Effective date: 16 September 2025
This policy explains how we collect, use, share, and protect personal data when you visit vossiverse.com, subscribe to the newsletter, enter giveaways, or contact us.
1) Who we are (Data Controller)
Jon Smith (sole trader), trading as Vossiverse
Address: C/ Muret 18, Bocairent, Valencia, 46880, Spain
Email: privacy@vossiverse.com
Because we’re established in Spain, we comply with the EU GDPR. We welcome readers globally.
2) What we collect
You provide:
Contact: name, email (newsletter, downloads, giveaways, contact forms).
Social handle (optional, e.g., for giveaway eligibility).
Message content you send us.
Collected automatically:
Usage/technical data: IP address, device & browser, pages viewed, referrer, timestamps, approximate location (city/region).
Cookies & similar tech (see Cookie Policy below).
From service providers:
Email platform (Kit): delivery, opens/clicks, unsubscribe.
Analytics (Google Analytics 4): aggregated traffic stats.
3) Why we use your data (lawful bases)
Newsletter & updates — with your consent (you can unsubscribe any time).
Giveaways/downloads — to deliver what you requested (contract/consent).
Site analytics & performance — consent in the EEA/UK (legitimate interests elsewhere).
Replying to messages — legitimate interests.
Legal/compliance & security — legal obligation/legitimate interests.
4) Sharing your data
We don’t sell your personal data. We only share it with trusted processors acting on our instructions, for example:
Hosting/CDN: Cloudflare, Inc.
Email service: Kit (email marketing provider).
Analytics: Google (Google Analytics 4).
Advertising pixels (if consented): Meta (Facebook/Instagram), X, TikTok, Google/YouTube.
Where data is transferred outside the EEA, we rely on safeguards such as Standard Contractual Clauses (and any required UK/EU addenda).
5) Retention
Newsletter data: until you unsubscribe or after 24 months of inactivity.
Contact enquiries: 24 months after last correspondence.
Giveaway data: eligibility/fulfilment records 3 months after completion; minimal audit logs may be retained.
Analytics: per provider defaults (e.g., GA4 up to 26 months).
We delete or anonymise data when no longer needed.
6) Your rights (EU/EEA)
You can access, rectify, erase, restrict, object, and port your personal data. If we rely on consent, you can withdraw it any time.
Supervisory authority (Spain): Agencia Española de Protección de Datos (AEPD) — aepd.es.
To exercise your rights, email privacy@vossiverse.com
.
7) Children
The site is not intended for children under 13. If you believe a child has provided data, contact us and we’ll delete it.
8) Security
We use HTTPS, access controls, minimisation, and other reasonable measures. No method is 100% secure, but we strive to protect your data.
9) Newsletter & Email Marketing
You can choose to subscribe to the Mark Voss newsletter for updates, cover reveals, giveaways, and other Vossiverse news. Subscription is optional and based on your consent.
What we collect: your email address (and, if you choose, your name).
How we use it: to send you the newsletter and related author updates/promotions.
Provider: we use our email service provider (Kit) to deliver emails and measure performance (e.g., delivery status, opens, clicks, unsubscribes).
Legal basis: your consent (you can withdraw it at any time).
How to unsubscribe: click the Unsubscribe link in any email, or email privacy@vossiverse.com
and we’ll remove you.
Retention: we keep your newsletter data until you unsubscribe or after 24 months of inactivity, then delete or anonymise it.
No surprises: unsubscribing from the newsletter won’t affect any one-to-one messages you send us (e.g., contact form replies).
10) Changes
If we change this policy, we’ll update the “Effective date” and highlight material changes.
Contact: privacy@vossiverse.com
Cookie Policy — vossiverse.com
What are cookies?
Small text files stored on your device to make the site work, remember preferences, understand usage, and (with your permission) measure ads.
How we use them (categories)
Strictly necessary (always on): security, load balancing, basic site functions.
Analytics (opt-in in the EEA/UK): aggregated usage stats via Google Analytics 4.
Marketing (opt-in in the EEA/UK): measurement pixels for Meta, X, TikTok, Google/YouTube.
On your first visit you’ll see a banner to Accept all, Reject non-essential, or Customise. You can change your choice anytime via the Cookie settings link in the footer.
Typical cookies/services
Cloudflare (necessary; may set _cf_* cookies for security/performance).
GA4 (analytics; _ga family).
Ad pixels (marketing; set by Meta/X/TikTok/Google/YouTube if you consent).
Retention: lasts from the session to up to 26 months (analytics) depending on the cookie.
Control: you can also clear cookies in your browser.
Questions? privacy@vossiverse.com
