Skip to main content

Privacy Policy

Last updated: 9/15/2026

This policy explains how Yuval Gilboa ("we", "us") collects, uses and protects your personal data. It is written to align with the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA).

1. Data controller

The controller responsible for your personal data is Yuval Gilboa. You can reach us at thecameria@gmail.com.

2. What we collect

  • Email address — provided when you sign up for the free song.
  • Consent timestamp & source — kept as proof of lawful consent.
  • Technical data — IP address, browser type, timestamps (used for security and aggregate analytics).
  • Cookies — see section 6.
  • Purchase data — only if you buy the album, processed by our payment provider.

3. Legal basis and purposes (GDPR Art. 6)

  • Consent (Art. 6(1)(a)) — sending the free song and marketing emails.
  • Contract (Art. 6(1)(b)) — delivering an album you purchased.
  • Legitimate interests (Art. 6(1)(f)) — site security and abuse prevention.
  • Legal obligation (Art. 6(1)(c)) — tax/accounting records for purchases.

4. Sharing and processors

We do not sell, rent or trade your personal data. We share it only with the service providers necessary to run this site, under a data processing agreement:

  • Database & hosting — secure encrypted storage.
  • Email delivery — for transactional and marketing emails you consented to.
  • Payments — a PCI-DSS-compliant provider (only if you make a purchase).

Some processors may be located outside the EEA/UK. In that case, transfers rely on Standard Contractual Clauses (SCCs) or equivalent GDPR-approved safeguards.

5. Security

We use TLS encryption in transit, encrypted storage at rest, strict database-level access control (Row-Level Security), and role-based access for administrators. No system is 100% secure, but we take reasonable technical and organisational measures.

6. Cookies

We use essential cookies to make the site work and optional analytics cookies to understand usage. On your first visit you can accept all cookies or only the essential ones through the cookie banner. You can also block cookies in your browser settings at any time.

7. Retention

We keep your data as long as your subscription is active. After you unsubscribe, we delete your data within 30 days, except where we must retain it to comply with the law (e.g. proof of consent, tax records).

8. Your rights

Depending on where you live, you have the right to:

  • Access the personal data we hold about you (GDPR Art. 15 / CCPA "right to know").
  • Rectify inaccurate data (Art. 16).
  • Erase your data — the "right to be forgotten" (Art. 17 / CCPA "right to delete").
  • Restrict or object to processing (Art. 18 & 21).
  • Data portability (Art. 20).
  • Withdraw consent at any time (unsubscribe link in every email).
  • Opt out of the sale or sharing of personal information (CCPA/CPRA) — we do not sell or share.
  • Non-discrimination for exercising your privacy rights.
  • Lodge a complaint with your local supervisory authority (e.g. your EU DPA, the UK ICO, or the California Privacy Protection Agency).

To exercise any of these rights, email thecameria@gmail.com. We will respond within 30 days.

9. Children

This site is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. Material changes will be announced on the site and, where appropriate, by email to registered users.