Privacy Policy

Last updated: May 18, 2025

At Earthcry (“we”, “us” or “our”), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what personal information we collect on our website (Earthcry.net), how we use it, and your rights under the EU General Data Protection Regulation (GDPR). We operate this site globally and comply with applicable data protection laws.

Personal Data We Collect

• Contact Form: When you use our contact form (powered by Fluent Forms), we collect the personal data you provide: first name, email address, subject, and message. This data is used solely to respond to your inquiry or request.
• Email Subscription: If you opt in to our mailing list, we collect only your email address. We use Mailchimp to manage this subscription list, and we will only send you the newsletters or updates you consented to.
• Technical Data: For security and site performance, we and our hosting providers (including Cloudflare) may collect minimal technical information such as your IP address, browser type, and access times. This helps us protect the site (e.g. against abuse) and provide content efficiently. We do not collect any additional profile or tracking data.

We do not collect any sensitive personal data , and we do not sell or otherwise commercialize your information. Because Earthcry.net has no user accounts or e-commerce functions, data collection is limited to the items above.

How We Use Your Information

We use the personal data we collect only for the purposes outlined below:

• To respond to your messages or inquiries submitted via the contact form. We use the information (name, email, message, etc.) to understand your request and reply to you.
• To send you newsletters or updates, if you have signed up via our opt-in form. We will only email you content you requested (such as news about music releases or events). You can unsubscribe at any time.
• To maintain and secure the website. Technical information (like IP addresses) is used to prevent attacks, troubleshoot issues, and ensure the site operates correctly.

We do not use your data for any other purposes (such as advertising or profiling), and we do not provide it to any third parties for marketing.

Legal Basis for Processing

Under the GDPR, we must have a lawful basis for each processing activity. For the data we collect on Earthcry.net:

• Consent (Article 6(1)(a)) – You voluntarily provide your personal data via the contact form or email subscription, and we process it only with your consent. In other words, you consent to us using your information to contact you and send you the newsletter you requested. (As the UK ICO explains, “the individual has given clear consent for you to process their personal data for a specific purpose”.)
• Legitimate Interests (Article 6(1)(f)) – We may also rely on our legitimate interest to ensure the basic operation and security of the website. For example, collecting technical data (like IP addresses) is necessary to protect the site against malicious traffic and ensure reliable service. This is a common practice for websites and does not override your privacy.

Where we rely on consent, you have the right to withdraw it at any time (see Your Rights below). We do not process your data for any purpose other than those stated above.

Data Storage and Security

All personal data submitted via our site is stored securely:

• Contact Form Data: Submissions are stored in our website’s database and are accessed only by authorized personnel (the site owner and any designated administrators).
• Mailing List Data: Subscriber emails are stored by Mailchimp on their secure servers. Mailchimp is GDPR-compliant and will not use your email for any purpose other than what you agreed to. In fact, Mailchimp’s policy states that it will never sell your personal information and it implements strict privacy standards (including certification under the EU-US Data Privacy Framework) to protect EU data.
• Technical Data: Cloudflare provides our site’s content delivery and security. Cloudflare may log IP addresses and apply its standard protective measures. According to Cloudflare, it “will not sell or rent your personal information” and only uses data as necessary to provide its services. Cloudflare also employs EU-approved legal safeguards (Standard Contractual Clauses and the EU-U.S. Data Privacy Framework) for any transfers of your data outside the EU.

We implement appropriate technical and organizational security measures to protect your data. For example, our site uses HTTPS (SSL/TLS encryption) to safeguard data in transit. We follow the GDPR requirement to adopt security “appropriate to the risk,” such as encryption and access controls. Only designated staff can access stored personal data, and we regularly review our security practices.

Third-Party Services

We use the following third-party providers, which may process your data on our behalf:

• Mailchimp (Email Marketing): We use Mailchimp to manage our mailing list and send communications. Mailchimp acts as our data processor under a Data Processing Addendum. Your email address is transferred securely to Mailchimp’s servers. Mailchimp is committed to protecting data privacy, offering GDPR-ready contracts, and maintains EU-U.S. transfer safeguards.
• Cloudflare (CDN & Security): Cloudflare provides network security and performance optimization. It may collect technical visitor data (like IP addresses, geolocation) solely to operate its service. Cloudflare’s privacy policy forbids selling your personal information, and it uses EU-approved mechanisms (SCCs and the Data Privacy Framework) when transferring data internationally.

We do not embed any other third-party tracking or social media features on our site. Any links to external platforms (e.g. music streaming or social sites) go to those sites directly; please see their privacy policies, as we do not control them.

Data Retention

We keep your personal data only for as long as necessary for the purposes it was collected:

• Contact Inquiries: We retain messages and contact details for no longer than 2 years, or as long as needed to manage correspondence or fulfill any requests. Once the data is no longer needed, we securely delete it.
• Email Subscribers: We keep your email address in our Mailchimp list until you unsubscribe. If you unsubscribe or if a campaign bounces repeatedly, your email will be removed or marked inactive.
• Technical Data: Log and security data (like IP addresses) are stored only as long as needed for security monitoring and are automatically purged periodically.

In accordance with GDPR’s storage limitation principle, personal data is “kept in a form which permits identification … for no longer than is necessary”. We regularly review our retention practices to ensure we do not hold data indefinitely.

Your Rights

If you are located in the EU (or under GDPR), you have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct any inaccuracies in your data (for example, update an incorrect email address).
• Right to Erasure (“Right to be forgotten”): You can request deletion of your data when it’s no longer needed for the purposes collected, or if you withdraw consent.
• Right to Restrict Processing: You can ask us to block or restrict processing of your data while its accuracy or our data use is being verified.
• Right to Object: You can object to our processing of your personal data in certain cases (for example, direct marketing).
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format where technically feasible.
• Right to Withdraw Consent: Where we process data based on your consent (such as subscribing to newsletters), you may withdraw that consent at any time, without affecting the lawfulness of processing before withdrawal.
• Right to Lodge a Complaint: You have the right to complain to a data protection supervisory authority in the EU if you believe we have infringed on your rights (for example, the ICO in the UK, or the relevant authority in your country).

To exercise any of these rights, please use the contact information below. We will respond to requests within one month, as required by law. Note that certain requests may be subject to legal limits (for example, we may refuse if unfounded or excessive).

Cookies and Tracking

We do not use any advertising or analytics trackers on Earthcry.net. We use only essential cookies needed for site functionality and security. For example, Cloudflare may set cookies (such as a bot management cookie) to distinguish humans from bots and protect the site. These cookies do not profile you or track your activity beyond ensuring the site loads properly.

According to GDPR guidance, “strictly necessary cookies” (those essential for the website’s operation) do not require user consent. We explain these minimal cookies here for transparency: you can delete them via your browser settings, but doing so may affect site performance. We do not use any cookies for marketing, analytics, or personalization. If this changes in the future, we will update this policy and obtain any required consents.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact via our website’s Contact Form.

We will review and address your inquiry as soon as possible. If you wish to withdraw consent or make a data request, please clearly state this in your message.

Thank you for visiting Earthcry.net. We value your trust and are committed to protecting your privacy.