Privacy Policy

1. Who we are

This Privacy Policy explains how Morrison Media Group ("MMG," "we," "us," or "our") handles information in connection with this website, located at morrisonmedia.thegaygency.com (the "Site"). MMG is an impact media company founded by Tony Morrison. If you have questions about this policy or about how we handle information, you can reach us at HQ@thetonymorrison.com.

2. Scope of this policy

This policy covers the Site only. It does not cover any other website, including morrisonmediahq.com, the client and partner brands we work with, or third-party services we link to or embed, such as the Substack platform. Each of those has its own privacy practices, described in section 12 below.

3. Information we collect

We collect information in two ways.

Information you provide. The Site's contact form asks for your name, your email address, your organization (optional), and a message describing what you are reaching out about. We collect nothing else through the form. The form also includes an invisible field and a timing check that help us tell a real visitor from an automated bot; these do not collect information about you, they only confirm the submission looks human.

Information collected automatically. Like almost every website, ours runs on a hosting provider (Vercel Inc.) that automatically records standard server and access logs for every visitor: your IP address, your browser's user agent string, the page requested, and the time of the request. This is infrastructure-level logging that keeps the Site running securely; we do not layer any analytics, tracking pixels, or advertising technology on top of it. The Site sets no first-party cookies and does not use browser local storage.

4. How we use information

We use the information described above for two purposes: to respond to the inquiries you send us through the contact form, and to operate, secure, and troubleshoot the Site (for example, detecting and blocking automated abuse of the contact form). We do not use your information to build an advertising profile, and we do not use it for any purpose beyond these two.

5. Legal bases for processing (visitors in the EEA and UK)

If you are located in the European Economic Area or the United Kingdom, the law requires us to identify the legal basis on which we process your information. When you submit the contact form, we process your name, email, organization, and message on the basis of your consent, given by submitting the form, and on the basis of our legitimate interest in responding to inquiries about our work. We process server log data on the basis of our legitimate interest in keeping the Site secure and functioning correctly. You can withdraw consent at any time by contacting us, though this will not affect any response we have already sent.

6. Who we share information with

We do not sell your information, and we do not share it with third parties for their own marketing or advertising purposes. We do work with a small number of service providers who process information on our behalf, strictly to help us run the Site and respond to you:

• Vercel Inc., which hosts the Site and its serverless functions, and which generates the standard access logs described in section 3.
• Slack Technologies, Inc., whose messaging platform we use to receive an internal notification whenever someone submits the contact form, so a team member can read and respond to it promptly.

Both of these providers act as our processors: they handle the information only as needed to provide their service to us, not for their own purposes. We may also disclose information if required to do so by law, or to protect the rights, property, or safety of MMG, our team, or others.

7. How long we keep information

We keep contact form submissions for as long as needed to respond to your inquiry and, after that, for a reasonable period for our own business records, unless you ask us to delete it sooner. Server access log data is retained according to our hosting provider's standard operational defaults, after which it ages out automatically. We do not keep information indefinitely for no reason.

8. International data transfers

The Site is hosted in the United States, and our service providers process data there as well. If you are located outside the United States, your information will be transferred to and processed in the United States, which may not have the same data protection laws as your home country. By using the Site, you understand that your information will be processed in the United States as described in this policy.

9. Your privacy rights

Depending on where you live, you may have rights over the information we hold about you.

If you are in the EEA, the UK, or a jurisdiction with similar law (GDPR), you have the right to request access to your information, to request that we correct inaccurate information, to request that we delete your information, to object to or restrict our processing of it, and to request a copy of it in a portable format. You also have the right to lodge a complaint with your local data protection authority.

If you are a California resident (CCPA/CPRA), you have the right to know what personal information we have collected about you, to request that we delete it, and to request that we correct it. We do not sell or share personal information, as those terms are defined under California law, so there is no opt-out to exercise on that front. You will not receive discriminatory treatment for exercising any of these rights.

To exercise any of these rights, contact us at HQ@thetonymorrison.com. We will respond within a reasonable time and may ask you to verify your identity before acting on your request.

10. Children's privacy

The Site is not directed to children under 13, and we do not knowingly collect information from children under 13. If you believe a child has submitted information to us through the contact form, please contact us at HQ@thetonymorrison.com and we will delete it.

11. Security

We take reasonable steps to protect the information you share with us. The Site is served over an encrypted connection (HTTPS), so information you submit through the contact form is encrypted in transit. We also limit what we collect in the first place: the form asks only for what it needs to respond to you, nothing more. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we do not collect more than we need and we do not retain it longer than described in section 7.

12. Third-party links and embeds

The Site links out to a number of third-party destinations: MMG's original site at morrisonmediahq.com, press coverage from news outlets, our Instagram profile, and documents hosted on Adobe's platform. The Site's Press page also embeds a subscribe widget from Substack for Tony Morrison's newsletter, "Tony's Take." When you interact with that embed, Substack may set its own cookies or collect information under its own privacy policy, available at substack.com/privacy. We do not control, and are not responsible for, the privacy practices of morrisonmediahq.com, Substack, Instagram, Adobe, or any other third-party site we link to. We encourage you to review each site's own policy before sharing information with it.

13. Changes to this policy

We may update this policy from time to time, for example to reflect a change in how the Site works. When we do, we will update the effective date at the top of this page. We encourage you to review this page periodically.

14. Contact us

If you have questions about this Privacy Policy or about how we handle your information, contact Morrison Media Group at HQ@thetonymorrison.com.

Related: Cookie Policy · Terms of Use