PRIVACY POLICY & NOTICE AT COLLECTION

Effective Date: 01.01.2026

1. Definitions

“Company” or “GOKU” means Goku Agency LLC, a California limited liability company.

“Personal Information” means information that identifies, relates to, describes, or could reasonably be linked to an individual or household, as defined under applicable law, including the CCPA/CPRA.

“Sensitive Personal Information” has the meaning set forth under the CCPA/CPRA and may include precise geolocation, financial information, or data revealing race, ethnicity, or similar characteristics, where applicable.

“Client” means any individual or entity that engages Company for Services.

“Talent” means any individual (including crew, contractors, or performers) who submits information to Company for potential collaboration.

“Services” means the creative, strategic, and production services offered by Company.

“Website” means goku.la and all related digital properties operated by Company.

2. Scope of Policy

This Privacy Policy governs the collection, use, disclosure, and protection of Personal Information by Company in connection with:

Access to and use of the Website
Communications with Company via email, phone, or other channels
Business relationships with Clients and prospective Clients
Submissions and interactions with Talent and contractors
The execution, administration, and delivery of Services

This Policy applies to Personal Information collected directly from individuals, automatically through the Website, and from third parties, whether collected online or offline.

3. Categories of Personal Information Collected

Company collects the following categories of Personal Information:

3.1 Information Provided Directly

Identifiers
Legal name, email address, phone number, company name, and general location.

Professional and Employment Information
Resumes, work history, roles, bios, portfolio links, and creative credits.

Visual and Audio Information
Headshots, self-tapes, reel footage, and other submitted media.

Financial Information
Rates, budgets, and payment-related details necessary for business operations.

Communications
Email correspondence, call notes, scheduling data, and project-related discussions.

3.2 Automatically Collected Information

When interacting with the Website, Company may collect:

IP address
Browser type and version
Device type and operating system
Pages visited and navigation behavior
Referral sources
Cookies and similar tracking technologies

3.3 Operational and Production Data

Company may collect and process:

Contractual and SOW-related information
Production-related data, including recorded likeness and voice
Administrative data required for project execution

3.4 Inferences

Company may generate internal assessments based on submitted or observed information, including:

Creative alignment
Execution quality
Suitability for specific Projects

4. Purposes of Collection and Use

Company processes Personal Information for legitimate business purposes, including:

Evaluating, vetting, and maintaining Talent within Company’s internal database
Matching Talent and contractors to Projects and production needs
Communicating with Clients, Talent, and business partners
Negotiating, executing, and administering agreements, SOWs, and related documents
Producing, managing, and delivering Services and Deliverables
Maintaining business records, internal systems, and operational workflows
Monitoring and improving the performance, functionality, and security of the Website
Detecting, preventing, and addressing fraud, misuse, or unauthorized access
Complying with applicable legal, regulatory, tax, and accounting obligations

Company may also process Personal Information for any purpose reasonably related to the foregoing or as otherwise permitted by applicable law.

5. Legal Basis for Processing

To the extent required by applicable law, Company processes Personal Information based on:

Consent provided by the individual
Performance of a contract or pre-contractual measures
Legitimate business interests that do not override individual rights
Compliance with legal obligations

6. Cookies and Tracking Technologies

Company uses cookies and similar tracking technologies for operational, analytical, and security purposes, including:

Website functionality and performance monitoring
Usage analytics and traffic measurement
System administration and security

Company does not currently engage in cross-context behavioral advertising and does not sell or share Personal Information through tracking technologies as defined under the CCPA/CPRA.

Users may control or disable cookies through their browser settings. Disabling cookies may impact certain Website features or functionality.

7. Disclosure of Personal Information

Company does not sell Personal Information for monetary consideration and does not share Personal Information for cross-context behavioral advertising purposes.

Company may disclose Personal Information only in the following circumstances and for legitimate business purposes:

7.1 Clients

Talent information, including portfolios and rates, may be disclosed to Clients strictly for the purpose of evaluating and approving participation in Projects and for budgeting purposes.

7.2 Service Providers

Company may engage third-party service providers to support its operations, including but not limited to:

Cloud storage and database management
Communication and collaboration platforms
Project management and administrative tools

Such service providers:

Process Personal Information solely on behalf of Company
Are contractually obligated to maintain confidentiality
Are required to implement appropriate security safeguards
Are prohibited from using Personal Information for their own purposes

Company may update or change such service providers at any time in the ordinary course of business.

7.3 Financial and Payment Processing

Where applicable, financial information may be processed by banking institutions or payment providers. Company does not retain full payment credentials.

7.4 Legal Compliance and Business Transfers

Company may disclose Personal Information:

To comply with legal obligations, court orders, or regulatory requirements
To enforce contractual rights
In connection with a merger, acquisition, restructuring, or sale of assets

8. Data Retention

8.1 Retention Criteria

Company determines retention periods based on:

Nature and sensitivity of the information
Legal and regulatory requirements
Contractual obligations
Risk of harm from unauthorized use or disclosure

8.2 General Retention Principles

Company retains Personal Information only for as long as necessary to:

Fulfill the purposes described in this Policy
Comply with legal obligations
Resolve disputes and enforce agreements

8.3 Talent Data

Company retains Talent profiles and submission materials for a period of seven (7) years from the date of submission, unless earlier deletion is requested or required by law.

This retention period reflects Company’s business model involving recurring productions, long-term collaborations, and series-based formats.

8.4 Client and Business Data

Company retains Personal Information related to Clients and business contacts for as long as reasonably necessary to:

Perform and manage Services
Maintain contractual, financial, and accounting records
Comply with legal, tax, and regulatory obligations
Resolve disputes and enforce contractual rights

Company may retain such information for a period of up to seven (7) years following completion of a Project, or longer where required or permitted by law

8.5 Early Deletion

ndividuals may request deletion of their Personal Information at any time by contacting: privacy@goku.la.

Company will process such requests in accordance with applicable law.
Certain information may be retained where necessary to:

Comply with legal obligations
Complete ongoing transactions
Enforce agreements or resolve disputes

9. Automated Decision-Making

Company does not use automated decision-making systems to make final decisions that produce legal or similarly significant effects on individuals.

All Talent evaluations, selections, and engagement decisions are made by qualified human reviewers.

Company may use tools or systems to assist with administrative or organizational functions, such as sorting, filtering, or managing submissions. However, such tools do not replace human judgment in any final decision-making process.

Company does not rely solely on automated processing to accept or reject Talent or to make determinations affecting participation in Projects.

10. Data Security

Company implements commercially reasonable technical, administrative, and organizational measures designed to protect Personal Information, including:

Access controls restricting data to authorized personnel
Secure storage systems and environments
Internal policies governing data handling and access

However, no method of transmission over the internet or electronic storage is completely secure. Accordingly, Company does not guarantee the absolute security of Personal Information and disclaims liability for unauthorized access beyond its reasonable control.

11. International Data Transfers

Personal Information may be transferred to and processed in the United States.

By providing Personal Information, individuals acknowledge that such data may be subject to U.S. laws, which may differ from those in their jurisdiction.

12. Children’s Privacy

Company does not knowingly collect Personal Information from individuals under the age of 18.

If Company becomes aware of such collection, it will take appropriate steps to delete the information.

13. Your Privacy Rights

Subject to applicable law, individuals may have the right to:

Request access to the Personal Information Company holds about them
Request deletion of Personal Information, subject to legal limitations
Request correction of inaccurate or incomplete information
Request information about categories, sources, and purposes of data collection
Limit the use or disclosure of Sensitive Personal Information, where applicable
Opt out of certain uses of Personal Information where required by law

These rights are subject to verification and applicable legal exceptions.

14. California Privacy Rights (CCPA/CPRA)

California residents have the rights provided under the CCPA/CPRA, including:

The right to know the categories and specific pieces of Personal Information collected
The right to know the categories of sources, purposes of use, and disclosures
The right to request deletion of Personal Information, subject to exceptions
The right to request correction of inaccurate Personal Information
The right to limit the use of Sensitive Personal Information, where applicable
The right not to be discriminated against for exercising their rights

Company does not sell or share Personal Information as defined under the CCPA/CPRA.

15. Exercising Your Rights

Requests to exercise privacy rights may be submitted to:

Email: privacy@goku.la

Company will verify the identity of the individual submitting the request before processing any request, which may include matching information previously provided to Company or requesting additional verification details.

Company may deny or limit requests where permitted by applicable law, including where:

Company is unable to verify the identity of the requester
The request is manifestly unfounded, excessive, or repetitive
Compliance would conflict with legal obligations or legitimate business purposes

Company will respond to verified requests within the timeframes required by applicable law. Where permitted, Company may extend the response period upon providing notice to the requester.

Authorized agents may submit requests on behalf of individuals, provided that sufficient authorization and identity verification are supplied.

16. Do Not Track Signals

The Website does not respond to “Do Not Track” signals or similar browser-based tracking preferences.

At this time, there is no universally accepted standard for interpreting such signals. Accordingly, Company does not alter its data collection or processing practices in response to them.

17. Third-Party Links

The Website may contain links to third-party websites, platforms, or services that are not owned or controlled by Company.

Company does not control and is not responsible for:

The content of such third-party platforms
Their privacy or data handling practices
Any collection, use, or disclosure of Personal Information by such parties

Accessing third-party links is done at the individual’s own risk. Individuals are encouraged to review the privacy policies of any third-party services before providing Personal Information.

18. Changes to This Policy

Company reserves the right to modify or update this Privacy Policy at any time in its sole discretion.

Any changes will become effective upon posting the updated Privacy Policy on the Website, unless otherwise required by applicable law.

Where required, Company will provide additional notice of material changes, which may include:

Prominent notice on the Website
Direct communication where appropriate

Continued access to or interaction with Company following the effective date of any updated Privacy Policy constitutes acknowledgment of such changes.

19. Contact Information

GOKU Agency LLC
Email: contact@goku.la

‍