Privacy & your rights

Stay in touch.
On your terms.

This notice explains how DIPAOLO Music handles information when you visit this website, join the artist email list, or contact us. Joining the list is optional. You can listen to the music, follow links, and make purchases through music platforms without subscribing.

Effective date: October 28, 2026.
Notice version: dipaolo-privacy-2026-10-28-v5.

Who is responsible

E-Venture Empire, LLC, doing business as DIPAOLO Music, is responsible for the personal information described in this notice. In this notice, “we,” “us,” and “our” refer to that business.

For privacy questions or requests, email Isabella@dipaolomusic.com, or write to:

DIPAOLO Music
C/O E-Venture Empire, LLC
30 N Gould St
Ste # 39663
Sheridan WY 82801
United States

Information we handle

• Email subscriptions: your email address, signup time, consent wording/version, source of the signup, and, for signups recorded under this notice, the notice version. The subscription also has an internal identifier and a private unsubscribe token.
• Email delivery: the recipient address, message content and unsubscribe link, delivery attempts, delivery status, and provider message identifiers. We do not enable open or click tracking for artist emails.
• Bookings, collaborations, and other correspondence: information you choose to send, such as your name, email address, message, attachments, and relevant booking or business details.
• Website operation and security: connection and request information, which can include IP address, requested page, browser information, timestamps, and security signals. Cloudflare’s security services may process additional browser and device signals as explained below.

Information comes from you, from your browser when it connects to the site, and from the services that host, protect, and deliver it. The subscriber database does not store your raw IP address. Signup rate limiting uses a private keyed hash derived from the connection address; that hash is pseudonymous information, not anonymous information.

We do not ask for payment details, identity documents, health information, precise location, or other sensitive information through the signup form. Please avoid sending unnecessary sensitive information in correspondence. Purchases take place on the music platforms you choose.

Why we use it

Artist emails: to send the welcome email and the music, artist news, and occasional notes you request, and to manage your subscription. Where European data-protection law applies, we rely on your consent. The signup box is optional and unchecked by default. You can withdraw that consent at any time.

Bookings and correspondence: to answer questions, discuss collaborations, and arrange bookings. Depending on the inquiry, this involves taking steps at your request before a contract, performing a contract, or our legitimate interest in responding to messages and running the artist business.

Hosting and security: to serve the website, prevent automated abuse, protect the email list, investigate failures, and keep the service reliable. We rely on our legitimate interests in operating and protecting the site where applicable. We assess whether device-access consent is also required for a particular security technology; describing a purpose as a legitimate interest does not replace any separate consent requirement.

Website analytics: we use Cloudflare’s aggregate traffic reports to understand website requests, page views, and broad traffic patterns. Where applicable, we rely on our legitimate interest in understanding and improving the website.

Legal and administrative needs: to meet applicable obligations, handle privacy requests, and establish, exercise, or defend legal claims. The basis is an applicable legal obligation or the relevant legitimate interest, depending on the record and purpose.

We do not use these details for targeted advertising, advertising profiles, or automated decisions that produce legal or similarly significant effects. Automated security checks can accept or reject a signup attempt. Contact us if a security check prevents you from using the form.

Services that receive information

We use the following services for the stated purposes:

• Cloudflare: website hosting and protection, aggregate website traffic reporting, the private subscriber database, and signup security checks. Read Cloudflare’s Privacy Policy and the Turnstile Privacy Addendum.
• Resend: delivery of artist emails, including the welcome email and personal unsubscribe link. Read Resend’s Privacy Policy.
• Titan and Hostinger: Titan provides the mailbox used for booking, replies, and privacy correspondence. Hostinger is the reseller through which we purchase and manage that mailbox. Read Titan’s Privacy Policy and Hostinger’s Privacy Policy.

These services may use subprocessors to provide their services. Access within the artist business is limited to people who need the information for the purposes above. We may also disclose information to professional advisers or authorities where reasonably necessary for legal obligations, rights, or a lawful request.

We do not sell personal information or share it for cross-context behavioral advertising, and we do not give the artist email list to another business for its own marketing.

Security checks and browser technologies

Cloudflare Turnstile helps distinguish people from automated signup attempts. The check loads after you choose to start it in the signup form. When it loads, it can process signals such as IP address, browser and connection characteristics, site origin, and interaction information. Under its addendum, Cloudflare processes signals to protect this site and also acts as a separate controller when using signals to improve bot detection. Its addendum explains those purposes and how to exercise rights with Cloudflare. Starting the security check is separate from consenting to artist emails. If you prefer not to load the check, contact Isabella@dipaolomusic.com to discuss joining the list by email.

Website traffic reports are separate from our mailing list. We do not use newsletter addresses, signup-form contents, or email open/click tracking for website analytics. We do not load browser analytics scripts, advertising trackers, or embedded social feeds. The site’s own code does not set advertising cookies or browser-storage identifiers. Hosting and security services can still process browser information and use security-related technologies; this notice does not describe the entire service stack as cookie-free.

Global Privacy Control and Do Not Track: sale, targeted advertising, and sharing for cross-context behavioral advertising stay off for every visitor, including visitors whose browsers send these signals. Do Not Track does not change the site’s behavior because those advertising and tracking activities are not enabled. Necessary hosting and security processing can continue. These browser signals do not unsubscribe you from artist emails you explicitly requested; use an email’s unsubscribe link or contact us to withdraw that request.

How long information is kept

• Active subscriptions: until you unsubscribe, ask us to delete them, or we no longer need the list for the stated artist-email purpose. We review the list’s continued need at least annually. We do not keep an unused list indefinitely merely because it once received consent.
• Completed welcome-delivery records in our database: records of completed or stopped delivery attempts are removed after 30 days. Information needed for an ongoing delivery remains while that delivery is being processed. Aggregate daily send-budget counts do not identify individual subscribers.
• Routine inquiries: we normally remove closed correspondence from active mailbox folders within 12 months after the matter is resolved. Booking contracts, payment or tax records held outside this website, disputes, and other records needed to meet legal obligations or protect legal rights can be kept longer for those purposes. Mailbox backup copies are described separately below.
• Service records and backups: providers retain operational, delivery, security, and backup records under their applicable schedules. Resend normally retains email and log data for 30 days; its backup retention is separate. The optional Titan Email Backup feature is disabled for our account. Titan provides standard disaster-recovery copies and states that mail permanently deleted from Trash is removed from its servers and cannot be restored. Deleting a live subscription or an active-folder message does not itself remove every provider record or backup. Requests involving backup-held information require a separate review with the relevant provider.

We restrict retained records to their justified purpose. We do not use backup copies or outdated exports as an artist mailing list. If data is restored, current withdrawal and deletion requests must be reapplied before it is used for mail. Where a legal exception requires us to retain information after a deletion request, we explain the reason and limit its use.

International processing

We are based in the United States. The services above can process information in the United States and other countries. Choosing a European email-sending region does not mean that all stored data stays in Europe.

Cloudflare and Resend provide data-processing agreements that include contractual safeguards for relevant international transfers, including Standard Contractual Clauses where applicable. Information about their terms is available in Cloudflare’s DPA and Resend’s DPA. Contact us for details of the safeguards applicable to your information. We do not treat visiting this site or joining the list as blanket consent to international transfers.

Unsubscribe or withdraw consent

Artist emails include a personal unsubscribe link. Opening it displays a confirmation page; confirming removes your subscription and its associated welcome-delivery job from the live database. Mail apps that support one-click unsubscribe can use that option too. You can also email Isabella@dipaolomusic.com.

Withdrawing consent stops future artist emails. It does not make earlier processing unlawful. Unsubscribing is separate from requesting removal of correspondence or provider-held delivery history; tell us if you want a broader privacy request.

Your privacy rights

Depending on the law that applies and the circumstances, you can request access to information about you, correction of inaccurate information, deletion, a portable copy where applicable, restriction of processing, or an objection to processing based on legitimate interests. You can withdraw newsletter consent and object to direct marketing at any time. Some rights have legal limits, which we explain if relevant.

Send requests to Isabella@dipaolomusic.com or the postal address above. Describe what you want us to do and, where possible, write from the address involved. We may ask for proportionate information to verify that a request relates to you. Please do not send passwords or identity documents unless we specifically explain why a limited verification step is necessary.

We acknowledge requests promptly and respond within the period required by applicable law. GDPR requests are generally answered within one calendar month; any permitted extension requires an explanation. If California’s CCPA applies to a request, its specific acknowledgment and response deadlines apply. We do not require you to create an account to make a request.

An authorized agent can make a request where applicable law allows; we may need evidence of authority and appropriate identity verification. We do not discriminate against you for exercising privacy rights. There are no financial incentives for providing personal information.

If we decline a request, we explain the decision and any applicable appeal route. You can ask for a review by replying with “Privacy appeal” in the subject line. Where an applicable state law gives you an appeal right, we follow its process and timing. You can also contact the relevant regulator.

People in the EEA may complain to their local data-protection supervisory authority. People in the UK can contact the Information Commissioner’s Office. California residents can find information through the California Privacy Protection Agency. You do not have to contact us first to use a right to complain.

Links and younger visitors

Music, purchase, and social links take you to services with their own privacy notices. They receive information when you choose to visit them; their practices are separate from this website’s artist-email list.

The site is for a general audience and is not directed to children. We do not knowingly seek newsletter subscriptions from children who cannot lawfully give the required consent. If you believe a child has provided information without appropriate permission, contact us so we can review and remove it where required.

Changes to this notice

We post the current notice here with its version and effective date. If a change materially affects how we use your information, we provide an appropriate notice and obtain new consent where required before using information for a new purpose.

Questions about any of this? Contact Isabella@dipaolomusic.com.