Effective date: [September 14, 2026]

Last updated: [September 14, 2026]

1. WHO WE ARE AND WHAT THIS COVERS

Plain version: Beach Office, LLC runs this platform. This policy explains what we collect from you, why, and what you can do about it.

This Privacy Policy is issued by Beach Office, LLC, a Delaware limited liability company ("Beach Office," "we," "us," or "our"). Beach Office, LLC is the data controller for personal information processed through beachoffice.com, our newsletter, our social media accounts, and any related services we operate (together, the "Services").

This policy applies to visitors, account holders, licensees, newsletter subscribers, and contributors. It does not govern the rights in the creative content itself — those are set by the Beach Office License Terms (for licensees) and the Contributor Agreement (for contributors). Where those agreements address personal information appearing within licensed content, they control.

By using the Services, you acknowledge this policy. If you do not agree with it, please do not use the Services.

2. WHAT WE COLLECT

Plain version: We collect what you give us, what your browser gives us, and — if you're a contributor — what we need to pay you and credit you properly.

A. Information you give us directly: Account and registration: name, email address, password, company name, job title, country, and similar contact details.

Purchases and licensing: transaction details, license records, billing address, and the name of the entity you are licensing on behalf of. Payments are processed by Shopify; we do not store full payment card numbers. We receive confirmation of payment and limited billing details from Shopify.

Newsletter and communications: email address when you subscribe, and anything you send us through contact forms, email, surveys, or support requests.

Contributor information: legal name, contact details, biography and profile information, banking or payout details, tax identification, government-issued identification where required to verify identity, and the content you submit including any metadata embedded in it (such as capture date, device, and location data). Contributors are responsible for obtaining releases from any individuals appearing in submitted content.

Voice and audio talent: where we record voice or spoken-word content, we collect the recordings and the talent's name, contact, and payment details. These recordings may be classified as biometric data under some laws. They are used only to produce licensable audio assets under the terms of the talent's buyout agreement and are not used to identify, profile, or verify individuals.

Events and business development: contact details collected at events, through partnership discussions, or from enterprise licensing inquiries.

B. Information collected automatically: When you use the Services we collect IP address, approximate location derived from IP (city and country), device and browser type, operating system, referring URL, pages viewed, assets viewed, searched, previewed, or downloaded, session timing, and interactions with our emails (opens and clicks). We collect this through cookies, pixels, and similar technologies described in Section 4.

C. Information from other sources: If you sign in through a third-party login provider, we receive the information you have authorized that provider to share. We may receive contact and business details from partners or referral sources. We may receive information from social platforms about how licensed assets perform when you have connected those accounts.

D. Aggregated and de-identified data: We create aggregated or de-identified data (for example, which asset categories are most licensed by region). This data does not identify you and may be used for any purpose.

3. HOW WE USE IT AND WHY WE ARE ALLOWED TO

Plain version: To run the platform, pay contributors, keep the lights on, and tell you about things we think you'll want. Where the law requires a specific legal basis, here it is.

Providing the Services: creating and managing accounts, delivering licensed assets, processing payments, issuing license records, paying contributors, and responding to support requests. Legal basis: performance of a contract.

Contributor attribution and credit: displaying contributor names, profiles, and work as agreed in the Contributor Agreement. Legal basis: performance of a contract.

Improving the Services: understanding how assets are discovered and licensed, testing features, fixing bugs, and developing new collections and tools. Legal basis: legitimate interests.

Marketing and communications: sending the newsletter, product announcements, and promotional messages; personalizing what we show you; and measuring campaign performance. Legal basis: consent where required by law; otherwise legitimate interests. You can unsubscribe at any time.

Advertising: showing you Beach Office ads on other platforms and, where we sell advertising space on the Services, allowing partners to serve ads on our site. Legal basis: consent where required; otherwise legitimate interests. See Section 4 and Section 9 for your choices.

Security and enforcement: detecting fraud, unauthorized use of licensed content, license violations, and abuse of the Services; enforcing our terms. Legal basis: legitimate interests and legal obligation.

Legal compliance: tax, accounting, regulatory, and law enforcement requirements. Legal basis: legal obligation.

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

4. COOKIES, PIXELS, AND ANALYTICS

Plain version: We use cookies and tracking pixels — ours and some belonging to ad and analytics partners. You can control them through the banner, your browser, or the Global Privacy Control.

We and our partners use cookies, pixel tags, and similar technologies ("Tracking Technologies") in four categories:

• Strictly necessary:  required to run the site, keep you logged in, deliver purchases, and prevent fraud. These cannot be turned off.

• Functional: remembering your preferences and settings.

• Analytics: understanding how the Services are used. We use Google AnalyticsAdvertising: measuring our own ad campaigns and, where we sell ad space, enabling partners to deliver and measure ads on the Services. Advertising technologies in use include [Meta Pixel, TikTok Pixel, Pinterest Tag, LinkedIn Insight Tag, and Google Ads — confirm at each launch phase].

When you first visit, a cookie banner lets you accept or decline non-essential categories. In the EU, UK, and other jurisdictions that require it, non-essential Tracking Technologies are not set until you opt in. You can change your choice at any time through [Manage Cookie Preferences] in the site footer. Because choices are stored per browser and device, you will need to repeat them if you switch.

We honor Global Privacy Control signals as a request to opt out of sale and sharing of personal information.

Third-party advertising partners are governed by their own privacy policies. Industry-wide opt-outs are available through the Network Advertising Initiative, the Digital Advertising Alliance, and the European Interactive Digital Advertising Alliance.

5. WHO WE SHARE IT WITH

Plain version: Vendors who help us run things, payment and hosting providers, ad partners, and — only if legally required — authorities.

Service providers: companies that process data on our behalf under contract, including Shopify (commerce and payment processing), Framer (web hosting), Squarespace (domain services), Easy Digital Products (digital delivery), Bunny.net (content delivery and video streaming), [newsletter platform], Google (analytics), and customer support and accounting tools. They may use your information only to provide services to us.

Advertising and analytics partners: as described in Section 4. Where we sell advertising space, advertising partners may collect online identifiers, device information, and browsing activity on the Services directly through their own technologies.

Contributors and licensees: we share limited information between contributors and licensees where necessary — for example, a contributor's name for attribution, or the licensee's company name in a license record.

Affiliated entities: Beach Office, LLC may share information with its affiliated entities in the Beach Office corporate group for IP management, administration, and legal purposes. [Aliya: confirm whether the Holdings/Portfolio/Registry entities should be named or described generically.]

Legal and safety: government authorities, law enforcement, courts, or private parties where we believe in good faith disclosure is required by law or necessary to protect the rights, property, or safety of Beach Office, our contributors, our users, or the public, including to investigate unauthorized use of licensed content.

Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of the transaction.

We do not share information about contributors beyond what is set out in the Contributor Agreement and this policy.

6. INTERNATIONAL TRANSFERS

Plain version: We operate from Jamaica and the United States, and our vendors are global. Your data may cross borders; we use the legal safeguards required when it does.

Beach Office is organized in the United States and operates from Jamaica. Your information may be transferred to, stored in, and processed in the United States, Jamaica, and other countries where we or our service providers operate. Where we transfer personal information from the European Economic Area, United Kingdom, or Switzerland to a country not recognized as providing adequate protection, we rely on the EU Standard Contractual Clauses or the UK International Data Transfer Addendum. Where we transfer personal information out of Jamaica, we do so in accordance with the Data Protection Act, 2020.

7. RETENTION

Plain version: We keep your data for as long as you use the Services and as long as the law or a license record requires — license records are kept for a long time because they prove who is allowed to use what.

We retain personal information for as long as you have an account or an active relationship with us, and afterward for as long as necessary to fulfill the purposes described in this policy, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. License records and contributor payment records are retained for the life of the license plus any limitation period required by law, because they document the chain of rights in licensed content. Marketing data is retained until you unsubscribe or your consent lapses. Voice recordings are retained in accordance with the applicable talent agreement.

8. SECURITY

Plain version: We take reasonable measures to protect your data, but no system is perfect.

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information we hold, including encryption in transit, access controls, and vendor security review. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential. If we become aware of a breach affecting your personal information, we will notify you as required by applicable law.

9. YOUR RIGHTS AND CHOICES

Plain version: You can see, correct, delete, and take your data with you. You can opt out of marketing and of ad tracking. Where you live determines the exact legal rights, but we try to honor these requests for everyone.

Regardless of where you live, you may unsubscribe from marketing emails using the link in any email, manage cookie preferences as described in Section 4, and contact us to access, correct, or delete your information. Transactional and service emails (license confirmations, policy changes, security notices) cannot be opted out of while you hold an account.

Jamaica. If you are in Jamaica, the Data Protection Act, 2020 gives you the right to be informed about our processing, to access your personal data, to have it corrected or erased, to object to processing including for direct marketing, and to complain to the Office of the Information Commissioner. [Aliya: confirm registration status and whether a Data Protection Officer designation is required.]

European Economic Area, United Kingdom, and Switzerland. You have the right to access, rectify, erase, restrict, and port your personal data; to object to processing based on legitimate interests; to withdraw consent at any time without affecting prior processing; and to lodge a complaint with your local supervisory authority.

United States. Residents of California, Colorado, Connecticut, Virginia, Utah, Oregon, Texas, and other states with comprehensive privacy laws have the right to know what personal information we collect and how we use and share it; to access, correct, and delete it; to opt out of the sale or sharing of personal information and of targeted advertising; and not to be discriminated against for exercising these rights.

Sale and sharing disclosure. In the preceding twelve months we have disclosed the following categories for a business purpose: identifiers, commercial information, internet activity, and inferences — to service providers, advertising and analytics partners, and affiliates. Because we use advertising pixels and may sell advertising space on the Services, online identifiers, internet activity, and inferences may be "sold" or "shared" under applicable state laws to advertising networks and analytics providers. We do not knowingly sell or share personal information of anyone under 18. You may opt out through the cookie preferences link, by enabling Global Privacy Control, or by contacting us. We do not collect or process sensitive personal information for the purpose of inferring characteristics about you.

Exercising rights. Contact us at the address in Section 12. We will verify your identity before responding and respond within the timeframe required by applicable law (45 days for US state requests, one month for EU/UK requests, subject to permitted extensions). You may use an authorized agent where the law allows; we will require written authorization. If we deny a request, we will explain why and, where applicable, how to appeal.

10. CHILDREN

Plain version: Beach Office is for adults.

The Services are intended for individuals 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us and we will delete it.

11. CHANGES TO THIS POLICY

We may update this policy from time to time. Material changes will be announced by email to account holders or by prominent notice on the Services before they take effect. The "Last updated" date at the top reflects the current version. Continued use after the effective date of a revised policy means you accept it.

12. CONTACT

Beach Office, LLC
931 Monroe Rd.
Suite 102-403
Atlanta, GA 30308
Contact Us