Privacy Policy.
IMPORTANT: By continuing to use this website, you confirm that you have read this Privacy Policy and consent to the collection and use of your information as described herein. If you do not agree, please discontinue use of this website immediately.
This Privacy Policy explains how Cross Bronx Theatrical Production and Cross Bronx Project Management, each a sole establishment registered in Dubai, United Arab Emirates under the Department of Economy and Tourism, Dubai, and together trading as "Cross Bronx Studio" ("CBS", "we", "our", or "us"), collect, use, store, and protect personal information obtained through crossbronxstudio.com and in the course of any engagement with our services.
1. Identity and Contact Details of the Data Controller
The data controllers for personal information collected through this website are Cross Bronx Theatrical Production (E-Trader Licence No. 1448482) and Cross Bronx Project Management (Trader Licence No. 1581338), both sole establishments registered under the Department of Economy and Tourism, Dubai, United Arab Emirates. Neither entity is a limited liability company. Both operate under the sole proprietorship of Satya Baskaran. For the purposes of this Privacy Policy, both entities are referred to collectively as "Cross Bronx Studio" or "CBS".
For all data-related enquiries, rights requests, and complaints, contact us at: info@crossbronxstudio.com
2. How These Terms Apply to You
This Privacy Policy applies to all visitors to our website, all individuals who submit any form of enquiry or communication to CBS, all individuals who engage CBS for any service, and all participants in CBS productions, workshops, events, or programs, regardless of the country or territory from which they access our website or engage with us.
Your continued use of this website after the publication of any revised version of this Policy constitutes your acceptance of the revised terms. We will notify you of material changes by updating the effective date and, where reasonably practicable, by a notice on the site. Changes apply prospectively only: a revised Policy does not alter rights or obligations that arose before the revision date.
3. Information We Collect
3.1 Information You Provide Directly
We collect personal information that you voluntarily provide when you:
Submit a contact or enquiry form on our website
Express interest in receiving communications from CBS, where we operate a mailing list or subscriber service
Submit an expression of interest in a production, workshop, program, or engagement with CBS
Correspond with us by email, telephone, or any platform linked from or associated with this site
Information collected may include your name, email address, telephone number, professional background, company affiliation, and the content of your communication. We collect only information that is necessary for the specific purpose for which it is provided.
3.2 Information Collected Automatically
When you access our website, the following data is collected automatically by our website platform and associated services:
IP address and approximate geographic location
Browser type, version, and operating system
Device identifiers, screen resolution, and hardware type
Pages visited, time spent on each page, scroll depth, and navigation path
Referring URLs and exit pages, and session duration
This data is collected through Framer Inc. (our website platform), web server logs, and any analytics integrations active on the site. It is used solely to understand website usage and improve performance. It is not used to build individual profiles or for targeted advertising.
3.3 Data Processors and Third-Party Infrastructure
Your data may be processed by the following categories of third-party service providers acting as data processors on our behalf. Each processor operates under contractual obligations and processes data only as directed by CBS:
Framer Inc. — our website hosting and building platform. Framer's infrastructure, hosted on cloud servers which may be located outside the UAE, processes site performance data and form submissions as part of platform operation. Framer's own privacy policy applies to Framer's processing activities.
Analytics providers — if Google Analytics or equivalent tools are active on the site, they collect behavioural data subject to their own terms. We configure these tools to anonymise IP addresses where technically possible.
Email delivery and communication platforms — if we operate a newsletter or subscriber list, your email address and associated details are stored on whichever platform we use for that purpose. You will be informed of the specific platform at the point of sign-up.
Cloud storage and productivity tools — used in the internal administration of CBS.
We do not authorise any processor to use your data for their own commercial purposes beyond what is necessary to provide services to us.
3.4 Cookies and Tracking Technologies
Our website, as hosted on Framer's infrastructure, may deploy cookies and similar technologies including pixels, local storage objects, and session identifiers. These may be set by Framer directly, by integrated analytics tools, or by third-party services embedded in the site.
Cookies are categorised as follows:
Strictly necessary cookies: required for core site functionality. These are deployed without consent as they are essential to provide the service you have requested.
Performance and analytics cookies: used to understand usage patterns and improve the site. Deployed with your consent where required by applicable law.
Functional cookies: used to remember preferences or settings. Deployed with your consent where required.
You may control, restrict, or delete cookies through your browser settings at any time without affecting your ability to use the core features of our website. Where applicable law requires consent for non-essential cookies, we will present a consent mechanism prior to their deployment.
4. How We Use Your Information and Our Legitimate Interests
We process personal data for the following specific purposes. Where we rely on legitimate interests as a legal basis, we have identified those interests below and confirmed that they do not override your rights and freedoms:
Responding to your enquiries and communications: necessary for the performance of pre-contractual steps and for the legitimate interest of operating our business responsively and professionally.
Managing and fulfilling service engagements: necessary for the performance of a contract to which you are a party.
Sending updates, event announcements, or promotional communications: where you have opted in, processed on the basis of consent; where you are an existing contact in a directly relevant business relationship, processed on the basis of legitimate interests in informing contacts of relevant services, subject always to your right to object.
Analysing website usage and improving site performance: processed on the basis of legitimate interests in operating an effective, secure, and user-appropriate website. We balance this interest against your data privacy rights by anonymising data wherever technically possible and not using analytics data to build individual profiles.
Enforcing our legal rights and agreements: processed on the basis of legitimate interests in protecting CBS from breach, fraud, or unlawful conduct, and to comply with legal obligations in the UAE.
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects without human review and oversight.
5. Marketing Communications and Consent
Where we operate a mailing list, newsletter, or subscriber service, we will send you communications only where you have taken an active, affirmative step to subscribe — such as ticking an unchecked opt-in box or submitting a subscription form. We do not rely on pre-ticked boxes, implied consent, or inaction as a basis for sending marketing communications.
Each marketing communication will include a clear, one-click unsubscribe mechanism. On receipt of an unsubscribe request, we will remove you from the relevant list within ten business days and retain a suppression record to prevent future unintended contact.
Withdrawing consent for marketing does not affect the lawfulness of communications sent prior to withdrawal, and does not affect our ability to contact you for non-marketing purposes directly related to a service engagement.
6. Legal Basis for Processing
Where applicable data protection law requires a legal basis for processing, we rely on the following:
Consent: where you have freely, specifically, and unambiguously indicated agreement to a particular processing activity. Consent is always recorded, time-stamped, and revocable.
Contract: where processing is necessary to perform a contract to which you are a party, or to take pre-contractual steps at your request.
Legitimate interests: as specified in Section 4 above, where processing is necessary for legitimate business interests that do not override your fundamental rights. We document our legitimate interest assessments and make them available on request.
Legal obligation: where processing is required by applicable law or regulation in the UAE or any other relevant jurisdiction.
7. Use of Artificial Intelligence Tools
CBS uses AI tools in the course of content drafting, proposal development, and internal operations. We observe the following commitments in relation to AI use:
We do not submit identifiable personal data about clients, collaborators, or third parties into AI systems without a legitimate basis for doing so.
Content generated with AI assistance is reviewed and edited by CBS personnel before use. We do not represent AI-generated content as human-authored where the distinction is material.
We do not use AI to make automated decisions about individuals that produce legal or significant effects without human oversight.
We do not consent to our website content, creative materials, brand assets, coaching methodologies, scripts, or any proprietary materials being used to train, fine-tune, or develop any AI model or system without our explicit prior written consent. Any such use is a breach of our rights and these terms.
Automated scraping, crawling, or data extraction from our website for AI training or data aggregation purposes is expressly prohibited and constitutes both a breach of contract and an infringement of our intellectual property rights.
We reserve all rights against any AI platform, aggregator, or model developer that uses our content without consent, to the fullest extent available under applicable law.
8. How We Share Your Information
CBS does not sell, rent, licence, or trade your personal data. We share information only in the following limited circumstances, and only to the minimum extent necessary:
With data processors listed in Section 3.3, under binding contractual data protection obligations
With creative collaborators or production partners directly involved in a project you have engaged us on, and only where your awareness of that sharing has been established
With professional advisors including legal counsel, accountants, or insurers, under strict confidentiality obligations
Where required by applicable law, court order, or regulatory authority in the UAE or another jurisdiction — and only to the extent compelled
In connection with a business restructuring, sale, or asset transfer, subject to equivalent data protection standards being maintained by the receiving party and advance notification to you where reasonably practicable
9. International Transfers
Our website is hosted on infrastructure that may include servers located outside the UAE. Where your personal data is transferred to, stored in, or processed in a country that does not provide equivalent data protection standards to those applicable in the UAE, we take reasonable steps to ensure appropriate safeguards are in place, including contractual protections with the relevant processor.
By using our website, you acknowledge that such transfers may occur as part of normal website operation, particularly in connection with cloud hosting and analytics services.
10. Data Retention
We retain personal data only as long as necessary for its stated purpose or as required by law:
Enquiry and contact data: up to two years from last contact, unless an ongoing engagement requires longer retention
Mailing list and subscriber data: for the duration of the subscription, plus a 90-day administrative period following unsubscription, plus a permanent suppression record to prevent re-addition without fresh consent
Service engagement records: up to seven years from completion of the engagement, consistent with commercial document retention obligations in the UAE
Analytics and website usage data: as governed by the settings of the applicable analytics platform, typically between 14 and 26 months
Data no longer required is securely deleted or irreversibly anonymised. Anonymised data, from which individuals cannot be identified, may be retained for statistical purposes indefinitely.
11. Your Rights
Subject to applicable law, you may have the following rights in relation to your personal data:
Access: request a copy of the personal data we hold about you
Rectification: request correction of inaccurate or incomplete data
Erasure: request deletion of your data, subject to legal retention requirements and other overriding grounds
Restriction: request that we limit our processing in certain defined circumstances
Objection: object to processing based on legitimate interests, including direct marketing — where you object to direct marketing, we will always comply
Portability: receive your data in a structured, machine-readable format where the processing is based on consent or contract and is carried out by automated means
Withdrawal of consent: withdraw consent at any time for any consent-based processing, without affecting the lawfulness of prior processing
Submit a written request to info@crossbronxstudio.com. We will acknowledge within five business days and respond substantively within thirty calendar days. Where a request is complex, we may extend this by a further thirty days and will notify you promptly. We may require identity verification before processing any rights request. We will not charge for reasonable requests; we reserve the right to charge a reasonable administrative fee for requests that are manifestly unfounded, excessive, or repetitive.
12. Data Security
We implement technical and organisational measures appropriate to the sensitivity of the data we hold and the risks involved, including access controls, encrypted transmission, and regular review of our practices. We require our data processors to maintain equivalent security standards.
No method of electronic transmission or storage is entirely secure. We cannot guarantee the absolute security of data transmitted to us online, and you provide information at your own risk. In the event of a personal data breach that poses a risk to your rights and freedoms, we will take immediate steps to contain the breach and will notify affected individuals and relevant authorities as required by applicable law.
13. Third-Party Links and Embedded Content
Our website may contain links to third-party websites or embedded content from external platforms. We are not responsible for the privacy practices, data handling, or content of any third-party site or platform. The presence of a link or embedded element does not constitute an endorsement. We encourage you to review the privacy policies of any external service you access.
14. Children
This website is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you have reason to believe a minor has submitted data to us without appropriate consent, contact us immediately and we will take prompt steps to delete that information.
15. Changes to This Policy
This Privacy Policy may be updated from time to time. The current version will always be published at crossbronxstudio.com with the effective date clearly displayed. Changes apply to data collected on or after the revision date. Your continued use of the website after a change is published constitutes acceptance of the updated Policy for prospective activities.
16. Complaints
If you have concerns about our data handling that we have not resolved to your satisfaction, you may be entitled to escalate a complaint to a relevant data protection supervisory authority in your jurisdiction. We are committed to cooperating with such authorities in good faith. Before escalating, we encourage you to contact us directly at info@crossbronxstudio.com so that we may attempt to resolve the matter promptly.
17. Contact
Cross Bronx Studio | info@crossbronxstudio.com | Dubai, United Arab Emirates