Privacy

Privacy Policy

Last updated: 20 November 2025

This Privacy Policy explains how I collect, use, and protect your personal information when you visit my website, Ghosts & Music, or interact with my content, newsletter, or contact forms.

By using this website, you agree to the practices described here.

1. Who I Am

This website is operated by Annette McHattie, an author and musician based in the United Kingdom.

If you have any questions about this policy, you can contact me at: [my new email address to set up]

2. What Information I Collect

Information You Provide Directly

I may collect: • Name and email address (if you subscribe to my newsletter or contact me) • Any information you include in messages or enquiries • Story submissions or feedback, if you voluntarily send them

Information Collected Automatically

When you visit the site, certain data may be collected automatically: • IP address • Browser type and version • Pages you visit • Time spent on pages • Device information

This data is collected through cookies or standard web analytics tools (e.g., Google Analytics, Squarespace/Wix analytics, etc.)

3. How I Use Your Information

I may use your information to: • Send newsletters or updates you’ve signed up for • Respond to your messages or enquiries • Improve my website and content • Monitor website performance • Share new writing, music, or podcast episodes • Protect the website against spam or security threats

I will never sell your data or share it for marketing by third parties.

I process personal data under the following legal bases: • Consent – You give permission (e.g., signing up for a newsletter) • Legitimate interests – For website analytics, improving content, preventing abuse • Contract – If you request something you expect me to provide • Legal obligation – If required to comply with UK laws

5. Cookies & Tracking Technologies

This website may use cookies to: • Understand visitor behaviour • Improve user experience • Deliver website functionality • Track newsletter sign-ups/conversions

You can disable cookies in your browser settings at any time.

If you want a full Cookie Policy, I can generate one too.

6. How I Store and Protect Your Data

I take reasonable steps to keep your data secure.

Your information may be stored through: • Website hosting platforms (e.g., Squarespace, Wix, WordPress) • Newsletter services (e.g., Mailchimp, Substack) • Email systems

All providers I use comply with GDPR or equivalent privacy standards.

I will never store payment information, as no payments are processed directly on this site.

7. How Long I Keep Your Information

I keep your data only for as long as needed: • Newsletter details: until you unsubscribe • Contact messages: up to 12 months • Analytics data: varies based on platform (usually 14–26 months)

You may request deletion at any time.

8. Your Rights (Under UK GDPR)

You have the right to: • Access your personal data • Correct inaccurate information • Request deletion (the “right to be forgotten”) • Withdraw consent at any time • Object to certain types of processing • Request a copy of the data I hold • Complain to the ICO (Information Commissioner’s Office)

If you’d like to exercise these rights, contact me at: [my new email address to set up]

9. Third-Party Services

Your data may be handled by trusted third parties, including: • Website hosting providers • Newsletter/email services • Analytics tools • Spam protection tools

These services only process data necessary to perform their functions and adhere to GDPR standards.

10. Updates to This Privacy Policy

This policy may be updated occasionally. Any changes will be posted on this page with an updated date.

11. Contact

For questions about this Privacy Policy or how your data is used:

Annette McHattie [my new email address to set up]