This Privacy Policy explains how FROGGY x MEDIA ("Froggy x Media", "we", "us" or "our") collects, uses, shares and protects personal data when you visit froggyxmedia.com (the "Site"), contact us, or engage us for production, content, social media, real estate or web services (the "Services").
We are based in Cyprus and process personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, the "GDPR") and Cypriot data protection law. For the purposes of the GDPR, Froggy x Media is the data controller of the personal data described in this policy.
1. Who we are and how to reach us
If you have any question about this policy, or wish to exercise any of the rights set out in Section 8, contact us using any of the following:
- Email: [email protected]
- WhatsApp / phone: +357 99 116762
- Website: froggyxmedia.com
We aim to respond to every privacy request within 30 days, as required by the GDPR.
2. The personal data we collect
2.1 Information you give us
When you complete the contact form on the Site, message us on WhatsApp, email us, or engage us for a project, we collect the information you choose to provide. Typically this includes:
- Your name
- Your brand, business or company name
- Your email address
- The service you are interested in (Production, Photo & Video, Content Creation, Social Media, Real Estate, Website D&D)
- Any additional details you include in your message or during our correspondence
- Where we are engaged for a project: billing details, project briefs, brand assets, and any material you supply to us
2.2 Information collected automatically
When you visit the Site, our hosting infrastructure and any analytics or third-party services in use may collect technical information automatically, such as:
- IP address (which may be truncated or anonymised)
- Browser type and version, operating system and device type
- Referring page and pages viewed on the Site, plus time and date of visit
- Approximate location derived from IP address (typically at country or city level)
Some of this information is collected through cookies and similar technologies. See our Cookie Policy for full details and for how to control them.
2.3 Photography, video and production footage
In the course of delivering Services we create photographic and video material that may contain images of identifiable individuals — clients, staff, participants, members of the public at events, or occupants and neighbours of properties. Where such material constitutes personal data, we process it in order to perform our contract with the commissioning client and on the basis of our legitimate interest in producing and delivering the commissioned work. Where required by law, or where we intend to use such material in our own portfolio or marketing, we obtain a separate release or consent.
2.4 Aerial and drone footage
Where a project includes aerial drone photography or videography, we operate in accordance with the applicable Cypriot and European civil aviation rules on unmanned aircraft, including restrictions on flying over people, private property and restricted airspace. Drone footage is captured for the commissioned purpose only, and incidental images of individuals or private property are excluded, blurred or removed from delivered material where they are not necessary to the project.
2.5 What we do not collect
We do not deliberately collect special categories of personal data (such as data revealing health, religion, political opinions, trade union membership, sexual orientation, or biometric or genetic data). Please do not send us such information unless we have specifically asked for it in the context of a project.
Our Site and Services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
3. Why we use your personal data, and our legal basis
| Purpose | Data used | Legal basis (GDPR Art. 6) |
|---|---|---|
| Responding to your enquiry and preparing a quotation | Name, brand, email, service selected, message content | Steps taken at your request prior to entering a contract (Art. 6(1)(b)) |
| Delivering the Services and managing the project | Contact details, project briefs, supplied material, correspondence | Performance of a contract (Art. 6(1)(b)) |
| Invoicing, accounting and tax records | Name, business details, billing information | Legal obligation (Art. 6(1)(c)) |
| Operating, securing and improving the Site | Technical and usage data, server logs | Legitimate interests (Art. 6(1)(f)) — running a secure and functional website |
| Analytics and audience measurement (Google Analytics) | Usage data, cookie identifiers, the fact that an enquiry was sent and the service chosen | Consent (Art. 6(1)(a)), given through the cookie banner |
| Measuring our advertising and showing our ads to past visitors (Google Ads, Meta Pixel) | Pages viewed, cookie identifiers, IP address and browser data, the fact that an enquiry was sent or a WhatsApp chat started; for Google Ads only, a hashed version of the email address entered in the enquiry form | Consent (Art. 6(1)(a)), given through the cookie banner |
| Showcasing completed work in our portfolio and on social media | Produced photo and video material, client name and logo | Consent or contractual agreement with the client (Art. 6(1)(a) / (b)) |
| Publishing client testimonials | Name, role, organisation, quoted text, image or logo | Consent (Art. 6(1)(a)) |
| Establishing, exercising or defending legal claims | Any relevant records | Legitimate interests (Art. 6(1)(f)) |
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
4. Marketing communications
We do not add you to a marketing mailing list simply because you contacted us. If we send you occasional updates about our work or services, we will do so either with your consent or because you are an existing client and the message concerns similar services. Every marketing message includes a way to unsubscribe, and you can opt out at any time by emailing [email protected].
5. Who we share personal data with
We do not sell personal data. We share it only where necessary, with:
- Hosting and infrastructure providers — the company hosting froggyxmedia.com and its mail services, which process form submissions and server logs on our behalf
- Content delivery and font providers — the Site loads scripts and fonts from third-party networks (see the Cookie Policy), which necessarily receive your IP address in order to serve those files
- Google reCAPTCHA v3 — our contact form is protected against automated spam by Google reCAPTCHA, which receives your IP address and device and interaction data in order to return a spam score. We rely on our legitimate interest in keeping the form usable. See Google's Privacy Policy and Terms of Service
- Google (Analytics and Ads) — Google Ireland Limited receives usage data from the Site to produce statistics for us and, if you accept marketing cookies, to measure and target our Google ads. If you accept marketing cookies and send an enquiry, Google may also receive a hashed (one-way encrypted) version of your email address, used only to match the enquiry to our ads ("enhanced conversions"). Without your consent it receives only cookieless signals, as explained in the Cookie Policy
- Meta (Instagram and Facebook) — only if you accept marketing cookies, Meta Platforms Ireland Limited receives the pages you view and the fact that you sent an enquiry or started a WhatsApp chat, to measure and target our ads. We and Meta are joint controllers for collecting that data and passing it to Meta; what Meta does with it afterwards is governed by Meta's Privacy Policy. Your name, email and message are never sent to Meta, and your name and message are never sent to Google
- Messaging platforms — if you choose to contact us via WhatsApp, your message is processed by WhatsApp under its own privacy policy
- Social media platforms — where we publish work, your interactions with our profiles are governed by those platforms' own policies
- Professional advisers — accountants, auditors and lawyers, where required
- Subcontractors and freelancers — production crew, editors and developers engaged on a specific project, bound by confidentiality obligations
- Public authorities — where disclosure is required by law
All processors acting on our behalf are bound by written agreements requiring them to process personal data only on our instructions and to apply appropriate security measures.
6. International transfers
Some of the providers described above are established outside the European Economic Area, including in the United States. Where personal data is transferred outside the EEA, we rely on an adequacy decision of the European Commission (for Google and Meta in the United States, the EU-US Data Privacy Framework) or, where none applies, on Standard Contractual Clauses approved by the European Commission, together with any additional safeguards required. You may request a copy of the relevant safeguards by contacting us.
7. How long we keep personal data
| Category | Retention period |
|---|---|
| Enquiries that do not become projects | Up to 24 months from last contact, then deleted |
| Client project records and correspondence | Duration of the engagement plus 6 years |
| Invoices and accounting records | As required by Cypriot tax and company law (currently 6 years) |
| Produced photo and video material | Archived for the term agreed with the client; portfolio material retained while consent stands |
| Website server logs | Typically up to 12 months |
| Cookie and analytics data | As set out in the Cookie Policy |
Where we no longer need personal data, we delete it or irreversibly anonymise it.
8. Your rights
Under the GDPR you have the right to:
- Access — obtain confirmation of whether we process your personal data and receive a copy of it
- Rectification — have inaccurate or incomplete data corrected
- Erasure — have your data deleted where there is no overriding reason for us to keep it
- Restriction — ask us to limit how we use your data in certain circumstances
- Portability — receive data you provided to us in a structured, machine-readable format, or have it sent to another controller
- Object — object to processing based on our legitimate interests, and object at any time to direct marketing
- Withdraw consent — where processing is based on consent
- Not be subject to automated decision-making — we do not carry out automated decision-making or profiling that produces legal or similarly significant effects
To exercise any of these rights, contact us at [email protected]. We may ask you to verify your identity before acting on a request. Exercising your rights is free of charge, unless a request is manifestly unfounded or excessive.
9. Complaints
If you are not satisfied with how we have handled your personal data, we would like the chance to put it right, so please contact us first. You also have the right to lodge a complaint with the Cypriot supervisory authority:
- Office of the Commissioner for Personal Data Protection (Cyprus) — dataprotection.gov.cy
If you are resident in another EU or EEA country, you may instead complain to your local supervisory authority.
10. How we protect personal data
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. These include encrypted connections (HTTPS) across the Site, access controls on our hosting control panel and project storage, restricted access on a need-to-know basis, and confidentiality obligations for anyone working on our projects. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the supervisory authority and, where required, you directly.
11. Third-party links
The Site contains links to third-party websites and social media profiles. We are not responsible for the privacy practices or content of those sites. We encourage you to read their privacy policies before providing them with personal data.
12. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The version in force is always the one published on this page, with the "Last updated" date shown above. Where changes are significant, we will take reasonable steps to bring them to your attention.