LEGAL Privacy Policy Terms & Conditions
FEZ MEDIA · LEGAL

Privacy Policy

FEZ Media is a small design practice, not an advertising business. This page explains the short list of information we collect, why we have it, and how to get it removed.

EFFECTIVE SEPTEMBER 8, 2026 · LAST UPDATED SEPTEMBER 27, 2026

CONTENTS
01  Who we are 02  What we collect 03  How we use it 04  Who we share it with 05  Cookies and tracking 06  How long we keep it 07  Your choices and rights 08  Security 09  Children 10  Changes to this policy 11  Contact
01

Who we are

FEZ Media LLC is a Maryland limited liability company and the design practice of Zaye Flowers, based in Baltimore, Maryland. We provide UX and product design, workshops and facilitation, design mentorship, and the FEZ Innovation Lab cohort program. In this policy, “we,” “us,” and “FEZ Media” mean that company, and “you” means anyone who visits fezmedia.co, emails us, applies to a cohort, or engages us for client work.

FEZ Media is the controller of the information described here, and our mailing address is:

FEZ Media LLC
6340 Security Blvd. Suite 100 #1192
Baltimore, MD 21207
United States

You can reach us any time at hello@fezmedia.co, or at lab@fezmedia.co for anything to do with the FEZ Innovation Lab.

02

What we collect

Information you give us

Payment information

Payments, including the FEZ Innovation Lab deposit and balance, are processed by Stripe. Card numbers and banking details go directly to Stripe and are never received or stored by FEZ Media. We see only what Stripe reports back to us: the payer's name and email, the amount, the date, and whether the payment succeeded.

Information collected automatically

fezmedia.co is a static site, and it runs no analytics unless you agree to it first. The banner on your first visit asks whether we may count visits with Google Analytics 4 and Umami. If you decline, or simply ignore it, neither is loaded at all: no script, no cookie, no request. If you accept, Google receives your IP address, the page you are viewing, the page that referred you, and general device and browser details, and stores an identifier in your browser so a single visit is not counted twice. Umami receives the page you are viewing, the referring page, and general device, browser, and country details; it sets no cookie and stores no identifier in your browser. We look at both only in aggregate. Apart from the Meta pixel on the two pages our Facebook ads link to (described under Cookies and tracking), we do not run advertising pixels, and we run no session-recording tools; we have not turned on Google's advertising or audience features, and we do not use analytics to build a profile of you. Our hosting provider keeps standard server logs (IP address, browser type, requested page, timestamp) for delivery, security, and troubleshooting. Fonts are loaded from Google Fonts, which means Google receives your IP address when a page loads.

What we never collect

We do not ask for, and have no use for, government identifiers, financial account numbers, health information, or precise location data. Please do not send them to us.

03

How we use it

We never sell your information, and we do not add you to a marketing list because you emailed us or applied to a cohort. If we ever start a newsletter, joining it will be a separate, deliberate opt-in. There is exactly one thing we do that counts as sharing information for advertising: the Meta pixel on the worksheet and website teardown pages, which runs only if you accept the cookie banner. It is described in full under Cookies and tracking.

If you are in the EU, the UK, or another region with similar law: we process this information to take steps at your request before entering a contract and to perform that contract (client work and cohort enrollment), to comply with legal obligations (tax and accounting records), and on the basis of our legitimate interest in operating and securing a small design practice.

04

Who we share it with

We share information only with the service providers that make the site and the practice run, and only to the extent each one needs. They are bound by their own terms and privacy commitments.

ProviderWhat it handles
VercelHosting and delivery of fezmedia.co, including server logs
FormspreeDelivery of form submissions (cohort applications, waitlist sign-ups, and enquiries) to our inbox
HubSpotOur CRM. Receives a copy of what you submit through a form on this site (your name, email, and what you wrote) so we can follow up and keep track of the conversation. For visitors who arrive at the worksheet from our Facebook signup, it also receives their Section 1 worksheet answers, as described in what we collect
StripePayment processing for deposits, balances, and invoices
CalendlyScheduling for intro and fit calls; receives the name, email, and notes you enter when booking
Google FontsServes the site's typefaces; receives your IP address on page load
Meta (Facebook)Only if you accept the banner, and only on the worksheet and website teardown pages. Measures our Facebook ads; receives your IP address, the page address, browser details, and whether you sent the form on that page, never its contents
Google AnalyticsOnly if you accept the banner. Counts visits and page views; receives your IP address, page, and referrer, and sets analytics cookies
UmamiOnly if you accept the banner. Counts visits and page views; receives the page, referrer, and general device and browser details, and sets no cookies
Our email and file providersCorrespondence, project files, and business records

We may also disclose information if the law requires it, if we need to enforce our Terms and Conditions, or to protect the rights and safety of FEZ Media, our clients, or cohort participants. If the practice is ever sold or merged, information may transfer as part of that transaction; we will say so on this page before it takes effect.

Some of these providers operate in the United States. If you are outside the U.S., your information will be transferred and processed there.

05

Cookies and tracking

Nothing is set until you say yes. On your first visit a banner asks whether we may count visits with Google Analytics and Umami, and, on the two pages our Facebook ads link to, measure those ads with Meta’s pixel. Until you accept, none of these scripts is loaded and no cookie is written; declining and ignoring the banner have exactly the same effect. The site behaves identically either way, and there is no second ask.

If you accept, Google Analytics writes two cookies, _ga and _ga_W7VMZ72XNV, which let it tell one visit from another and recognize a return visit for up to two years. Google’s advertising and audience features are switched off on our property. Umami writes no cookies at all.

Two pages also run the Meta pixel, if you accept. fezmedia.co/worksheet and fezmedia.co/teardown are where our Facebook ads send people, and they are the only pages that load it. The pixel tells Meta that a visit happened, along with the page address, your IP address and your browser details, and, when you send the form on one of those pages, that a form was sent. It never sends what you wrote in the form. We use this to tell whether the ads are reaching anyone and show follow-ups to people who have already been. It writes a cookie called _fbp, which gives your browser an identifier Meta can recognize, and, if you arrived by clicking one of our ads, a second called _fbc recording that click. Both last three months. Unlike the analytics cookies, that is an advertising cookie, and the data goes to Meta, who handle it under their own privacy policy.

Those four are the only cookies fezmedia.co sets, and none of them are set unless you accept. Declining, or simply never answering, means the pixel is never loaded on any page. If you accept and later change your mind using the control below, we delete the Meta cookies along with the analytics ones.

Your answer is remembered in your browser's local storage, not in a cookie, and it never leaves your device. You can change it whenever you like:

Your current choice: —

Reopens the banner and clears the analytics and Meta cookies

You can also block cookies for this site in your browser, install Google's Analytics opt-out add-on, or use your browser's built-in tracking protection.

If you follow a link from our site to Stripe's checkout, Calendly, LinkedIn, the App Store, or any other external service, that service applies its own cookies and privacy policy once you arrive. We never sell your information. The Meta pixel above is the only thing here that counts as sharing it for cross-context behavioral advertising, and it does not load unless you accept. If your browser sends a Global Privacy Control signal, we treat that as a standing opt-out and do not load the pixel at all, even if the banner was accepted on an earlier visit. We do not separately act on “Do Not Track”, which never acquired an agreed meaning; nothing here tracks you until you opt in.

06

How long we keep it

07

Your choices and rights

Whatever jurisdiction you are in, you can email hello@fezmedia.co and ask us to:

We will respond within 30 days and will not charge you or treat you differently for asking. We may need to confirm your identity first, usually by replying from the address we already have on file for you.

California residents. We do not sell personal information, and we do not knowingly sell or share the information of anyone under 16. We do share information for cross-context behavioral advertising in one place (the Meta pixel on the worksheet and website teardown pages) and only for visitors who accept the cookie banner. You can withdraw that at any time with the control under Cookies and tracking, which also deletes the cookies, and we honor Global Privacy Control as an opt-out signal. You may exercise your rights to know, delete, and correct through the same email address, and you may use an authorized agent.

EU, UK, and similar jurisdictions. In addition to the rights above, you may withdraw consent where we rely on it and lodge a complaint with your local supervisory authority. We would appreciate the chance to resolve it with you first.

08

Security

The site is served over HTTPS. Accounts holding your information are protected with strong, unique credentials and multi-factor authentication, and access is limited to Zaye Flowers and any collaborator who needs it for a specific engagement. Payment data is handled entirely by Stripe, a PCI-compliant processor.

No method of transmission or storage is perfectly secure, and we will not claim otherwise. Please do not send passwords, card numbers, or other sensitive credentials by email.

09

Children

Our services are intended for adults. The site is not directed to children under 13, and we do not knowingly collect their information. FEZ Innovation Lab participants must be 18 or older, or enrolled with the consent and involvement of a parent or guardian. If you believe a child has given us information, email us and we will delete it.

10

Changes to this policy

If we change how we handle information, we will update this page and move the “last updated” date at the top. Material changes (a new category of data, a new provider that receives it) will be described plainly here, and we will email active clients and participants when the change affects them.

11

Contact

Questions, requests, or corrections about this policy:

hello@fezmedia.co
lab@fezmedia.co (Innovation Lab)

FEZ Media LLC
6340 Security Blvd. Suite 100 #1192
Baltimore, MD 21207
United States

See also our Terms and Conditions, which cover use of this site and enrollment in the FEZ Innovation Lab.