Effective Date: August 19, 2026
Policy Version: 1.0
Jurisdiction of Establishment: Commonwealth of The Bahamas
I researched this from the standpoint of C4TheLegend becoming an international media, e-commerce, advertising, podcast, documentary, business-directory and content-production platform—not merely a Bahamian informational website.
That distinction matters. A privacy policy that promises more than the company actually does can itself create liability. The U.S. FTC expressly warns businesses to make sure they honor the privacy promises they make, and it has brought enforcement actions over misleading privacy and security representations. (Federal Trade Commission) European regulators have likewise imposed major penalties where transparency, children's privacy and international transfers were deficient. (Homepage | Data Protection Commission)
I have therefore deliberately avoided dangerous absolute promises such as “we will never share your information,” “your information is 100% secure,” or “we comply with every privacy law worldwide.” Those are exactly the kinds of statements a growing company should not make unless it can guarantee them.
This policy is designed around Bahamian data-protection principles while incorporating major international standards such as GDPR/UK GDPR transparency requirements and, where applicable, California consumer privacy requirements. (DLA Piper Data Protection)
C4TheLegend Media Bahamas (“C4TheLegend,” “C4TheLegend Media,” “we,” “our,” or “us”) respects the privacy, dignity and personal information of the individuals and organizations that interact with our platforms.
C4TheLegend is a Bahamian media and cultural platform created to document, preserve, promote and share Bahamian stories, history, culture, businesses, travel, entertainment, education and perspectives with The Bahamas and the wider world.
Our operations may include websites, mobile experiences, podcasts, documentaries, social-media platforms, photography, video production, livestreaming, advertising, business promotion, directories, merchandise, competitions, newsletters, educational resources, event coverage and other digital or physical media activities.
This Privacy Policy explains how we may collect, receive, use, process, store, disclose and protect personal information.
Our objective is simple:
If you trust C4TheLegend with your information, we must treat that information responsibly.
This Policy applies to personal information processed through C4TheLegend-controlled services, including our:
It does not automatically govern independent third-party websites, platforms or services merely because C4TheLegend links to, embeds or uses them.
Those services may maintain their own privacy policies.
Depending upon how an individual interacts with C4TheLegend, we may collect the following categories.
This can include:
name, business name, username, mailing address, island/country, email address, telephone number and other information voluntarily supplied to us.
If accounts are introduced, this may include username, password credentials or authentication information, account preferences and account activity.
Passwords should, where technically appropriate, be stored through secure authentication systems rather than in readable form.
When purchasing merchandise, advertising, production services or other products or services, information may include:
purchase history, billing details, delivery information, transaction identifiers, refunds and payment status.
C4TheLegend should use established payment processors whenever practicable and should not intentionally retain complete payment-card numbers or security codes unless operationally necessary and lawfully handled through an appropriate compliant system.
Businesses applying for directory listings, advertising or promotional coverage may provide:
company information, owner/representative information, photographs, logos, social-media accounts, business descriptions, products, services, websites and contact details.
We may retain messages sent through:
email, website forms, telephone communications, WhatsApp/business messaging, social media or customer-service systems.
Because C4TheLegend is a media organization, information may include:
photographs, video, audio, interviews, voice recordings, event footage, testimonials, biographies, submitted stories and other audiovisual material.
Separate releases, production agreements or consent procedures may apply where appropriate.
When someone uses our digital services, certain technical information may be collected automatically, including:
IP address, browser type, device type, operating system, approximate geographic region, referring pages, pages viewed, time spent, links selected, session information, cookie identifiers and advertising or analytics information.
We may use this information to understand how audiences use our services, improve performance, protect the website, measure campaigns and develop better content.
C4TheLegend may use cookies, pixels, tags, local storage and similar technologies.
These may support:
website functionality, security, analytics, preferences, audience measurement, advertising attribution and content personalization.
Where applicable law requires consent before using non-essential technologies, users should be provided with an appropriate consent mechanism.
Rejecting optional cookies should be as straightforward as accepting them where legally required.
This is intentional. Privacy interfaces should not manipulate people into consenting.
We may process personal information for legitimate and lawful purposes including:
providing requested services; processing purchases; responding to inquiries; operating accounts; delivering media services; maintaining business-directory listings; producing authorized interviews and features; administering promotions; improving our platforms; protecting users and systems; preventing fraud; maintaining records; fulfilling contracts; complying with legal obligations; communicating about services; measuring content performance; and, where permitted, providing relevant marketing.
We should not collect personal information merely because technology makes collection possible.
Data should have a purpose.
Where applicable law requires a specific lawful basis, C4TheLegend may rely upon:
Consent — where an individual has freely given valid permission.
Contract — where processing is necessary to provide something requested or fulfill an agreement.
Legal obligation — where processing is required by law.
Legitimate interests — where we have a legitimate business or operational reason and those interests are not overridden by an individual's applicable rights.
Other lawful bases may apply where recognized by applicable law.
GDPR transparency rules require organizations to identify their purposes and legal basis and provide information including retention periods or the criteria used to establish them. (GDPR)
Where permitted by applicable law, C4TheLegend may send information concerning:
new productions, documentaries, events, merchandise, advertising opportunities, featured businesses, promotions, competitions and other C4TheLegend services.
Where consent is legally required, marketing will be based upon appropriate consent.
Users should be able to unsubscribe from electronic promotional communications through the method supplied in the communication or by contacting us.
Unsubscribing from marketing does not necessarily prevent operational communications concerning an existing transaction or service.
C4TheLegend may generate revenue through advertising and sponsorship.
Advertising may include:
sponsored documentaries, sponsored podcast episodes, website advertising, branded content, business features, affiliate relationships, product placements and other commercial partnerships.
Where advertising technologies process personal information, we will endeavor to provide disclosures and choices required by applicable law.
C4TheLegend should also clearly distinguish paid promotional content from independent editorial content where appropriate.
C4TheLegend does not presently intend to use sensitive personal information to secretly increase the price charged to an individual based upon assumptions about that person's willingness or ability to pay.
If C4TheLegend later introduces individualized pricing based materially upon personal-data profiling, this Policy and the relevant customer disclosures should be updated before deployment.
This is an emerging regulatory issue: as of August 2026, the FTC is considering requiring greater disclosure when businesses use personal data for personalized pricing. (Reuters)
Building this protection into the policy now puts C4TheLegend ahead of that problem.
C4TheLegend may use artificial-intelligence technologies to assist with legitimate operations such as:
editing, transcription, captioning, translation, research assistance, content organization, graphic creation, administrative support, audience analytics and production workflows.
We will endeavor not to knowingly submit highly sensitive personal information to public generative-AI systems where doing so is unnecessary or inappropriate.
AI should assist human creativity and operations.
It should not eliminate reasonable human judgment in consequential decisions affecting individuals.
This section is particularly important because C4TheLegend intends its historical and educational resources to be useful to Bahamian students.
Children should be able to read and learn from C4TheLegend without being required to surrender unnecessary personal information.
C4TheLegend does not intentionally seek unnecessary sensitive information from children.
Where services are specifically directed toward children and applicable law requires parental or guardian consent, appropriate consent procedures should be implemented.
We should use enhanced safeguards where we know information relates to a child.
C4TheLegend should not knowingly sell children's personal information.
Educational access and commercial profiling should remain meaningfully separated wherever practicable.
Regulatory experience demonstrates why this matters: TikTok faced substantial European enforcement concerning children's privacy settings and data handling. (AP News)
C4TheLegend may permit users to submit:
stories, photographs, videos, historical information, business recommendations, comments, memories, corrections or other content.
Users should not submit private information about another individual unless they have a lawful basis or appropriate permission to do so.
Information intentionally submitted for publication may become publicly accessible.
Users should therefore carefully consider what information they submit for publication.
Participation in a C4TheLegend interview, podcast, documentary or recorded feature may result in the participant's:
name, image, likeness, voice, biography, statements and other authorized material
being published and distributed through C4TheLegend platforms and third-party distribution services.
Where appropriate, this should be governed by a separate Media Appearance/Contributor Release.
The Privacy Policy alone should not be used as a substitute for a proper appearance release.
C4TheLegend is a media platform.
Our teams may photograph, film or report upon public events, cultural activities, newsworthy matters, Junkanoo, sporting events, festivals, public performances and other events.
Different privacy, journalistic, artistic, public-interest and freedom-of-expression considerations may apply to material created for editorial purposes.
Where legally appropriate, C4TheLegend will balance privacy interests against legitimate journalistic, documentary, historical and public-interest considerations.
C4TheLegend does not treat personal information as something that should casually be distributed.
However, information may need to be shared with carefully selected recipients, including:
hosting providers; website infrastructure providers; payment processors; delivery companies; email providers; analytics providers; professional advisers; accountants; insurers; contractors; production partners; cloud-storage providers; advertising technology providers; security providers; regulators; law enforcement; courts; or other recipients where legitimately necessary.
We may also disclose information:
with the individual's authorization; to complete a requested transaction; to protect legal rights; to investigate suspected fraud or security threats; when required by lawful legal process; or as part of a legitimate merger, financing, acquisition, restructuring or sale of business assets.
International regulators have criticized policies that merely say information may go to vague groups such as “business partners.” Greater specificity regarding recipients is preferable. (Mayer Brown)
C4TheLegend should therefore maintain an internal Third-Party Data Processor Register identifying the actual vendors receiving personal information.
C4TheLegend's business model is media, production, advertising, promotion, cultural documentation, commerce and related services.
It is not our intended business model to operate as a data broker selling databases of users' personal information.
If that practice ever materially changes, appropriate disclosures and legally required choices must be implemented before the change.
C4TheLegend is based in The Bahamas but intends to serve an international audience.
Consequently, information may sometimes be processed in countries other than the country in which it was collected.
Where applicable law requires safeguards for international transfers, C4TheLegend will endeavor to use legally recognized mechanisms appropriate to the circumstances.
This provision is deliberately included. Cross-border transfers are not merely technical details: Ireland's Data Protection Commission imposed a €530 million fine against TikTok in 2025 concerning EEA user-data transfers and related transparency issues. (Homepage | Data Protection Commission)
We should retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legitimate:
business, contractual, accounting, tax, security, evidentiary, journalistic, historical and legal requirements.
Different categories of information require different retention periods.
C4TheLegend should maintain a separate internal Data Retention Schedule rather than promising one universal deletion period that may prove impossible or legally inappropriate.
When information is no longer reasonably required, it should be securely deleted, anonymized or otherwise appropriately disposed of, subject to lawful exceptions.
C4TheLegend will endeavor to maintain administrative, organizational and technical safeguards proportionate to the nature of the information processed.
Measures may include, where appropriate:
access controls, strong authentication, password management, multi-factor authentication, encryption, secure backups, software updates, restricted administrative privileges, staff confidentiality obligations and incident-response procedures.
However:
No website, network, transmission system or electronic storage system can truthfully be guaranteed to be 100% secure.
Accordingly, C4TheLegend does not make an absolute guarantee of security.
That limitation is important because regulators including the FTC have pursued organizations that promised consumers security protections they did not actually deliver. (Federal Trade Commission)
If C4TheLegend becomes aware of a personal-data incident, we will investigate and take reasonable steps appropriate to the circumstances.
Where applicable law requires notification to a regulator or affected individuals, C4TheLegend will endeavor to make the legally required notification within the applicable timeframe.
C4TheLegend should maintain a written Data Breach & Cyber Incident Response Plan separately from this public Policy.
Depending upon where a person resides and which law applies, that person may have rights concerning their personal information, potentially including the right to:
The exact rights available depend upon jurisdiction and circumstances.
For example, California law provides qualifying consumers with specific privacy rights, while GDPR/UK GDPR frameworks impose detailed transparency and data-subject requirements. (California DOJ Attorney General)
Privacy requests should be submitted through the designated privacy contact published by C4TheLegend.
We may need to verify the identity of a requester before disclosing, modifying or deleting personal information.
This protects users from unauthorized requests made by another person.
We will not unlawfully discriminate against an individual merely because that individual exercises a legally protected privacy right.
C4TheLegend content may be distributed through third-party services such as social networks, video platforms, payment systems and other technology providers.
Those organizations operate under their own terms and privacy practices.
C4TheLegend cannot control independent processing performed by those third parties.
Users should review the relevant provider's privacy information when using those services.
Our platforms may contain links to businesses, historical sources, tourism resources, sponsors, advertisers, interview guests and other websites.
A link does not mean that C4TheLegend controls the linked website's privacy or security practices.
If C4TheLegend undergoes a merger, acquisition, investment, restructuring, financing, reorganization or sale of some or all of its assets, personal information may form part of the transferred business records where legally permitted.
Any successor receiving such information should be required to process it consistently with applicable law and relevant contractual obligations.
Where applicable law requires recognition of legally valid browser-based opt-out mechanisms, including qualifying universal opt-out signals, C4TheLegend will endeavor to configure its systems accordingly.
Technical implementation should be reviewed whenever the website's advertising or analytics stack changes.
C4TheLegend may update this Privacy Policy as:
our business evolves, technology changes, new services are introduced or legal requirements change.
The current version should always display an effective date.
If a change materially alters how existing personal information is used, C4TheLegend should provide additional notice or obtain consent where required rather than assuming that merely posting a revised policy automatically authorizes every new use.
C4TheLegend Media Bahamas operates from the Commonwealth of The Bahamas.
Bahamian data-protection law establishes principles concerning the collection, processing, retention, disclosure, security and rights associated with personal data. (DLA Piper Data Protection)
Where C4TheLegend's activities become subject to mandatory privacy requirements of another jurisdiction, applicable mandatory provisions may apply notwithstanding the company's Bahamian establishment.
Questions, privacy requests or concerns concerning this Policy should be directed to:
C4TheLegend Media Bahamas
Founder: Clayton “C4” Phillips
Commonwealth of The Bahamas
Telephone: (242) 448-0787
Privacy Email: A dedicated address should be created before publication, preferably:
privacy@c4thelegend.com
Website: Insert official C4TheLegend domain once finalized.
At C4TheLegend, people are not merely statistics, clicks or advertising profiles.
They are the communities whose stories we exist to document.
As our platform grows from The Bahamas to the Caribbean and ultimately to the world, our responsibility must grow with it.
Collect what we need.
Explain why we need it.
Protect what we receive.
Respect people's choices.
And never forget that trust is harder to rebuild than data is to collect.
© 2026 C4TheLegend Media Bahamas. All Rights Reserved.
This is a place to describe your Return and Refund Policy to buyers.
A Return and Refund policy usually consists of:
Copyright © 2026 C4 the Legend Media Bahamas - All Rights Reserved.
We use cookies to analyze website traffic and optimize your website experience. By accepting our use of cookies, your data will be aggregated with all other user data.