Privacy Policy for The Cosmic Songbook

1. Introduction

Welcome to The Cosmic Songbook! We value your privacy and are committed to protecting your data. This privacy policy explains how we collect, use, and protect your data in compliance with UK law, including the UK GDPR and the Data Protection Act 2018.

By subscribing to our Mailing List and Substack or using our services, you agree to the practices outlined in this policy.

2. Who We Are

Data Controller: Letizia Ghisletta (Leti)
Contact Details:
Email: hello@letimusic.com

3. What Data We Collect

We may collect and process the following types of personal data:

• Contact Information: Name and email address when you subscribe.

• Usage Data: How you interact with our Substack (e.g., opens, clicks).

• Optional Data: Any additional information you provide voluntarily, such as responses to surveys or comments on posts.

4. How We Use Your Data

We will only use your data where we have a lawful basis. This includes:

• Sending you updates and content from The Cosmic Songbook and leti.substack.com

• Improving our Substack and understanding how you engage with it.

• Complying with legal obligations.

5. Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases for processing your data:

• Consent: When you subscribe, you give us explicit consent to email you.

• Legitimate Interests: To improve our content and services.

You can withdraw your consent anytime by clicking the unsubscribe link in our emails or contacting us at hello@letimusic.com

6. How We Share Your Data

We do not sell your data. However, we may share it with trusted third-party providers to deliver our services, such as:

• Substack, Inc.: Our platform provider. See Substack’s Terms of Use.

• Other third-party tools for analytics, email delivery, or customer support.

7. Data Retention

We will only retain your data for as long as necessary to fulfil the purposes we collected it for, including satisfying legal, accounting, or reporting requirements.

8. Your Rights

Under UK GDPR, you have the following rights:

• Access: Request a copy of the data we hold about you.

• Correction: Request corrections to your data.

• Erasure: Request deletion of your data.

• Restriction: Request a limit to how we use your data.

• Objection: Object to processing based on legitimate interests.

• Data Portability: Request your data in a machine-readable format.

To exercise your rights, contact us at hello@letimusic.com

9. Cookies

Our Substack may use cookies to enhance your experience. For more details, see Substack’s Cookie Policy.

10. Data Transfers

As Substack is a US-based platform, your data may be transferred and processed outside the UK. Substack complies with GDPR requirements for international data transfers.

11. Changes to This Privacy Policy

We may update this policy occasionally to reflect changes in the law or our practices. Please review this page regularly.

12. Contact Us

If you have questions about this policy or your data rights, contact us at:
hello@letimusic.com