Skip to content
lach-logo-square

Privacy Policy

Last updated: October 2, 2026

This Privacy Policy explains how LACH Productions ("we," "us," or "our") collects, uses, and shares information when you visit lach.productions and lachproductions.com (the "Site"). The Site is a portfolio showcasing our user-generated content (UGC) work for brands and clients.

1. Information We Collect

Information you provide directly. When you submit a contact form, we collect the information you enter, which may include your name, email address, company or brand name, and the contents of your message. We only collect what you choose to submit.

Information collected automatically. When you visit the Site, certain information is collected automatically by our website hosting platform, HubSpot, and by our domain and network provider, Cloudflare, including your IP address, browser type, device type, operating system, referring URL, pages viewed, and the date and time of your visit. These providers may also set cookies or similar technologies to provide this functionality (see Section 4).

Information collected by reCAPTCHA. Our contact forms use Google reCAPTCHA to protect against spam and abuse. reCAPTCHA collects hardware and software information, such as device and application data, along with your IP address, and may read cookies, mouse movements, and other behavioral signals. This information is sent to Google for analysis. Your use of reCAPTCHA is subject to the Google Privacy Policy and Google Terms of Service.

Sensitive information. We do not request or intentionally collect sensitive data through the Site, such as racial or ethnic origin, religious beliefs, mental or physical health conditions, sexual orientation, citizenship status, genetic or biometric data, or precise geolocation. Please do not include this information in contact form submissions. If we ever need to process sensitive data, we will do so only with your prior, explicit consent. We also do not knowingly collect personal information from children (see Section 10).

2. How We Use Your Information

We use the information we collect to:

  • Respond to your inquiries and discuss potential collaborations
  • Manage business relationships and follow up on projects
  • Protect the Site and forms from spam, fraud, and abuse
  • Maintain, secure, and improve the Site, including by understanding overall traffic trends
  • Comply with legal obligations

We do not sell your personal information, and we do not use it for automated decision-making or profiling.

3. Who We Share Information With

We share information only with service providers that help us operate the Site and our business:

  • HubSpot, Inc. hosts the Site and stores contact form submissions in its systems. See HubSpot's Privacy Policy.
  • Cloudflare, Inc. is our domain registrar and routes Site traffic through its network, providing security protection and anonymous traffic analytics. See the Cloudflare Privacy Policy. 
  • Google LLC provides reCAPTCHA spam protection, as described above.
  • Microsoft Corporation provides cloud storage services where we store and back up production files and archives. See the Microsoft Privacy Statement.
  • TikTok USDS Joint Venture LLC provides CapCut, a video editing application with cloud storage, where we process, store, and back up project files. See the CapCut Privacy Policy.

We may also disclose information if required by law, to enforce our rights, or to protect the safety and security of the Site or others. If we ever sell or transfer our business, information may be transferred as part of that transaction.

4. Cookies and Similar Technologies

The Site uses cookies and similar technologies that are necessary for hosting, security, and form functionality, including cookies set by HubSpot, Cloudflare, and Google reCAPTCHA. HubSpot cookies may be used to recognize returning visitors and to associate form submissions with visit activity. Cloudflare may set cookies used for security and bot detection. 

We use Cloudflare's anonymous traffic analytics to understand overall Site traffic, such as page views and general visitor trends. We do not use advertising services on the Site. If our use of analytics or advertising changes, we will update this policy.

When you first visit the Site, a cookie banner lets you accept or decline non-essential cookies in accordance with applicable regional laws. You can also control cookies through your browser settings. Blocking certain cookies may affect Site functionality, including the ability to submit contact forms.

5. Content and Third-Party Links

The Site displays portfolio work we created for brands, which may include links to content on third-party platforms such as TikTok, Instagram, or YouTube. Those platforms have their own privacy practices and may collect information when you follow those links. We are not responsible for their practices, so please review their policies.

Portfolio pieces and testimonials may reference client or brand names with their permission. If you appear in portfolio content and want it removed, contact us using the details below.

6. Use of Artificial Intelligence in Client Work

This section applies to clients and prospective clients for whom we produce content. We distinguish between two kinds of AI.

Assistive AI. We use AI-powered features built into standard production software to speed up or refine work that we direct and create. Examples include:

  • Video editing: transcription, animation, and clip detection or cutting.
  • Photo editing: retouching and cleanup.
  • Text editing: script outlining, proofreading, and editing.

In these cases, a person at LACH Productions makes the creative decisions and reviews the output before anything is delivered.

Generative AI. We do not use generative AI to create original content on our behalf. We also do not use generative AI tools trained on our voices or likenesses, nor consent to such use, so that no synthetic version of us appears in client work.

Client materials and third-party tools. Assistive AI features live inside third-party applications, and when production assets (footage, images, scripts, audio, or other client-provided materials) are processed by those tools, their handling is governed by each provider's own privacy policy and terms. We choose providers whose data handling aligns with our privacy standards, and we make reasonable efforts to revisit those choices as providers' terms and practices change. However, we do not control how third-party providers collect, store, or use data, and to the fullest extent permitted by law, we are not responsible for their independent acts or omissions.

If you have questions about the tools used on your project, or do not consent to specific tools or AI features, contact us using the details in Section 13 before work begins.

7. Data Retention

Contact form submissions and correspondence. We keep contact form submissions and related correspondence for as long as needed to respond to you, manage any resulting business relationship, and meet legal or accounting obligations. Typically this is up to 2 years after our last communication. You can ask us to delete your information at any time (see Section 8).

Client assets and production files. When we produce content for a client, we may receive client materials such as footage, images, audio, scripts, brand assets, and project files, which serve as dependencies for reopening, revising, or re-exporting the finished work. We retain these materials for archival purposes, typically up to 2 years after project completion.

Archived materials are used only within the scope of the individual project agreement under which we received them. We do not use them for any other client, project, or purpose, and we do not repurpose them without the client's written permission. These materials may be backed up to third-party cloud storage services, whose own privacy policies govern how they handle stored data (see Sections 3 and 6). 

Clients may request deletion of their assets from our systems at any time by contacting us (see Section 13) or by clicking here. We will honor such requests within 30 days, except where we are required to retain materials by law or by the terms of the project agreement.

8. Your Rights and Choices

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate information.
  • Request deletion of your information.
  • Object to or restrict certain processing.
  • Receive a copy of your information in a portable format.
  • Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us using the details in Section 13. We may need to verify your identity before acting on a request.

Responses and appeals: We will respond to your request within 30 days. If we decline to take action, we will notify you of our reasons and explain how to appeal. To start an appeal, contact us using the details in Section 13, and we will respond within 60 days. If your appeal is denied, you may contact the Kansas Attorney General to file a complaint. You also have the right to lodge a complaint with your local data protection authority.

California residents: Under the CCPA/CPRA, you have the right to know what personal information we collect, request its deletion or correction, and opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined under California law, and we will not discriminate against you for exercising your rights.

Visitors in the EEA, UK, and Switzerland: Our legal bases for processing are your consent (when you submit a form), our legitimate interests (securing the Site and responding to business inquiries), and legal obligations. Your information may be processed in the United States and other countries. We use service providers that protect these transfers with appropriate safeguards as described in their own privacy policies and data processing terms.

9. Security

We use reasonable measures to protect your information, and our service providers maintain their own security safeguards (see Section 3). No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Children's Privacy

The Site is not directed to children under 13 (or under 16 in some jurisdictions), and we do not knowingly collect their personal information. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information immediately. If you believe a child has submitted information through the Site, contact us using the details in Section 13. 

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date above shows when it was last revised, and material changes will be posted on this page.

12. Governing Law

This Privacy Policy is governed by the laws of the State of Kansas, without regard to its conflict of law principles. Any dispute arising under this policy will be subject to the exclusive jurisdiction of the state and federal courts located in Kansas, except where applicable law gives you the right to bring a claim in another venue or to contact a regulator.

13. Contact

Questions or requests about this policy:

LACH Productions

hello@lach.productions