Email Privacy Policy

1. Introduction

This Privacy Policy explains how GulfSprite ("we," "us," or "our") collects, uses, and protects your personal information when you subscribe to our email list, visit our website, or interact with our content. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the Canadian Anti-Spam Legislation (CASL).

2. Who We Are (Data Controller)

The data controller responsible for your personal information is:

3. What Information We Collect

We collect the following personal information when you subscribe to our email list:

• Email address (required)
• First name (optional, if provided)
• IP address and timestamp (automatically recorded when you subscribe)
• Consent record (the exact consent text you agreed to, and when)

We do not collect payment information, phone numbers, or physical addresses from email subscribers.

4. How We Use Your Information

We use your email address to:

• Send The Vault Letters newsletter
• Send occasional updates about new artwork, products, and community offerings
• Respond to your replies or questions

We do not sell, rent, or share your email address with third parties for their own marketing purposes.

5. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data on the following legal bases:

• Consent (Article 6(1)(a)): You have given clear consent to receive marketing emails by checking the opt-in box and confirming your subscription via double opt-in.
• Legitimate interest (Article 6(1)(f)): We may process data to maintain the security and functionality of our email system.

You may withdraw your consent at any time by unsubscribing.

6. Data Retention

We retain your email address and consent record for as long as you remain subscribed. If you unsubscribe, we retain a minimal suppression record (your email address and unsubscribe timestamp) to ensure we do not contact you again. This record is kept indefinitely for compliance purposes.

7. Who We Share Your Data With

We use MailerLite (UAB "MailerLite," Lithuania) as our email service provider. MailerLite processes your data on our behalf and is bound by a Data Processing Agreement. MailerLite's servers are primarily located in the European Union, with some subprocessors in the United States operating under Standard Contractual Clauses.

• When required by law
• To protect our legal rights
• With your explicit consent

We do not share your data with any other third parties except:

8. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the European Union and the United States. Where data is transferred outside the EU/EEA, we rely on Standard Contractual Clauses approved by the European Commission to ensure adequate protection.

9. Your Rights

Under GDPR and similar laws, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

10. Cookies and Tracking

Our signup forms may use cookies to function properly. We do not use cookies for advertising or cross-site tracking. MailerLite may set functional cookies necessary for form submission and subscription confirmation.

11. How to Unsubscribe

Every email we send includes a one-click unsubscribe link in the footer. You can also reply to any email with "unsubscribe" or contact us directly at [email protected]. Unsubscribe requests are processed promptly.

Every email we send includes a one-click unsubscribe link in the footer. You can also reply to any email with "unsubscribe" or contact us directly at [email protected]. Unsubscribe requests are processed promptly.

12. Children's Privacy

Our email list is not directed to children under 16. We do not knowingly collect data from children. If you believe a child has subscribed, contact us and we will remove the data.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the most recent revision. Material changes will be communicated via email to active subscribers.

14. Contact Us

For questions about this Privacy Policy or your personal data, contact: