Legal  ·  Privacy

PRIVACY
POLICY

This policy applies to all visitors, clients, and prospective clients of Jaime Andres Media, including healthcare systems, universities, and enterprise organizations conducting vendor vetting.

Security-Aware  ·  HIPAA-Conscious  ·  Veteran-Owned
Our commitment to your privacy is not a formality. Jaime Andres Media has operated in environments requiring federal security clearances, access to high-security government and healthcare facilities, and strict information handling protocols for over 20 years. That operational background informs how we approach data — with discretion, accountability, and a genuine understanding of what is at stake for the organizations we serve. This policy governs how we collect, use, protect, and handle information obtained through our website and professional engagements.
1. Who We Are

Jaime Andres Media is a veteran-owned, boutique video production studio based in Miami, Florida. We produce corporate brand films, executive interviews, testimonial videos, event coverage, aerial cinematography, and specialized photography for healthcare systems, universities, construction firms, financial institutions, hospitality brands, and marketing agencies throughout South Florida and nationally.

Data controller: Jaime Andres, Founder
Email: info@jaimeandresmedia.com
Phone: +1 (786) 232-0830
Website: https://www.jaimeandresmedia.com

2. Information We Collect

We collect only the information necessary to respond to inquiries, fulfill contracted production services, and maintain a professional relationship with clients. This includes:

  • Contact information submitted through our website form: name, company name, email address, and project description.
  • Communications conducted via email, phone, or written correspondence related to project scoping, production, and delivery.
  • Project materials provided by clients for production purposes, which may include scripts, brand assets, internal documents, or personnel information relevant to on-camera participants.
  • Usage data collected automatically when you visit our website, including IP address, browser type, pages visited, and time spent on page, via standard web analytics tools.

We do not collect payment card data directly. Invoicing and payment processing are handled through third-party platforms subject to their own PCI-DSS compliance requirements.

3. How We Use Your Information

Information collected is used exclusively for the following purposes:

  • Responding to project inquiries and providing production scopes or proposals
  • Planning, coordinating, and executing contracted video production and photography engagements
  • Communicating project updates, deliverables, and post-production timelines
  • Maintaining business records in compliance with applicable tax and contract law
  • Improving our website and understanding how visitors engage with our content

We do not sell, rent, lease, or trade your personal information to any third party. We do not use client information for unsolicited marketing. Any follow-up communication after project completion is limited to relevant production updates or client-initiated inquiries.

4. Healthcare Clients and HIPAA Awareness

Jaime Andres Media works with healthcare systems, hospital networks, medical schools, and affiliated research institutions. We understand that production engagements in healthcare environments may involve incidental exposure to protected health information (PHI) as defined under the Health Insurance Portability and Accountability Act (HIPAA).

Our operational protocols for healthcare productions include:

  • Filming only in pre-approved areas designated by the client's HIPAA compliance officer
  • Executing Business Associate Agreements (BAA) when required by the covered entity prior to on-site production
  • Training all crew members on PHI non-disclosure obligations before entering clinical or patient-accessible spaces
  • Immediately halting filming if unauthorized PHI exposure is identified and notifying the client's designated compliance contact
  • Deleting or returning any incidentally captured PHI in accordance with the client's written instructions and applicable HIPAA rules
  • Maintaining footage on password-protected, encrypted storage devices during production and post-production

Jaime Andres Media does not access, process, store, or transmit electronic PHI as a primary function of our services. Where a BAA is required, we will execute it prior to commencement of services. Healthcare organizations conducting vendor vetting are invited to contact us directly to review our data handling procedures.

5. University and Institutional Clients

Production engagements at educational institutions may involve filming students, faculty, staff, or research environments. Jaime Andres Media adheres to the following practices in academic settings:

  • Obtaining and documenting written consent from all identifiable on-camera participants, or relying on the institution's existing release processes where applicable
  • Complying with FERPA-related obligations for any production involving student subjects, including restricting footage use to the agreed deliverable scope
  • Coordinating with institutional communications, legal, or compliance offices prior to filming in restricted or sensitive research areas
  • Respecting intellectual property and confidentiality designations for proprietary research, clinical trial environments, or sensitive program information encountered during production
6. Security Background and Operational Standards

The founder of Jaime Andres Media has over 20 years of professional experience operating in high-security facilities requiring federal security clearances, including government installations, defense contractors, and secure healthcare campuses. This background shapes how our studio approaches information handling, access control, and confidentiality in production environments.

Our operational security standards include:

  • Non-disclosure agreements (NDAs) available and routinely executed for sensitive productions
  • Crew vetting and briefing before accessing restricted client facilities
  • Encrypted file transfer for delivery of raw footage and final deliverables upon client request
  • Strict chain-of-custody for all physical media (drives, cards, printed materials) used during production
  • No unauthorized sharing, posting, or reference to client facilities, personnel, or project details without explicit written approval

Enterprise clients with specific security requirements, facility access protocols, or internal vendor compliance questionnaires are encouraged to contact us to discuss accommodation.

7. Personally Identifiable Information (PII)

Personally Identifiable Information (PII) is any data that could be used to identify a specific individual. In the course of our production services, we may handle PII relating to on-camera talent, interview subjects, event attendees, or client personnel.

Our PII handling commitments:

  • PII collected during production (talent releases, contact sheets, interview schedules) is used solely for the contracted engagement and is not retained beyond project completion unless required by law or the client agreement
  • PII is never sold, shared, or disclosed to third parties outside the production crew and post-production team assigned to the engagement
  • Individuals appearing in produced content have the right to request removal or modification of their likeness in deliverables, subject to the terms of their signed talent release and the client's content rights
  • Website contact form submissions are processed through Netlify Forms and are subject to Netlify's privacy policy in addition to our own
8. Data Storage and Retention

Project files, raw footage, and deliverables are stored on password-protected, encrypted hard drives during production and post-production. Cloud-based storage, when used for client file transfer or review, is limited to platforms with documented security certifications (SOC 2 Type II, AES-256 encryption at rest and in transit).

Retention periods:

  • Project files and deliverables: Retained for 90 days following final delivery, then archived or deleted per client instruction
  • Business correspondence and contracts: Retained for 7 years in accordance with Florida business records requirements
  • Website inquiry data: Retained only as long as necessary to respond to the inquiry and maintain a record of the business relationship
  • PHI encountered incidentally during healthcare productions: Deleted or returned immediately upon project completion or as directed by the client's compliance officer
9. Cookies and Website Analytics

Our website uses standard analytics to understand visitor behavior and improve user experience. No personally identifiable tracking cookies are set without user consent. The site does not serve third-party advertising, does not run ad networks, and does not sell or share analytics data with any commercial third party.

Visitors may disable cookies through their browser settings without affecting their ability to use the website.

10. Third-Party Services

Our website and production operations use the following third-party services, each subject to their own privacy policies:

  • Netlify — website hosting and contact form processing (netlify.com/privacy)
  • Vimeo — video hosting and portfolio showcase delivery (vimeo.com/privacy)
  • Google Fonts — web font delivery via Google's CDN
  • Google Analytics / Search Console — website traffic and search performance analysis

We do not integrate social media tracking pixels, retargeting scripts, or behavioral advertising tools on this website.

11. Your Rights

Individuals whose personal information we hold have the following rights, exercisable by contacting us directly:

  • Right of access: Request a copy of the personal information we hold about you
  • Right to correction: Request correction of inaccurate or incomplete information
  • Right to deletion: Request deletion of personal information we hold, subject to legal retention requirements
  • Right to withdraw consent: Withdraw consent for any use of your information at any time
  • Right to object: Object to the processing of your information for any purpose

Florida residents have additional rights under the Florida Digital Bill of Rights. To exercise any of the above rights, contact us at info@jaimeandresmedia.com. We will respond within 30 days.

12. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. Productions involving minor participants require explicit written parental or guardian consent prior to filming, executed through a separate minor talent release agreement.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, or applicable law. The "Last updated" date at the top of this page will reflect the most recent revision. Continued use of our website or services following a policy update constitutes acceptance of the revised terms.

14. Contact

For questions, vendor vetting inquiries, BAA requests, or to exercise your privacy rights, please contact:

Jaime Andres Media
Attn: Privacy & Compliance
Email: info@jaimeandresmedia.com
Phone: +1 (786) 232-0830
Miami, Florida, United States