PRIVACY POLICY

GrigCinema LLC — Agency & Client Services

Last Updated: March 4, 2026

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

OVERVIEW

This Privacy Policy applies to GrigCinema LLC ("GrigCinema," "we," "us," "our") and to all businesses and individuals ("Clients") who have entered into a service agreement with GrigCinema for the purpose of video production, photography, advertising creative, digital campaign management, lead generation, and related marketing services.

By engaging GrigCinema's services, Clients agree to this policy and authorize GrigCinema to collect, process, and handle data on their behalf as described below.

This policy also applies to any end users, leads, customers, or members of the public ("End Users") whose data is collected through campaigns, lead forms, websites, or other digital properties managed by GrigCinema on behalf of its Clients.

GrigCinema operates as both a data controller (for its own business data) and a data processor (for data collected on behalf of Clients). All data collection and processing activities are conducted in accordance with applicable law, including but not limited to applicable United States federal and Massachusetts state privacy regulations.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

1. WHO THIS POLICY COVERS

This policy covers three groups:

A) GrigCinema LLC

The agency itself — its website visitors, internal data practices, and business operations.

B) GrigCinema Clients

Any business or individual who has signed a service agreement with GrigCinema. By signing that agreement, Clients authorize GrigCinema to act as their data processor and to collect, manage, and use data on their behalf as outlined in this policy.

C) End Users

Any person whose information is collected through a campaign, lead form, landing page, advertisement, or digital property that GrigCinema manages on behalf of a Client. This includes but is not limited to homeowners, consumers, and prospective customers who submit information through Meta lead forms, website forms, or other lead capture tools.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

2. INFORMATION WE COLLECT

A) From GrigCinema Clients

— Full name and business name

— Email address and phone number

— Billing and mailing address

— Payment information (processed via secure third-party processors)

— Project files, footage, photos, scripts, brand assets, and creative materials

— Business location data and shoot location information

— Campaign performance data, ad account access, and analytics

B) From End Users (collected on behalf of Clients)

— Full name

— Phone number

— Email address

— Physical address or zip code

— Responses to qualifying questions submitted through lead forms or survey tools

— Device and browser data collected through pixels and tracking tools

— Location data where provided or inferred

C) From Website Visitors

— IP address

— Browser and device type

— Pages visited and time on site

— Referral source

— Cookie and tracking data

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

3. HOW WE USE THIS INFORMATION

A) For GrigCinema Clients

— To deliver contracted services including production, creative, and campaign management

— To communicate about projects, deliverables, revisions, and timelines

— To process invoices and payments

— To store and organize project assets

— To improve our services and internal workflows

B) For End Users (on behalf of Clients)

— To collect and deliver qualified leads to the Client whose campaign generated them

— To qualify, score, and segment leads based on form responses

— To route leads into Client CRM systems and sales pipelines

— To trigger automated follow-up communications on behalf of Clients

— To optimize advertising campaigns using pixel and conversion data

— To analyze campaign performance and improve targeting

C) For Website Visitors

— To analyze traffic and improve website experience

— To understand how visitors interact with our content

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

4. HOW WE SHARE INFORMATION

GrigCinema does not sell personal information to third parties under any circumstances.

We share information only in the following ways:

A) With the Client

All End User data collected through a Client's campaign is delivered to that Client and that Client only. No End User data is shared across Clients or used for any campaign other than the one through which it was collected.

B) With Advertising Platforms

Campaign data, creative assets, pixel data, and audience information is uploaded to and processed by platforms including Meta (Facebook and Instagram), Google, and other digital advertising networks as required to execute campaigns. These platforms operate under their own privacy policies and data use terms.

C) With Technology Service Providers

GrigCinema uses third-party tools for project management, file storage, CRM, payment processing, form building, and campaign management. These providers are bound by their own privacy policies and are only given access to data necessary to perform their function.

D) With the Client's CRM and Sales Systems

Lead data collected on behalf of a Client is automatically routed to the Client's designated CRM platform (such as GoHighLevel or equivalent) as part of campaign execution. This routing is authorized by the Client's service agreement with GrigCinema.

E) For Legal Compliance

We may disclose information when required by law, court order, or government authority, or to protect the rights, safety, or property of GrigCinema, its Clients, or the public.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

5. LEAD GENERATION AND META ADVERTISING

GrigCinema manages lead generation campaigns on behalf of Clients on platforms including Meta (Facebook and Instagram). When End Users submit information through a Meta lead form or landing page managed by GrigCinema:

— The End User's information is collected on behalf of the Client whose advertisement prompted the submission

— The Client is the ultimate data controller of that End User's information

— GrigCinema acts as the data processor facilitating collection and delivery

— End User data is delivered to the Client's CRM and sales pipeline

— End User data is not shared with any other Client or used for any other campaign

— GrigCinema's pixel and tracking tools may be used to measure campaign performance and optimize ad delivery

By submitting information through any lead form or campaign managed by GrigCinema, End Users consent to being contacted by the Client business whose campaign they responded to.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

6. CLIENT AUTHORIZATION AND RESPONSIBILITY

By entering into a service agreement with GrigCinema, each Client:

— Authorizes GrigCinema to collect, process, and manage data on their behalf

— Confirms they have the legal right to advertise their services in their target geography

— Agrees that this Privacy Policy governs the data practices of all campaigns GrigCinema runs on their behalf

— Accepts responsibility for how they subsequently use, store, and communicate with leads delivered to them by GrigCinema

— Acknowledges that GrigCinema is acting as their data processor and that the Client remains the data controller for all End User data collected through their campaigns

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

7. CREATIVE ASSETS AND PROJECT FILES

All project files, footage, photos, and creative assets provided by a Client remain the property of that Client.

GrigCinema retains completed deliverables for internal portfolio and archival purposes unless the Client requests otherwise in writing.

Raw footage and source files are retained for 90 days following project completion and may be deleted thereafter unless a separate archival agreement is in place.

GrigCinema may use completed deliverables for portfolio, case study, and promotional purposes unless the Client has requested confidentiality in their service agreement.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

8. DATA SECURITY

GrigCinema takes reasonable technical and organizational measures to protect all data from unauthorized access, loss, misuse, or disclosure including:

— Secure cloud storage with access controls

— Encrypted file transfer for sensitive assets

— Password-protected platforms and systems

— Limited internal access on a need-to-know basis

— Secure third-party payment processing

No method of electronic storage or transmission is 100% secure. While we take data protection seriously we cannot guarantee absolute security.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

9. DATA RETENTION

— Client contact and billing records: minimum 7 years per Massachusetts requirements

— Project files and creative assets: 90 days post-delivery unless otherwise agreed

— End User lead data: retained in Client CRM as directed by the Client

— Website analytics data: retained per the terms of the analytics platform used

— Campaign performance data: retained for the duration of the client relationship plus 1 year

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

10. YOUR RIGHTS

All individuals covered by this policy have the following rights:

— Access: Request a copy of personal information we hold about you

— Correction: Request correction of inaccurate or incomplete information

— Deletion: Request deletion of your personal information subject to legal retention requirements

— Portability: Request your data in a portable format

— Objection: Object to certain uses of your data

— Opt-Out: Opt out of future communications from a Client by contacting that Client directly or by contacting GrigCinema at the address below

To exercise any of these rights contact us at:

[email protected]

We will respond to all requests within 30 days.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

11. COOKIES AND TRACKING

Our website and Client campaign pages may use cookies, pixels, and similar tracking technologies to measure performance, optimize advertising, and improve user experience.

Tracking tools we may use include:

— Meta Pixel (Facebook/Instagram advertising)

— Google Analytics and Google Ads conversion tracking

— GoHighLevel and other CRM tracking tools

You may disable cookies through your browser settings. Opting out of ad tracking can be done through your device settings or through platform-specific opt-out tools provided by Meta and Google.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

12. CHILDREN'S PRIVACY

GrigCinema's services are intended for individuals 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has submitted information through any campaign or form we manage please contact us immediately at [email protected].

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

13. CHANGES TO THIS POLICY

We may update this policy periodically. The Last Updated date at the top reflects the most recent revision. For material changes we will notify active Clients by email at least 14 days before the change takes effect.

Continued use of GrigCinema's services following notification of changes constitutes acceptance of the updated policy.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

14. CONTACT

For any questions, concerns, or data requests related to this Privacy Policy:

GrigCinema LLC

Massachusetts, United States

Email: [email protected]

Website: grigcinema.com

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

This Privacy Policy was last updated March 4, 2026 and supersedes all previous versions.