Privacy
Policy

ThreadLab Media (Pty) Ltd has designated an Information Officer as required by the Protection of Personal Information Act, 4 of 2013 (POPIA).

Name: Liza Rozane Uys
Email: info@threadlab.tv
Contact: 083 308 3700

You may contact the Information Officer for any privacy-related queries, access requests, or complaints.

When you submit our enquiry form we collect: name, email address, phone number, business name, budget range, and any message you provide.

We process this data solely to respond to your enquiry and provide our services. We do not add you to marketing lists or share your data with third parties without your explicit consent. Data is retained for 3 years, or until you request deletion.

When you commission or collaborate on a production project, we may receive and process the following categories of data:

• Business and contact information (name, company, role, email, phone)
• Creative briefs, brand guidelines, scripts, and campaign materials
• Talent information, including names, images, video footage, voice recordings, and signed release documentation
• Reference materials, moodboards, and third-party assets provided by you
• Correspondence and meeting notes relating to the project

We process this data solely to deliver the agreed services, manage the project relationship, and meet our legal and contractual obligations.

ThreadLab Media operates AI-native production workflows. In the course of delivering services, client-provided materials and project data may be processed by the following categories of third-party AI platforms and tools:

• AI image and video generation platforms (including but not limited to NanoBanana Pro and Kling)
• AI language and content tools (including but not limited to ChatGPT and Claude)
• Other production and collaboration software as required for the specific project

We take reasonable steps to ensure that third-party platforms we use do not retain client data for model training purposes, and we select tools whose terms of service are consistent with our obligations to you. We will notify you of any material change to the tools used on your project where that change affects how your data is handled.

A current list of platforms used on any specific project is available on request.

ThreadLab Media creates AI-generated human characters for use in commercial and promotional content. Where human reference talent is used to inform the appearance, voice, or likeness of an AI-generated character, we collect and retain:

• A signed talent release and consent agreement
• Reference materials provided by or about the talent (photographs, video, voice recordings as applicable)
• Records of the scope of consent granted and any restrictions or expiry terms

Reference talent data is used only within the scope expressly consented to in the signed release, not used to train third-party AI models without separate explicit written consent, and retained for the duration of the licence period specified in the release — or for 3 years if no expiry is stated — after which it is securely deleted.

Talent may request access to, correction of, or deletion of their data at any time by contacting info@threadlab.tv.

Where ThreadLab Media delivers services for clients operating in regulated industries — including pharmaceutical, healthcare, financial services, and similar sectors — we acknowledge that additional data protection obligations may apply.

We do not knowingly receive or process patient data, personal health information, or other specially protected categories of data in the ordinary course of production work. If a project requires access to such data, this will be governed by a separate data processing agreement between ThreadLab Media and the client prior to any processing taking place.

Clients are responsible for ensuring that campaign materials and briefs provided to ThreadLab Media comply with applicable advertising regulations in their target markets, including but not limited to requirements imposed by the Medicines and Related Substances Act (South Africa), the ABPI Code (UK), and equivalent international standards.

ThreadLab Media is based in South Africa and processes data in accordance with POPIA. Where we work with clients or platforms based in other jurisdictions, we take appropriate steps to ensure data transfers comply with applicable law, including:

• The EU General Data Protection Regulation (GDPR) and UK GDPR where EU or UK data subjects are involved
• The California Consumer Privacy Act (CCPA/CPRA) where applicable
• Any other local data protection laws applicable to the specific project or distribution territory

Clients with specific cross-border data transfer requirements should raise these at the outset of a project so that appropriate safeguards can be agreed.

We retain project data for a period of 3 years following project completion, or as otherwise required by law or agreed in writing. After this period, project files and associated personal data are securely deleted or anonymised.

Where a project involves an ongoing licence for AI-generated content, we retain the minimum data necessary to administer and evidence that licence for its duration.

You may request deletion of your data at any time by contacting info@threadlab.tv. We will respond within 30 days.

Delivered assets are the client's responsibility to store and maintain. Once project files and final deliverables have been provided to the client, ThreadLab Media accepts no liability for loss of those files due to the client's failure to download, back up, or retain them. Clients are solely responsible for the storage and safekeeping of delivered work.

Working files, source files, and open or editable project files are not included in standard deliverables and are retained by ThreadLab Media for a period of 12 months following project delivery. Access to working files within this period, or provision of open or editable files, is available on request and may be subject to additional fees. After 12 months, working files are securely deleted and cannot be recovered.

ThreadLab Media may operate under representation or billing arrangements with third-party agencies in connection with certain projects. Where an agency acts as an intermediary, we will process only the personal data necessary to administer the commercial relationship and deliver the project. We do not share personal data with agency partners beyond what is required for project delivery.

Each party in a multi-party project arrangement remains responsible for its own compliance with applicable data protection laws in respect of the data it controls.

We only send marketing or promotional communications where we have a lawful basis to do so — typically your explicit consent or a prior business relationship.

If you receive marketing communications from us, you may:

• Opt out at any time by contacting info@threadlab.tv
• Unsubscribe via the link included in any marketing email

We will process opt-out requests promptly. Opting out of marketing will not affect service-related communications.

We use essential cookies for site functionality and analytics cookies to understand how visitors use our site. You can decline non-essential cookies using the banner on your first visit, or by adjusting your browser settings at any time. Continued use of our website after declining non-essential cookies will not affect your access to our content.

Our services are directed at businesses and professionals. We do not knowingly collect or process personal information from individuals under the age of 18. If you believe we have inadvertently received information from a minor, please contact info@threadlab.tv and we will delete it promptly.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the Information Regulator of South Africa as required by POPIA. We will do so without undue delay and will provide information on the nature of the breach, the data affected, and the steps we are taking to address it.

Depending on your jurisdiction, you may have the following rights in respect of your personal data:

• Right to access your personal information
• Right to correct inaccurate information
• Right to request deletion of your data
• Right to object to processing
• Right to withdraw consent (where processing is based on consent)
• Right to data portability (where applicable)

To exercise any of these rights, email info@threadlab.tv. We will respond within 30 days.

If you believe your personal information has been processed unlawfully, or that we have not responded adequately to a request, you may lodge a complaint with the Information Regulator of South Africa:

Website: https://www.justice.gov.za/inforeg/
Email: inforeg@justice.gov.za

You may also contact our Information Officer in the first instance to attempt to resolve any concern.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the tools we use. Updates will be posted on this page with a revised effective date. Where changes are material, we will take reasonable steps to notify affected individuals.

For any questions about this Privacy Policy or how we handle your data, please contact:

Email: info@threadlab.tv

This policy is designed to align with the Protection of Personal Information Act (POPIA) and reflects ThreadLab Media's commitment to responsible data handling in creative, CGI, and AI-driven production environments.