Privacy Policy
Last updated: May 2026
This Privacy Policy explains how Brasa di Alma (brasadialma.com) collects, uses, and protects information when you visit this website. This is a personal author site operated by an individual writer.
1. Who we are
This website is operated by Brasa di Alma, a pen name for an independent fiction writer. For privacy-related enquiries, you may contact us at: contact@brasadialma.com.
2. What data we collect
We collect the minimum data necessary to operate this site:
- Analytics data — if you accept cookies, we use Google Analytics 4 (GA4) to collect anonymised information about how visitors use the site (pages visited, time spent, approximate geographic region). GA4 does not collect personally identifiable information. IP addresses are anonymised.
- Contact form submissions — if you use the contact form, we collect your name, email address, and message. This information is used solely to respond to your enquiry and is not stored in a database or shared with third parties.
3. Legal basis for processing (GDPR)
- Analytics: Your consent, obtained via the cookie consent banner (Art. 6(1)(a) GDPR).
- Contact form: Our legitimate interest in responding to your enquiry (Art. 6(1)(f) GDPR).
4. Cookies
We use one first-party cookie (bda_consent) to store your cookie consent preference for 365 days. If you accept analytics, Google Analytics 4 may set additional cookies. You can decline analytics cookies via the consent banner at any time. Declining does not affect your use of this site.
5. Third-party services
- Google Analytics 4 — only loaded with your consent. Google may process your data in the US. See Google's privacy policy.
- Substack — links on this site lead to Substack, which has its own privacy policy. We have no control over data collected by Substack.
- Google Fonts — typography is loaded from Google Fonts. Your browser may send a request to Google's servers. See Google's privacy policy.
6. Data retention
Contact form messages are retained only as long as necessary to respond to your enquiry and are then deleted. Analytics data is retained according to your GA4 account settings (typically 14 months).
7. Your rights (GDPR)
If you are based in the EEA, you have the right to access, correct, delete, or restrict the processing of your personal data, as well as the right to data portability and to object to processing. To exercise any of these rights, contact us at contact@brasadialma.com.
You also have the right to lodge a complaint with a supervisory authority — in the Netherlands, this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
8. Data security
This website is served over HTTPS. Contact form submissions are transmitted securely and processed server-side. We do not store card data or sensitive personal information.
9. Children
This site is not directed at children under the age of 16. We do not knowingly collect personal data from children.
10. Changes to this policy
We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent update. Continued use of the site after changes constitutes acceptance of the revised policy.
Questions? Write to contact@brasadialma.com.