needed to complete a transaction, protect security, comply with law, or establish or defend claims.
Submit a request by emailing info@ecgprod.com or calling 1-(855) 787-4487. Include the right you want to exercise and enough information to locate relevant records. Do not send identity documents unless ECG specifically requests a secure verification method.
8. Security and retention
ECG uses safeguards designed for the nature of the information, including access controls, encrypted connections, role-based administrative access, rate limiting, restricted service credentials, audit/security logging, and provider security features. No internet system can guarantee absolute security.
ECG retains information only for as long as reasonably necessary for the disclosed purpose, a continuing business relationship, security and backup cycles, legal/accounting requirements, consent records, disputes, or claims. The amount and sensitivity of information and the risk of harm also inform retention. Information is deleted, deidentified, or isolated from ordinary use when it is no longer reasonably needed.
9. Children
The website is intended for business and production audiences and is not directed to children under 13. ECG does not knowingly sell or share personal information of consumers under 16. Contact ECG if you believe a child provided personal information through the site so it can be reviewed and deleted where appropriate.
10. Changes and contact
ECG may update this policy as services, providers, or laws change. Material changes will be identified by a new effective date and, where appropriate, an additional notice or renewed choice.
Privacy contact: Entertainment Creative Group Productions, Inc., Atlanta, Georgia, United States; info@ecgprod.com; 1-(855) 787-4487.