Privacy

Short version: if you give us your email, we use it to send you music, words, and the things we make. That's it. We don't sell, share, or hand it to anyone except the tools we use to send these emails. You can leave any time.

Who we are

Velvet P. is a creative music and visual project operated by M.M. Production, a company based in Italy. Full company registration details (VAT number and registered office) will be added here once the company's registration is finalised.

For the purposes of this policy, "we", "our", and "us" refer to M.M. Production as the controller of personal data collected through velvet-p.com and related services. Contact for any privacy matter: mail@velvet-p.com.

Fictional characters and AI-generated imagery

Velvet P. presents two fictional artists, Samantha and Lily. They are not real people. They are characters created and curated by Velvet P., the way a label or stage production builds a persona around a performer.

The music and writing released under Velvet P. are original works produced by M.M. Production. The photographs and visual material associated with Samantha and Lily are created with generative AI tools and curated frame by frame by us. No real, identifiable person is depicted in our promotional or product imagery.

If you ever believe an image we publish resembles you or someone you know in a way that infringes a likeness or publicity right, write to mail@velvet-p.com and we will review it promptly.

What we collect

• Email address - when you submit one of our forms (free songs sign-up, etc.).
• First name - optional, if you choose to provide it.
• Activity data - whether you open our emails, click links inside them, and which pages of velvet-p.com you visit.
• Purchase information - if you buy from us, our checkout provider collects your name, email, and payment details. We never see or store payment card numbers ourselves.

What we do with it

• Send you the songs, writings, and photographs you signed up for.
• Tell you about new releases, products, and offers from Velvet P.
• Improve what we send by looking at which emails work and which don't.
• Show our ads to people similar to you on Facebook and Instagram (only where you've consented to advertising cookies).
• Process orders if you buy something.

We do not sell your data. We do not give it to third parties for their own marketing.

Lawful basis (GDPR)

• Consent - for marketing emails and advertising cookies. You can withdraw consent at any time.
• Contract - to fulfil purchases.
• Legitimate interest - for basic analytics and fraud prevention.

Tools we use

To run Velvet P. we share data with these providers, each of whom processes data on our behalf under standard data-processing agreements:

• Mautic - our self-hosted email and subscriber-management system, running on a private server in Germany.
• Mailgun (Sinch) - email-sending infrastructure that delivers our emails.
• Stripe and PayPal - payment processing at our checkout.
• Meta Platforms (Facebook, Instagram) - advertising and pixel-based analytics.
• Cloudflare R2 - secure storage and delivery of the songs and photographs we send you.
• Vercel - hosting for velvet-p.com.
• Hetzner - server hosting for our email system and analytics (EU, Germany).
• Umami - our self-hosted, cookieless website analytics.
• Google Drive - our internal media library and backups.
• DreamHost - DNS and the mail@velvet-p.com mailbox.

How long we keep your data

• Email subscribers: until you unsubscribe, plus a short cooldown period for legal/audit purposes (typically 12 months after unsubscribe).
• Purchase records: 10 years, as required by Italian tax law.
• Analytics data: aggregated and anonymised after 14 months.

Your rights

Under GDPR you have the right to access your data, have inaccurate data corrected, have your data deleted, object to or restrict processing, withdraw consent at any time, and lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

How to delete your data

• Unsubscribe from emails - every email we send contains an unsubscribe link in the footer. Clicking it removes you from the active list and most of our records.
• Full deletion request - email mail@velvet-p.com with the subject line "Data deletion request". Include the email address you'd like us to delete. We'll confirm deletion within 30 days, as required by GDPR.

Cookies and advertising

Our website analytics (Umami) are cookieless and do not track you across sites. We use advertising cookies from Meta only where you've consented, to measure and target our ads on Facebook and Instagram. You can withdraw consent at any time.

Changes to this policy

We may update this policy from time to time. Material changes will be announced via email to active subscribers. The "Last updated" date at the top tells you when this policy last changed.