lily-music.com

Privacy

Privacy policy

Last updated 1 October 2026

1. When you visit the site

Hosting

The site is delivered by Cloudflare, Inc. (USA). To show you the page, Cloudflare processes your IP address and basic technical details of the request (such as your browser type, the address you opened and the time), including to protect the site against attacks. Legal basis: our legitimate interest in running the site and keeping it secure (Article 6(1)(f) GDPR).

Visit statistics

We use Umami Cloud (Umami Software, Inc., USA) to see how many people visit, where they come from and which links they tap. Umami records the page you open, the address you came from (including campaign tags, for example from the Instagram or TikTok bio), the links you tap, your browser, operating system and device type, screen size, language, and approximate location (country, region and city).

Umami doesn’t use cookies, doesn’t store anything on your device and doesn’t store your IP address. It uses the IP address only briefly, to work out the location and to recognise a single visit by an anonymous code (a hash) that is reset regularly. This means we can’t identify you or follow you across other websites. Statistics are kept for 6 months. Legal basis: our legitimate interest in understanding how the site is used (Article 6(1)(f) GDPR). You can block the statistics with any content blocker.

Cookies

We don’t use cookies for statistics, advertising or anything else that needs your consent. Apart from the statistics script, everything on the page, including fonts and images, comes from this site.

2. The vinyl pre-sale list

  • What: the details you enter in the form.
  • Why: to contact you about the pre-sale of the Love Letters vinyl.
  • Legal basis: your consent, given in the form (Article 6(1)(a) GDPR, and Article 398 of the Polish Electronic Communications Law for contacting you by email or phone). You can withdraw it at any time, for example by replying to any message we send you about the pre-sale. Withdrawing doesn’t affect what we did with your data before.
  • Where it’s kept: the form runs on Google Forms (Google Ireland Limited), and the answers are stored by Google.
  • How long: until the pre-sale is over, then we delete the list. If you withdraw your consent before then, we delete your details straight away.
  • Giving your details is voluntary, but without them we can’t contact you about the pre-sale. If you’re under 16, a parent or guardian has to give or approve the consent.
  • We use the list only for the pre-sale. We don’t sell it or share it with anyone else.

3. Who receives data, and transfers outside the EU

Apart from the providers named above (Cloudflare, Umami and Google), we don’t pass your data to anyone. Cloudflare and Umami are US companies, and Google may also process data in the US, so data may be processed in the United States. Cloudflare, Inc. and Google LLC take part in the EU-U.S. Data Privacy Framework, which the European Commission has recognised as providing adequate protection.

4. Links to other services

Links on the site lead to Spotify, YouTube Music, TikTok, Instagram and Google Forms. Once you follow a link, you’re on that service, and its own privacy policy applies. We only learn, through the anonymous statistics, that a link was tapped.

5. Your rights

You have the right to:

  • access your data and get a copy of it,
  • have it corrected,
  • have it deleted,
  • restrict how it’s used,
  • receive the details you gave in the form in a portable format,
  • object to our use of data based on legitimate interest (hosting and statistics),
  • withdraw your consent at any time.

To use any of these rights, contact us. If you’re on the pre-sale list, you can simply reply to any message we send you about the pre-sale. The statistics are anonymous to us, so we usually can’t find anything about you in them (Article 11 GDPR).

You can also complain to the Polish data protection authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl), or to the authority in the EU country where you live.

6. Automated decisions

We don’t make automated decisions about you or profile you based on your data.

7. Changes

If we change this policy, we’ll publish the new version on this page with a new date.