Privacy Policy

01Who this covers

Playbook MG, Inc. ("Playbook MG", "we", "us", "our") is a public relations and influencer marketing agency based in Brooklyn, New York. This policy explains what personal information we collect, why we collect it, who we share it with, and what rights you have over it.

It applies to playbookmg.com and any other site we operate (the "Site"), to the services we provide to clients including media relations, influencer and creator campaigns, content production, go to market strategy, and paid and earned media programs (the "Services"), and to information we collect offline in the course of running our business, such as at events and in meetings.

It does not apply to third party sites, platforms, or services, even where you reach them through us. Social platforms, publishers, wire distribution services, and creators we work with each operate under their own privacy policies. Read those separately.

02What personal information means

In this policy, "personal information" means information about an identifiable individual, including information that can reasonably be linked to a person, a household, or a device. Where we hold information that cannot identify anyone, alone or in combination with other information we hold, this policy does not apply to it.

03Whose information we hold

Our work puts us in contact with several groups of people, and what we hold differs by group. We hold personal information about:

• Site visitors and enquirers. People who browse the Site or contact us through it.
• Clients and client teams. The individuals at the brands and organizations that engage us.
• Prospective clients. Business contacts we identify and approach about working together.
• Journalists, editors, producers, and media contacts. The professionals we pitch stories to on behalf of clients.
• Creators, influencers, and talent. People we work with, consider, or evaluate for campaigns.
• Vendors, partners, and event attendees. The people we coordinate with to deliver campaigns and run events.
• End consumers, where a client asks us to process their data. For example, entrants to a promotion or subscribers to a client list, which we handle on that client's instructions. See section 8.

04What we collect

Information you give us

• Contact details such as name, email address, telephone number, mailing address, and company.
• Professional details such as job title, outlet or brand, market, beat or vertical, and preferred contact method.
• Anything you write to us in a form, an email, a message, or a call.
• Information you provide to take part in a campaign, an event, or a survey.
• [IF APPLICABLE: payment and billing details, which are processed by [PAYMENT PROCESSOR] and not stored by us.]

Information we collect automatically

• [IF YOU RUN ANALYTICS: IP address, approximate location derived from it, browser and device type, operating system, pages viewed, referring source, and time on page, collected through [ANALYTICS PROVIDER].]
• [IF YOU RUN EMAIL TRACKING: whether an email we sent was opened and whether links in it were clicked, collected through [EMAIL PLATFORM].]

Information about media and creator contacts

• Professional contact details, outlet or platform, beat, coverage history, and past interactions with us.
• Public social media profile information such as handles, display names, and public follower and engagement metrics.
• Notes our team records about relevance, preferences, and stated contact preferences, including any request not to be contacted.

Client data

• Personal information a client transmits to us or authorizes us to obtain in order for us to deliver the Services ("Client Data"). We access, store, and use Client Data only to provide the Services to that client and to support them in doing so.

Where the law permits or requires it, we may collect information about you without your knowledge or consent. Any information we collect may be de-identified or aggregated, and once de-identified we do not attempt to re-identify it.

05Where we get it

We collect personal information directly from you, and also from other sources. Those sources are:

• Publicly available professional sources, including bylines, mastheads, outlet staff pages, public speaker listings, and public business directories.
• Public social media profiles and creator marketplaces.
• Licensed media and business contact databases, including [MEDIA DATABASE PROVIDERS], and wire distribution services, including [WIRE SERVICE].
• Our clients, where they share contacts or Client Data with us.
• Referrals and introductions from mutual contacts.
• [IF APPLICABLE: our own analytics and advertising tools.]

If we obtained your information from somewhere other than you and you want to know exactly where, ask us and we will tell you.

06How we use it

• To respond to enquiries and to decide whether we can help.
• To deliver, administer, and improve the Services, including pitching stories, running campaigns, briefing creators, and reporting results to clients.
• To manage our relationship with you, including scheduling, invoicing, and support.
• To build and maintain relevant, accurate contact records so that the outreach we do is targeted rather than indiscriminate.
• To understand how the Site is used and improve it.
• [IF APPLICABLE: to send marketing communications about our own services, subject to section 10.]
• To protect against error, fraud, and misuse of our systems.
• To meet legal, tax, accounting, and regulatory obligations.
• For any other purpose you consent to.

We do not use personal information to train third party artificial intelligence models, and we do not permit our vendors to do so with information we provide to them. [CONFIRM THIS AGAINST YOUR ACTUAL VENDOR CONTRACTS AND INTERNAL TOOLING BEFORE PUBLISHING.]

07Our legal basis

Where data protection law requires us to identify a legal basis for processing, including under the EU and UK General Data Protection Regulation, we rely on the following:

• Contract. To provide services a client has engaged us for, and to take steps at your request before entering an agreement.
• Legitimate interests. To run and grow a communications business, which includes holding professional contact details for journalists, creators, and business contacts and approaching them with relevant material. We weigh that interest against your rights before we do it, we keep the data limited to what is professionally relevant, and we stop on request.
• Consent. Where you have opted in, for example to marketing emails or to non-essential cookies. You may withdraw consent at any time. Withdrawal does not affect processing already carried out, and we will tell you if withdrawal limits what we can do for you.
• Legal obligation. Where we are required to keep or disclose information by law.

We will not require you to consent to collection, use, or disclosure beyond what is needed for the purpose we have told you about, as a condition of providing a service.

08Controller and processor

For information we collect for our own purposes, such as Site enquiries, our media and creator contact records, and our own marketing, we are the controller. This policy governs it.

For Client Data that a client sends us or authorizes us to obtain so that we can deliver their campaign, we act as a processor on that client's instructions. In that role the client's own privacy policy governs the information, we handle it under our agreement with them, and requests to access or delete it are directed to that client. If you contact us about data we hold as a processor, we will pass your request to the relevant client and support them in answering it.

09Who we share it with

We do not sell personal information, and we do not share it with third parties for their own marketing purposes.

We share personal information with:

• Service providers who process it on our behalf, including [HOSTING PROVIDER], [EMAIL PROVIDER], [CRM], [ANALYTICS PROVIDER], [WIRE DISTRIBUTION SERVICE], and [PAYMENT PROCESSOR]. They act on our instructions under contracts that require a comparable level of protection and prohibit using the information for their own purposes.
• Clients, where the information is part of the work we deliver for them, such as coverage reports and campaign results. [STATE WHETHER YOU SHARE JOURNALIST CONTACT DETAILS WITH CLIENTS OR ONLY OUTCOMES.]
• Creators and partners, where a campaign requires it and to the extent needed to run that campaign.
• Professional advisors, such as our lawyers and accountants.

We may also disclose personal information where we believe in good faith that disclosure is necessary to comply with applicable law, to respond to a subpoena, warrant, or court order, to protect the rights or property of Playbook MG or the people who use our Services, or to protect the safety of any person.

If Playbook MG is involved in a merger, acquisition, financing, or sale of all or part of its business or assets, personal information may be transferred as part of that transaction so that the services you receive can continue. We will require the receiving party to honor the commitments in this policy.

We may share aggregated or de-identified information, for example figures showing how our Site or our campaigns perform in general. That information cannot identify you.

10Marketing and outreach

We send two kinds of email that are not replies to something you sent us:

• Business development email to professional contacts at brands and organizations we think we can help. Every one of these includes a working unsubscribe link and our postal address, and we honor unsubscribe requests promptly.
• Media pitches to journalists and media contacts about stories we believe are relevant to what they cover. See section 11.

You can opt out at any time using the unsubscribe link in any email or by writing to team@playbookmg.com. Once you opt out we suppress your address rather than delete the record, so that we do not contact you again by mistake. If you would prefer full deletion, say so and we will delete instead.

We do not disclose your information to anyone else so that they can market to you.

11Journalists and media contacts

Media relations is a core part of what we do, which means we hold professional contact details for reporters, editors, producers, and bookers, and we contact them with material relating to our clients.

We keep these records accurate and current, we correct them when we learn a contact has moved or changed beat, and we remove contacts who have gone inactive or asked not to hear from us.

12Creators and talent

To match creators to campaigns we review public profile information, including handles, display names, content, and public audience and engagement metrics, and we keep notes on fit, category, and market. Where we work with a creator directly we also hold the contact, contractual, and payment information needed to run and pay for the collaboration.

Creators can ask us at any time to see what we hold, correct it, or delete it, using the contact details in section 22. [IF YOU RUN A CREATOR ROSTER OR TALENT DATABASE, DESCRIBE HOW CREATORS OPT IN AND OPT OUT, AND WHETHER PROFILES ARE SHOWN TO CLIENTS.]

[IF APPLICABLE: creators must be 18 or older to work with us. Where a campaign involves a minor, we work only through a parent or legal guardian and only with their documented consent.]

13Social platform data

[COMPLETE THIS SECTION ONLY IF YOU CONNECT TO PLATFORM APIS. IF YOU DO NOT, REPLACE IT WITH A STATEMENT THAT YOU ONLY VIEW PUBLIC PROFILES AND DO NOT CONNECT TO ANY PLATFORM ACCOUNT.]

Where you connect a social media account to us, or authorize us to access one on your behalf, we may access, store, and use the profile information, content metadata, and analytics that the platform makes available under that authorization, for the purpose of running and reporting on your campaign. Your use of those features is also governed by the relevant platform's own terms and privacy policy.

You can revoke our access at any time through the security or connected apps settings of the platform in question, or by writing to team@playbookmg.com. Once revoked, we delete the authorized data as soon as possible and within [NUMBER] calendar days. Revoking access may limit or remove some of what we can deliver.

14Cookies and analytics

[LIST EVERY COOKIE, PIXEL, AND TAG IN USE WITH ITS PURPOSE AND LIFESPAN, OR STATE THAT THE SITE SETS NONE BEYOND WHAT IS STRICTLY NECESSARY. THIS SECTION IS THE ONE MOST OFTEN CONTRADICTED BY WHAT IS ACTUALLY RUNNING ON THE SITE, SO AUDIT THE SITE BEFORE WRITING IT.]

A cookie is a small text file a site stores in your browser and can read back later. Only the site that set a cookie can read it. We use cookies to keep the Site working and to understand in aggregate how it is used, so we can improve it. Most browsers let you refuse or delete cookies. If you do, parts of the Site may not work as intended.

[IF YOU HAVE A CONSENT BANNER: describe how to change your choice.] [STATE HOW THE SITE RESPONDS TO GLOBAL PRIVACY CONTROL AND OTHER BROWSER OPT OUT SIGNALS.]

15How we protect it

We maintain physical, technical, and procedural safeguards appropriate to the sensitivity of the information we hold. These include access controls that limit information to the people on our team who need it, encryption in transit, and vendor agreements that require comparable protection. No system is perfectly secure, and we cannot guarantee absolute security.

If you become aware of any loss of, or unauthorized access to, personal information in our custody, tell us immediately at team@playbookmg.com. If a breach affecting your information occurs, we will notify you and any regulator as required by law.

16How long we keep it

• Enquiries that do not become work: [PERIOD].
• Client records, contracts, and financial records: [PERIOD], to meet contractual and tax obligations.
• Media and creator contact records: retained while the contact remains professionally relevant and reviewed every [PERIOD]. Inactive records are deleted.
• Marketing suppression lists: retained indefinitely, so that we can honor your opt out.
• [ANALYTICS] data: [PERIOD].

When a retention period ends we delete the information or de-identify it so it can no longer be linked to you.

17Where it is stored

We and our service providers store and process personal information in the United States [AND ANY OTHER COUNTRIES YOUR VENDORS OPERATE IN]. If you are outside the United States, your information will be transferred to and processed there, under laws that differ from those in your own country, and in some circumstances courts, law enforcement, and regulators in those countries may be entitled to access it.

[IF YOU HANDLE EU OR UK PERSONAL DATA: state the transfer mechanism you rely on, for example Standard Contractual Clauses or the UK International Data Transfer Addendum, and confirm your vendor contracts include them.]

18Your rights

Depending on where you live, you may have the right to:

• Know what personal information we hold about you and get a copy of it.
• Correct information that is inaccurate or incomplete.
• Delete information we hold about you.
• Receive your information in a portable format, or have it transferred to another party.
• Object to processing we carry out on the basis of legitimate interests, including our outreach.
• Ask us to restrict processing while a question about accuracy or lawfulness is resolved.
• Opt out of the sale or sharing of personal information and of targeted advertising. We do not sell or share personal information as those terms are defined under state privacy law.
• Not be discriminated against or receive a lesser service for exercising any of these rights.

These rights come from different laws, and which ones apply to you depends on your residence. As of 2026, twenty US states have comprehensive consumer privacy laws in force, including California under the CCPA as amended by the CPRA, and the coverage thresholds and available rights differ from state to state. New York does not have a comprehensive consumer privacy law, although New York law does impose data security duties on businesses that hold private information about New York residents. If you are in the European Economic Area or the United Kingdom, the GDPR or UK GDPR applies to you.

Rather than sort out which law covers you, we extend the rights above to anyone who asks, subject to the exceptions below.

To make a request, write to team@playbookmg.com. We may ask for information that lets us verify your identity and your right to make the request, and we will use that information only to process the request. We respond within [NUMBER] days. You may use an authorized agent, in which case we will ask for proof of their authority.

Your rights are not absolute. Law sometimes allows or requires us to refuse a request in whole or in part, for example where releasing information would reveal information about someone else, or where we are obliged to retain records. The information may also already have been deleted or de-identified under our retention schedule. Where we cannot act on a request, we will tell you why.

If you are unhappy with how we handled your request, tell us and we will review it. You also have the right to complain to your state attorney general, to the California Privacy Protection Agency if you are in California, or to your national data protection authority if you are in the EEA or the UK.

19Children

The Site and the Services are directed at businesses and professionals, not at children. We do not knowingly collect personal information from anyone under 13, consistent with the Children's Online Privacy Protection Act and the FTC rule that implements it. Anyone who provides information through the Site represents that they are 13 or older.

If we learn that we have collected information from a child under 13, we will delete it promptly. If you are a parent or guardian and believe your child has given us information, contact us at team@playbookmg.com and we will delete it.

[IF ANY CLIENT CAMPAIGN IS DIRECTED AT UNDER 13s OR HAS A MIXED AUDIENCE, THE AMENDED COPPA RULE APPLIES AND CARRIES SEPARATE OBLIGATIONS INCLUDING VERIFIABLE PARENTAL CONSENT AND A PUBLISHED RETENTION POLICY. RAISE THIS WITH COUNSEL BEFORE TAKING ON THAT WORK.]

20Links to other sites

The Site links to third party sites, including client sites, social platforms, and published coverage. Those operators may collect information about you, including through their own cookies, when you visit them. We are not responsible for how they collect, use, or disclose it. Read their privacy policies before giving them your information.

21Changes to this policy

Information we collect is subject to the policy in effect when it was collected. We update this policy from time to time. The date at the top reflects the current version. If we make a material change, we will post a notice on the Site or contact you directly, and we will say when the change takes effect.

22Contacting us

For questions about this policy, or to exercise any right in section 18:

[IF YOU OFFER SERVICES TO PEOPLE IN THE EEA OR UK: under Article 27 of the GDPR and the UK GDPR you may need to appoint an EU and a UK representative. Add their details here, or remove this paragraph if the requirement does not apply. Confirm with counsel.]

23Interpretation

Where this policy uses the word "including", it means "including without limitation". Examples given are illustrative and not exhaustive.

This policy does not create rights or obligations beyond those imposed by applicable law. Where there is any inconsistency between this policy and a law that applies to a particular case, that law governs and this policy is to be read so as to comply with it.