Harvey Boy Entertainment

Legal

Privacy Policy

Effective date
[EFFECTIVE DATE]
Last updated
September 30, 2026

This Privacy Policy explains what personal information Harvey Boy Entertainment collects through this website and its account portals, why we collect it, who we share it with, and the choices you have. We have written it to describe what our site actually does today. If our practices change, we will update this policy first.

Draft for review: this document contains 5 highlighted placeholders that must be completed before it takes effect.

Introduction

Harvey Boy Entertainment is an artist management and development company. Our website presents our artists, releases, videos, events, news and services, and provides secure sign-in for administrators, artists and other people we work with. We aim to collect as little personal information as we need, to use it only for the purposes described here, and to protect it.

By using our website, you acknowledge the practices described in this Privacy Policy. Please also read our Terms of Use, which govern use of the site.

Who We Are

This website is operated by [LEGAL ENTITY NAME], doing business as Harvey Boy Entertainment (“HBE,” “we,” “us” or “our”), based in Nevada, United States. Our mailing address is [MAILING ADDRESS].

HBE is responsible for the personal information described in this policy. You can reach us about privacy at any time using the details in Contact Us.

Scope of This Privacy Policy

This policy applies to personal information collected through this website, including its public pages, the sign-in and password-reset pages, the artist and member portal, and HBE’s administrative tools, and to email you send to the addresses published on this site.

This policy does not apply to:

  • Websites, apps and services run by other companies, including streaming and social media platforms we link to (see Third-Party Links and Services).
  • Information handled under a separate written agreement with HBE (for example, an artist management, booking or services contract), which is governed by that agreement.
  • Information about HBE’s employees and contractors in that capacity.

Information We Collect

The information we collect depends on how you use the site. Most visitors simply browse public pages and give us no personal information directly. The table below summarizes the categories; the sections that follow explain each one.

Categories of personal information
  • Contact details

    Examples
    Name, email address, phone number, company or organization
    Source
    You, when you email us or an account is created for you
  • Inquiry details

    Examples
    Artist requested, event date, venue and location, expected capacity, budget, message content
    Source
    You, when you send a booking or general inquiry
  • Account information

    Examples
    Email address, display name, role, password (stored only in hashed form), two-factor authentication enrollment
    Source
    You and HBE, when HBE issues you an account
  • Account activity

    Examples
    Sign-in and password-reset events; records of changes made in HBE’s administrative tools
    Source
    Generated when you use your account
  • Artist information

    Examples
    Name or stage name, biography, hometown or origin, genre, photographs, releases, events, social and streaming links
    Source
    Artists, or HBE with the artist’s permission
  • Uploaded media

    Examples
    Photographs and images, file names, descriptions and captions
    Source
    Authorized account holders who upload them
  • Device and network information

    Examples
    IP address, browser type and version, device and operating system, pages requested, referring page, date and time
    Source
    Collected automatically by our hosting and database providers

We do not ask for, and ask you not to send us, government identification numbers, financial account or payment card numbers, health information or other sensitive information through the website or by email.

Information You Provide

Inquiries and correspondence

When you contact us, including about booking an artist, press or a general question, we receive the information you choose to include. Booking inquiries are currently handled by email. A booking request form on this site is being prepared; it is not active and does not collect anything yet. When it goes live it will ask for similar details, and we will update this policy before it does. Information in a booking or general inquiry may include:

  • your name, company or organization, email address and telephone number;
  • the artist you are interested in;
  • event information, such as the proposed date, venue and location, expected capacity and budget;
  • any other details you include in your message.

Communications

If you correspond with us, we keep the correspondence and our replies so we can respond, follow up and keep business records.

Information Collected Automatically

Like most websites, our site is delivered by hosting and database providers whose systems automatically record technical information about each request in server logs. This includes your IP address, browser type and version, device and operating system, the page or file requested, the referring page, and the date and time. Our authentication provider also records security events such as sign-ins and password-reset requests, including the IP address they came from.

We and our providers use this information to deliver the site, keep it secure, prevent abuse, troubleshoot problems and keep it reliable. We do not use it to build advertising profiles, and we do not use analytics, advertising or cross-site tracking tools (see Cookies and Similar Technologies and Analytics).

Account and Authentication Information

Some areas of the site, including HBE’s administrative tools and the artist and member portal, are available only to people HBE has authorized, such as artists, administrators and other approved account holders. There is no public sign-up: accounts are created by HBE. To set up and use an account, you or HBE may provide:

  • your name or display name and email address;
  • your login credentials;
  • profile information and the role or access level HBE assigns to you;
  • for artists, the artist information described below;
  • photographs and other media you upload, where your account allows it;
  • other information needed to use the account.

Passwords are never stored in plain text. They are processed by our authentication provider and kept only in a one-way hashed form, and HBE staff cannot see your password. Administrative accounts use two-factor authentication. If you enroll an authenticator app, the information needed to verify your codes is held by our authentication provider. When you request a password reset, our authentication provider emails a single-use link to your account’s email address.

For security and accountability, we keep records of account activity, such as sign-ins and which account created, edited, published or removed content in our administrative tools, and when.

Artist, Talent and Booking Information

Our website promotes the artists HBE works with. For each artist we may publish their name or stage name, biography, hometown or origin, genre, photographs, releases, videos, upcoming events, and links to their social media and streaming profiles. This information is provided by the artist or by HBE with the artist’s permission, and it is intended to be public.

If you send a booking inquiry, we use it to evaluate and respond to your request. Where needed to do that, we share relevant details with the artist concerned and the people who represent them.

Media and Uploaded Content

Authorized account holders can upload photographs and images for use on the site. When a photo is uploaded through our tools, it is processed in the uploader’s browser before transfer, which removes embedded metadata such as camera details and GPS location. Uploaded images are kept private until an HBE administrator publishes them. Once published, an image is publicly viewable on the website and can be accessed by anyone with its web address.

We keep a record of who uploaded each image, along with its file name, description (alt text) and caption. Please upload only images you have the right to share, and do not upload images of people who have not agreed to appear on the site. To ask us to remove an image, contact us (see Contact Us).

How We Use Information

We use personal information to:

  • operate, maintain and improve the website and its features;
  • respond to inquiries, including booking, press and general requests, and communicate with you;
  • create and manage accounts, authenticate users and provide access to the portal and administrative tools;
  • present our artists and their work, as they have agreed;
  • publish and manage website content and media;
  • protect the security and integrity of the site, our accounts and our users, and detect, prevent and investigate fraud, abuse and unauthorized access;
  • keep business and accountability records;
  • comply with legal obligations and enforce our terms and agreements.

We do not use personal information for targeted advertising, and we do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

How Information May Be Shared

We do not sell personal information. We share personal information only as follows:

  • Service providers: companies that host, store and secure our website and data, or provide services such as email, on our behalf and under our instructions (see Service Providers).
  • Artists and their representatives: details of a booking inquiry, where needed to respond to it.
  • Public content: artist information and published media are shown publicly on the website by design.
  • Legal and safety: when we believe in good faith that disclosure is required by law, subpoena or other legal process, or is necessary to protect the rights, property or safety of HBE, our artists, our users or others.
  • Business transfers: in connection with a merger, acquisition, financing, reorganization or sale of all or part of our business, in which case the recipient will be required to handle the information consistently with this policy.
  • With your consent or at your direction.

Service Providers

We rely on a small number of established providers to run the site. They process personal information on our behalf and may use it only to provide their services to us, subject to their own security and privacy commitments.

Service providers
  • Vercel

    Service
    Website hosting and content delivery
    Information involved
    Device and network information in server logs; the pages and files requested
  • Supabase

    Service
    Database, user authentication and file storage
    Information involved
    Account information and activity, website content, uploaded media, server and security logs
  • Our business email provider

    Service
    Sending and receiving email at our published addresses
    Information involved
    Your messages and contact details

Password-reset and other account emails are sent through our authentication service. If you choose to play an embedded video, the video is delivered by YouTube or Vimeo as an independent third party, not as our service provider (see Third-Party Links and Services).

Cookies and Similar Technologies

Cookies are small files a website stores in your browser. Our site uses only cookies that are strictly necessary for features you request, mainly signing in. Visitors who browse public pages without signing in are not issued any HBE cookies. We do not use analytics cookies, advertising cookies or other tracking technologies, and our pages do not load third-party fonts, analytics scripts or advertising pixels.

Cookies used on this site
  • Authentication session (set by our authentication provider, Supabase)

    Type
    Strictly necessary
    Purpose
    Keeps you signed in and secures your session
    Duration
    Until you sign out or your session expires
  • Sign-in security verifier

    Type
    Strictly necessary
    Purpose
    Protects the password-reset and sign-in link flow against interception
    Duration
    Removed when the flow completes
  • Password-reset marker (hbe_pw_recovery)

    Type
    Strictly necessary
    Purpose
    Confirms a password reset was started from a valid emailed link
    Duration
    15 minutes

Embedded videos load only when you press play. At that point, YouTube (through its privacy-enhanced youtube-nocookie.com service) or Vimeo (with its do-not-track setting) delivers the video and may set its own cookies or use similar storage under its own privacy policy. If you don’t press play, no request is made to those services.

You can block or delete cookies in your browser settings. Public pages work without cookies, but you will not be able to sign in.

Analytics

We do not currently use website analytics services. Apart from the server logs described above, which are kept for operation and security, we do not measure or record how individual visitors use the site. If we decide to add analytics, we will update this policy before doing so and describe the provider, what it collects and your choices.

Advertising and Marketing

We do not display advertising on this site, use advertising networks or engage in targeted (cross-context behavioral) advertising. We do not currently operate an email newsletter or text-message (SMS) program, and the site has no marketing sign-up. If you contact us, we will use your details to respond, not to add you to a marketing list.

If we introduce marketing communications in the future, we will ask for any consent the law requires and include a simple way to unsubscribe from every message.

Data Retention

We keep personal information only for as long as reasonably necessary for the purposes described in this policy, including to meet legal, accounting and reporting requirements, resolve disputes and enforce agreements. In general:

  • Account information is kept while the account is active and for a limited period after it is closed, unless a longer period is required by law or needed to resolve an open matter.
  • Inquiries and correspondence are kept for as long as needed to respond and follow up, and afterwards as business records.
  • Published artist information and media remain on the site until they are removed. Unpublished uploads remain private until they are deleted.
  • Server and security logs are kept by our providers for limited periods under their standard retention practices.
  • Records of administrative activity are kept for security and accountability.

When information is no longer needed, we delete it or de-identify it.

Data Security

We use reasonable administrative, technical and physical safeguards designed to protect personal information. These include encrypted (HTTPS) connections, hashed passwords, two-factor authentication for administrative access, access controls that limit administrative tools and unpublished files to authorized personnel, and providers that maintain their own security programs.

No website, transmission or storage system is completely secure, so we cannot guarantee absolute security. Please keep your password confidential and contact us right away if you believe your account has been compromised. If a security incident affects your personal information, we will notify you as required by applicable law.

Your Privacy Choices and Rights

Depending on where you live and the laws that apply to HBE, you may have some or all of these rights regarding your personal information:

  • Access: to confirm whether we process your personal information and to see it.
  • Correction: to have inaccurate information corrected.
  • Deletion: to have your personal information deleted, subject to legal exceptions.
  • Copy (portability): to receive a copy of information you provided, in a usable format.
  • Marketing: to opt out of marketing communications, if we ever send them.
  • Sale, sharing and targeted advertising: to opt out of these practices. HBE does not engage in them (see below).

To make a request, email [PRIVACY EMAIL] with the subject line “Privacy Request,” or write to us at the address in Contact Us. Account holders can also ask an HBE administrator to update their account details. We will need to verify your identity before acting on certain requests, usually by confirming information we already hold, such as your account email address. You may use an authorized agent where the law allows; we may ask for proof of the agent’s authority and confirm your identity directly.

We will respond within the time required by applicable law. If we decline your request, we will explain why, and where the law provides a right to appeal you may ask us to reconsider by replying to our decision. We will not discriminate against you for exercising your privacy rights.

Some information is public by design, such as published artist profiles. Deleting it from our site does not remove copies others may already have made.

U.S. State Privacy Rights

A number of U.S. states have comprehensive consumer privacy laws that give residents the rights described above when a business meets the law’s applicability thresholds. Whether or not a particular law applies to HBE, we aim to handle privacy requests from all U.S. users consistently with this policy.

Based on our current practices:

  • We do not sell personal information, and have not done so in the past 12 months.
  • We do not share or process personal information for targeted or cross-context behavioral advertising.
  • We do not engage in profiling that produces legal or similarly significant effects.
  • The only sensitive personal information we process is account login credentials, which we use solely to authenticate you and secure your account.

Because we do not sell, share or use personal information for targeted advertising, there is nothing to opt out of today. If that ever changes, we will update this policy first and honor opt-out requests, including browser-based opt-out preference signals such as Global Privacy Control where the law requires.

California Privacy Rights

This section applies to California residents. Where the California Consumer Privacy Act (as amended by the California Privacy Rights Act) applies to HBE, California residents have the rights described in Your Privacy Choices and Rights, including the rights to know, delete and correct personal information and to opt out of its sale or sharing. HBE does not sell or share personal information as those terms are defined in California law, and we have no actual knowledge of selling or sharing the personal information of consumers under 16.

In the past 12 months, we have collected the categories of personal information described in Information We Collect. Under California’s categories, these are: identifiers (such as name, email address and IP address); professional or commercial information contained in inquiries; internet or other electronic network activity information (server and security logs); audio, electronic or visual information (photographs); and sensitive personal information limited to account login credentials. We collect this information from the sources, and use it for the purposes, described above, and we disclose it for business purposes only to the service providers described in Service Providers. We use sensitive personal information only to provide and secure your account, so the right to limit its use does not apply.

Do Not Track: some browsers send “Do Not Track” signals. Because we do not track visitors across websites or over time for advertising, we do not change our practices in response to these signals.

Shine the Light: we do not disclose personal information to third parties for their own direct marketing purposes.

Nevada Privacy Rights

HBE is based in Nevada. Nevada law (NRS Chapter 603A) gives Nevada consumers the right to direct an operator not to sell certain covered information that the operator has collected or will collect about them. HBE does not sell covered information as defined in Nevada law. You may still submit a request directing us not to sell your covered information by emailing [PRIVACY EMAIL] with the subject line “Nevada Opt-Out Request.” We will respond within the time required by Nevada law.

Nevada residents may also contact us to review and request changes to covered information we hold about them, using the details in Contact Us. Apart from video services that load only when you choose to play a video, we do not knowingly allow third parties to collect personally identifiable information about your online activities over time and across different websites when you use our site.

Children

Our website is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us, please contact us and we will delete it.

Accounts are issued only by HBE, and only to people we work with professionally. Account holders must be at least [MINIMUM ACCOUNT AGE] years old, or have the involvement and consent of a parent or legal guardian as described in our agreements with them.

International Visitors

HBE is based in the United States, and this website is operated from the United States. If you use the site from outside the United States, your information will be transferred to, stored and processed in the United States, and possibly in other countries where our service providers operate. Privacy laws there may differ from those where you live. By using the site, you understand that your information will be handled in the United States as described in this policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example when we add features to the site or the law changes. When we do, we will revise the “Last Updated” date above. If we make material changes, we will provide additional notice, such as a prominent notice on the site or an email to account holders, before the changes take effect where required. Your continued use of the site after an update means the updated policy applies to you, to the extent the law permits.

Contact Us

If you have questions about this Privacy Policy or want to make a privacy request, contact us at:

  • [LEGAL ENTITY NAME], doing business as Harvey Boy Entertainment
  • Email: [PRIVACY EMAIL]
  • Mail: [MAILING ADDRESS]

Please include “Privacy Request” in your subject line so your message reaches the right person.