Privacy Policy

This Privacy Policy explains how Jaime Boy Entertainment Inc. ("Jaime Boy Entertainment", "we", "us" or "our") collects, uses, discloses and protects personal information. It applies to our website, the applications you submit through it, our events, shows, shoots and other productions, and the internal tools our team uses to run them (together, our "Services").

"Personal information" means information about an identifiable individual. We are based in Toronto, Ontario, and we handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and the other privacy laws that apply to us. Please read this policy together with our Terms of Service.

1. Who is responsible for your information

Jaime Boy Entertainment Inc. is responsible for the personal information under its control, including information we pass to service providers to process on our behalf. We have designated a Privacy Officer who is accountable for our compliance with this policy and with applicable privacy law. You can reach our Privacy Officer at [email address to be confirmed].

2. Information we collect

Information you give us

When you apply to work with us, contact us or take part in a production, you may give us:

• Identity and contact details: your first and last name, email address, phone number, city, and social media handles such as your Instagram account.
• Professional information: portfolio links, photographs, lookbooks and other files you upload; your experience, previous shows or shoots, agency, disciplines and interests; your availability; and the productions you are applying for.
• Measurements: if you choose to provide them. They are optional, and we use them only for casting and fittings.
• Age and consent confirmations: whether you are 18 or older, or applying with the consent of a parent or guardian.
• Business information: if you apply as a designer, brand, sponsor, partner or venue, the name of your label, company or venue, your role, website and social media accounts, goals, interests, audience, timelines and indicative budget, and details of your venue such as its address, capacity, facilities, availability and photographs.
• Communications: the messages you send us by email, direct message or otherwise, and records of our conversations with you.
• Anything else you choose to share, such as how you heard about us.

Information we collect automatically

When you visit our website, our hosting providers automatically process technical information such as your IP address, browser type, device information, the pages you request and the date and time of your visit. This happens in server logs that are used to deliver, secure and troubleshoot the website.

When you submit an application, we also record how you reached us, such as the web page that referred you and any campaign tags in the link you followed, and the time you started the form, which helps us detect automated spam. Section 12 explains how our website uses your browser's storage.

Information from other sources

We may receive or collect personal information about you from:

• ticketing platforms such as Eventbrite, when you buy a ticket to one of our events: your name, email address, phone number and city, and details of your order, such as the event, the number of tickets, the amounts paid and fees charged, and the type of payment. We do not receive your full payment card number;
• designers, photographers, stylists, venues and other collaborators who recommend you or who worked with you on a production;
• publicly available sources, such as the public profiles, portfolios and websites of creative professionals. For the people we work with, we store the public details of their Instagram profile (such as the username, follower counts and profile picture) to keep our records current;
• the photographers and videographers who document our productions; and
• records we created before this website launched, including in the tools we previously used to manage our productions and contacts.

Information we create

In the course of reviewing applications and planning productions, our team creates records about the people we work with, such as notes, internal assessments and ratings, casting decisions, invitations, attendance, credits and a history of our communications. These records are personal information, and we handle them in accordance with this policy.

Photographs, video and audio

Our events, shows and shoots are photographed and filmed by us and by the photographers and videographers we work with. If you take part in or attend a production, you may appear in these images and recordings. Section 6 explains how we publish them and how you can ask us to remove them.

3. How we use personal information

We use personal information to:

• receive, review and respond to applications, and consider you for current and future productions;
• cast, plan, produce and promote our shows, shoots, events and other productions, including fittings, scheduling and logistics;
• manage ticketing, guest lists and admission for our events, and understand attendance and ticket sales across them;
• communicate with you about your application, a production you are involved in, or a request you have made;
• credit the people who make our work, and publish photographs, video and credits from our productions;
• manage our relationships with designers, brands, sponsors, partners and venues;
• operate, maintain, secure and improve our website and internal tools, and prevent spam, fraud and misuse;
• keep business records, meet our legal, accounting and regulatory obligations, and establish, exercise or defend legal claims; and
• fulfil any other purpose we tell you about when we collect the information, or to which you consent.

We do not sell personal information, and we do not use it for targeted advertising. We do not make decisions about you based solely on automated processing: people on our team review every application. If we want to use personal information for a new purpose, we will ask for your consent first, unless the law permits or requires us to proceed without it.

4. Consent

We collect, use and disclose personal information with your knowledge and consent, except where the law permits or requires otherwise. The form of consent depends on the circumstances and on the sensitivity of the information:

• When you submit an application, you give us express consent to use the information in it for the purposes described in this policy, including contacting you about your application.
• When you attend or take part in a production, you consent to being photographed and filmed as described in section 6, subject to your right to ask us to remove images of you.
• In other cases your consent may be implied, for example when you give us your contact details and ask us to follow up with you.

You may withdraw your consent at any time on reasonable notice, subject to legal and contractual restrictions. If you do, we may no longer be able to consider your application or include you in a production. Withdrawing consent does not affect what we did while your consent was in place, such as images already published, although you can still ask us to remove them.

5. Children and young people

Our website is not directed at children, and we do not knowingly collect personal information from children under 13. If we learn that we have, we will delete it.

Applicants under 18 may apply only with the consent of a parent or legal guardian. We may ask the parent or guardian to confirm that consent and to take part in any communications and agreements about a production. We will not knowingly publish images of anyone under 18 without the consent of their parent or guardian.

If you believe that a young person has given us personal information without the consent required, please contact us and we will take appropriate steps.

6. Photographs, video and credits

We photograph and film our productions to document and promote our work. We may publish these images and recordings, with the names or social media handles of the people who made the work (such as designers, models, photographers and other creatives), on our website, on our social media accounts and in other promotional material. People taking part in shows and shoots may also sign separate releases, which govern their appearance together with this policy.

We publish images and credits only after our team has approved them for publication. If you appear in an image we have published, or we have credited you, and you would like the image removed or the credit changed, contact us at [email address to be confirmed]. We will review every request promptly and, where we are able to, remove or correct the content on the channels we control. We cannot recall copies that other people have already downloaded or shared, and photographers may hold their own rights in their work.

7. When we share personal information

We share personal information only as described in this policy:

• Service providers. We use trusted providers to host and run our Services, including website hosting (Vercel), our database, file storage and sign-in (Supabase), and email delivery (for example Resend and Google). They process personal information on our behalf, under contractual obligations to protect it and to use it only to provide their services to us.
• Collaborators on a production. If you are involved in, or being considered for, a production, we may share relevant information with the designers, photographers, stylists, venues, sponsors and other collaborators working on it. For example, we may share a model's name, photographs and measurements with a designer for casting and fittings. We share only what they need.
• Public credits. We publish names and social media handles as credits for published work, as described in section 6.
• Legal and safety reasons. We may disclose personal information where the law requires or permits it, for example to comply with a subpoena, warrant or court order, to respond to a lawful request from a government authority, to investigate or prevent fraud, a security incident or a breach of our Terms of Service, or to protect the rights, property or safety of our participants, guests, team or the public.
• Business transactions. If we are involved in a proposed or completed sale, merger, financing or other transfer of all or part of our business, we may share personal information with the other parties as the law permits, subject to confidentiality obligations.
• With your consent. In any other case, we share personal information only with your consent.

8. Where your information is stored

We are based in Canada, but our service providers store and process personal information in the United States, and may do so in other countries. While it is outside Canada, your information is subject to the laws of the country where it is held, and it may be accessible to the courts, law enforcement and national security authorities of that country. We apply the safeguards described in section 10 wherever your information is processed. If you have questions about our cross-border practices, contact our Privacy Officer.

9. How long we keep it

We keep personal information only for as long as we need it for the purposes described in this policy, or for as long as the law requires. In particular:

• We keep applications so that we can consider you for current and future productions. You can ask us to delete your application at any time.
• We keep records of productions you took part in, including credits and published work, for as long as the work forms part of our portfolio and our business records.
• We keep ticket orders and guest lists as part of our event and accounting records.
• We keep accounting, tax and contract records for as long as the law requires.
• Where we have used personal information to make a decision about you, we keep it long enough for you to be able to request access to it.

When we no longer need personal information, we securely delete or destroy it, or anonymize it.

10. How we protect it

We use administrative, technical and physical safeguards that are appropriate to the sensitivity of the information, including:

• access controls, enforced by our database, that limit each team member to the information their role requires;
• private storage for the files you upload with an application, which our team can open only through secure links that expire;
• encrypted connections (HTTPS) between your browser and our website;
• secure sign-in for our team, with two-factor authentication available, and a record of changes made in our internal tools; and
• confidentiality obligations for our team and our service providers.

No method of transmission or storage is completely secure, so we cannot guarantee the absolute security of your information. If a breach of security safeguards involving your personal information creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as the law requires, and we keep a record of every breach of security safeguards.

11. Your rights and choices

Subject to limited exceptions set out in law, you have the right to:

• Access the personal information we hold about you, and to be told how it has been used and to whom it has been disclosed;
• Correct personal information that is inaccurate or incomplete;
• Withdraw your consent, as described in section 4;
• Ask us to delete your application, or other personal information we no longer need; and
• Complain about how we handle your personal information.

To make a request, contact our Privacy Officer at [email address to be confirmed]. We may need to verify your identity before we respond, and we may ask for details that help us find your information. We will respond within 30 days, or tell you within that time if we need longer, as the law allows. Requests are free in most cases; if a request would involve a cost, we will tell you before we proceed. If we cannot fully grant a request, for example because the information also concerns another person or is legally privileged, we will explain why.

If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

If you live outside Ontario or Canada

Depending on where you live, you may have additional rights under local law:

• Quebec. Residents of Quebec have rights under the Act respecting the protection of personal information in the private sector, including the right to data portability.
• European Economic Area and United Kingdom. Where the GDPR or UK GDPR applies to our handling of your information, our legal bases are your consent, the performance of a contract with you, our legitimate interests in producing and promoting our work, and compliance with our legal obligations. You may also have the right to restrict or object to processing, to data portability, and to complain to your local data protection authority.
• United States. Some state laws give residents rights over their personal information. We do not sell personal information or share it for cross-context behavioural advertising.

We will honour these rights where the law that grants them applies to us.

12. Cookies and similar technologies

We keep our use of browser technologies to a minimum:

• Our public website does not use advertising or analytics cookies, and it does not track you across other websites.
• The home page stores a small flag in your browser's session storage so that its opening animation plays only once per visit. The flag contains no personal information and is cleared when you close your browser.
• Team members who sign in to our internal tools receive essential cookies that keep them securely signed in, and their browsers may store an offline page for those tools.

If we introduce analytics or other non-essential technologies, we will update this policy first and, where the law requires, ask for your consent.

13. Emails and other messages

We send messages about your application, a production you are involved in or a request you have made. We will send you promotional messages, such as event announcements or newsletters, only if you have agreed to receive them or Canada's Anti-Spam Legislation otherwise allows it, and every promotional email will tell you how to unsubscribe.

If you contact us through Instagram or another platform, that platform's own terms and privacy policy also apply to your messages.

14. Other websites and platforms

Our website links to other websites and platforms, such as Instagram and the websites of the designers, brands and venues we work with. We are not responsible for their content or privacy practices. Please read their privacy policies before you give them personal information.

15. Changes to this policy

We may update this policy from time to time. When we do, we will post the updated version on this page and change the "Last updated" date above. If we make a significant change to how we handle personal information, we will take reasonable steps to let you know, and we will ask for your consent where the law requires it.

16. How to contact us

If you have a question, request or complaint about this policy or about how we handle personal information, contact our Privacy Officer at Jaime Boy Entertainment Inc., Toronto, Ontario, Canada, by email at [email address to be confirmed].