Skip to content
Cata Balzano, Inc.

Legal

Privacy Policy

What this site collects, why, how long it is kept, and what you can ask us to do about it.

Last updated: September 2026. This policy covers catabalzanoinc.com only. The company’s brand properties operate on their own domains under their own policies.

Who we are

Cata Balzano, Inc. is the controller of the information described here. The company is a multimedia production and publishing business that owns and operates a portfolio of brands. This site is its corporate site.

What you give us

The only information you actively provide is what you type into the contact form: your name, your email address, an optional company or organisation name, the type of enquiry, the brand or property your enquiry concerns, and your message.

There is no account to create, no newsletter signup, and no payment on this site. Please don’t send sensitive personal information — health details, government ID numbers, financial account numbers — through the form.

What is collected automatically

Like almost every website, the server that delivers these pages records ordinary technical information about each request: IP address, browser and device type, the page requested, and the time. This is standard server logging, used to keep the site running, diagnose errors and detect abuse.

The contact form also records how long the form was open before it was submitted, and whether a hidden field was filled in. Both are used solely to block automated spam, and neither identifies you.

Cookies and tracking

This site sets no cookies. It runs no analytics, no advertising pixels, no session replay and no cross-site trackers, and its fonts are served from this site rather than a third party — so loading a page here does not tell anyone else that you visited.

That is why you are not asked to accept a cookie banner. If any of this changes, this page will be updated first and any consent the law requires will be requested at that time.

Why we use it, and on what basis

Your contact-form information is used for one purpose: to read your enquiry and respond to it, and to keep a record of the correspondence. Technical logs are used to operate and secure the site.

Where the UK or EU GDPR applies, our lawful basis is legitimate interests — responding to people who contact us and keeping our site working and secure — and, where you have initiated a possible engagement, steps taken at your request prior to a contract.

What we never do with it

We do not sell, rent, trade or share your information for anyone else’s marketing. We do not add you to a mailing list because you sent an enquiry. We do not use your message to build a profile of you, and we do not use it to train any machine learning system.

Who else handles it

Running a website means a few service providers necessarily touch the data: the hosting provider that serves these pages and stores the server logs, and the email service that delivers form submissions to us and the mail provider that stores them.

These providers act on our instructions, for the purpose of delivering your message and operating the site, and nothing more. We may also disclose information where the law requires it, or where it is necessary to establish or defend a legal claim.

Where it is processed

The company is based in the United States and its service providers may process data in the United States or elsewhere. If you contact us from outside the US, your information will be transferred to and processed there. Where required, transfers rely on the safeguards our providers have in place, such as standard contractual clauses.

How long it is kept

Enquiries are kept for as long as the correspondence is useful and for a reasonable period afterwards for business records — and then deleted. Enquiries that lead to an engagement are kept with the records for that engagement. Server logs are kept for a short period for security and diagnostics.

Security

The site is served over HTTPS and form submissions are encrypted in transit. We limit who can read enquiries to the people who need to. No system is perfectly secure, so please use your own judgement about what you send.

Your rights

Depending on where you live, you may have the right to ask what information we hold about you, to have it corrected, to have it deleted, to object to or restrict how we use it, and to receive a copy in a portable format. Residents of California and other US states with privacy laws have comparable rights, including the right not to be discriminated against for exercising them.

Because we do not sell or share personal information for cross-context behavioural advertising, there is nothing for you to opt out of on that front — but you are welcome to confirm that with us.

To exercise any of these rights, use the contact form and say what you are asking for. We may need to verify who you are before we act. If you are in the UK or EU, you also have the right to complain to your local data protection authority.

Do Not Track

This site does not track you across other websites, so there is nothing for a Do Not Track signal to change. We honour it by default.

Links out, and other properties

This site links to the company’s brand properties and, occasionally, to third-party sites. Those sites collect information under their own policies. Fénix Animal Project is operated by Bentley’s Playhouse, a separate legal entity, and handles data under its own terms.

Children

This site is intended for a professional and general adult audience. It is not directed at children, and we do not knowingly collect information from them. If you believe a child has sent us information, contact us and we will delete it.

Changes to this policy

If this policy changes, the revised version will be posted here with a new date. Material changes will be described rather than slipped in quietly.

Contact

Questions about this policy, or about information we hold, go through the contact form. Choose “Other” as the type of enquiry and mention privacy in your message.