Privacy Policy.

1. Who we are and what this policy covers

This Privacy Policy explains how TMF FITUNATE LLC (“we,” “us,” or “our”) handles personal information through the Dez Whitfield “Meet the Music” landing page (the “Page”), the music-update email list offered on the Page, and the emails we send to people who join it. We operate from Chicago, Illinois, and we decide how the information collected through the Page is used.

Dez Whitfield is a fictional artist, and the music presented on the Page is created with artificial intelligence tools. When you subscribe, you are giving your information to TMF FITUNATE LLC, not to a real person named Dez Whitfield.

This policy applies only to the Page and the email list. It does not cover our full website or any store, membership, community, or other service we may offer later, and information collected for those services will be covered by the policy that applies to them.

Questions or requests about this policy: support@dezwhitfield.com.

2. Information we collect

When enabled, email-open tracking generally uses a small image and link-click tracking uses redirected links. Email applications can block or pre-load images, so open data is not exact.

We do not ask for payment card information, government identification, or sensitive personal information on the Page, and we ask that you not send it to us.

3. How and why we use information

We use the information described above to:

• send the music news, release announcements, promotions, and product and offer announcements connected to Dez Whitfield that you asked to receive by subscribing;
• use your first name to personalize emails, manage the list, process unsubscribes, and answer your questions;
• review email engagement, such as open and click rates where enabled, to understand which updates interest subscribers;
• keep records of consent and opt-outs so we can show that we honor them;
• deliver and secure the Page, diagnose errors, and prevent misuse; and
• comply with law, respond to lawful requests, and protect our rights and the safety of others.

We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not use it for automated decisions that have legal or similarly significant effects. Signups through this Page are added only to the Dez Whitfield Listening Lounge email group. We do not add you to a separate landing-page group or to mailing lists for other projects, including NO HURRY HOME, because you joined this one. We may use aggregated or de-identified information to understand general interest in the project, and we will not try to re-identify it.

4. Subscription choice and emails

Joining the list is optional, and you can view the Page and the public music previews without subscribing. By submitting the signup form and confirming your subscription by email, you agree to receive marketing emails from us at the address you provided. Our marketing emails identify the sender, display our postal mailing address in the MailerLite footer, and include a visible unsubscribe link or button.

We use double opt-in for this form. After you submit it, you receive a confirmation email. You must click the confirmation link to complete your subscription before receiving the marketing updates.

You can withdraw your consent at any time by clicking the unsubscribe link in any email or by emailing support@dezwhitfield.com. We process unsubscribe requests promptly and always within 10 business days. After you unsubscribe, we keep your email address on a suppression list so that we do not email you again by mistake, along with limited consent and opt-out records that show we complied.

We may also send service messages that you request or that are needed to run the list, such as a signup confirmation or a reply to your question. These are not marketing emails.

5. Service providers and external links

MailerLite. We use MailerLite to host the signup form, maintain subscriber records, send emails, and, when enabled, measure email engagement. MailerLite processes subscriber information on our behalf as described in its Data Processing Addendum and Privacy Policy. Its operations and subprocessors may involve processing in the United States, the European Union, or other countries.

Hosting and security. We use Cloudflare to deliver the Page and protect it from abuse. Depending on the security features enabled for the Page, Cloudflare may use security-related cookies or similar identifiers. These are explained further in Section 6.

Google reCAPTCHA. The signup form loads Google's reCAPTCHA checkbox service to help detect automated or abusive submissions. Google may receive technical and device information for this purpose. Google documents the _GRECAPTCHA security cookie used when reCAPTCHA executes. See Google's reCAPTCHA FAQ, Privacy Policy, and Terms of Service.

Advisers and legal needs. We may share information with our attorneys, accountants, and similar advisers, and we may disclose information if reasonably necessary to comply with law, respond to lawful requests, or protect rights, property, or safety. If our business is involved in a merger, sale, or reorganization, subscriber information may transfer to the successor, which would be bound by this policy for the information already collected.

YouTube and social media. The Page links to public YouTube music previews and does not load YouTube players when you visit. If you select a YouTube link, or if you arrived from a social media platform, that platform’s own privacy practices apply to what you do there.

We do not sell subscribers’ email addresses and we do not disclose personal information to third parties for their own direct marketing.

6. Cookies and similar technologies

The Page does not intentionally include advertising pixels, a separate website-analytics service, or embedded YouTube players. However, the MailerLite signup form and its Google reCAPTCHA security feature load third-party code. These services can collect technical information and use browser cookies or similar storage to operate the form, prevent abuse, and record form activity. The specific identifiers present depend on the form, browser, visitor actions, and security configuration.

MailerLite forms. MailerLite's published form-cookie documentation identifies mailerlite:webform:shown, mailerlite:session_id, and mailerlite:forms:submitted:[ID]. According to MailerLite, pop-up forms can use an identifier to remember whether a pop-up was shown, and a form-submission identifier can help record a completed submission. These are identifiers documented across MailerLite form types; this does not mean all three are set by the embedded form on our Page. MailerLite separately documents ml_guid for survey-containing forms; we do not include a MailerLite survey in this Page's signup form.

Google reCAPTCHA. The signup form includes Google's reCAPTCHA checkbox. Google's reCAPTCHA FAQ states that reCAPTCHA sets a security cookie named _GRECAPTCHA when executed to conduct risk analysis. Because the integration loads from www.google.com, additional Google cookies may be involved depending on the visitor's browser and Google services.

Cloudflare security. Cloudflare's cookie documentation identifies __cf_bm for some bot-protection features and cf_clearance for security challenges or JavaScript detections. These are conditional: the Page does not necessarily set either cookie unless the corresponding Cloudflare functionality is active and applies to the visit.

Email measurement. If email-open and link-click tracking are enabled for our MailerLite emails, they may contain a small tracking image and redirected links. These tools help us understand engagement, but email-open measurements are not always accurate.

You can manage cookies through your browser settings, although blocking certain cookies may interfere with the signup form or security checks. If we later introduce advertising or separate analytics technologies, we will update our disclosures and implement any additional choices or consent measures required by applicable law.

7. Retention and security

• Active subscribers. We keep your subscription information while you remain subscribed.
• After you unsubscribe. We keep your email address on a suppression list so we continue to honor your opt-out. We delete your other details when you ask us to and when we no longer need them, and we review the list at least once a year.
• Consent and opt-out records. We keep these for as long as needed to show compliance and to handle legal claims, generally 4 years after your last interaction with us.
• Inactive subscribers. After a period of inactivity, generally about 12 months and sometimes sooner, we may send a final re-engagement email and then remove you from the list.
• Hosting and security logs. These are kept for the periods set by our providers and as needed for security.

List exports. We keep exports of the subscriber list only as long as needed and store them securely.

We use reasonable administrative, technical, and organizational safeguards, including limiting account access to people who need it and protecting our email account with additional authentication. No online service or transmission is completely secure, so we cannot guarantee absolute security.

8. Privacy choices and rights

We offer the following to everyone, wherever you live. You may ask us to tell you what personal information we hold about you, give you a copy, correct it, delete it, or stop emailing you. Residents of some U.S. states have additional rights under their state privacy laws, which may include the right to know and access, correct, delete, receive a portable copy, and opt out of the sale or sharing of personal information, targeted advertising, and profiling. We do not engage in those last three activities. We will not treat you differently for exercising a privacy right.

How to make a request. Email support@dezwhitfield.com with the subject line “Privacy Request” and tell us what you would like us to do. We will confirm your identity by sending a message to the email address on the list, and we will not ask for more information than we need. An authorized agent may submit a request for you with your written permission.

Timing. We respond within the time required by applicable law, generally within 45 days, and we will tell you if we need more time and the law permits an extension.

Appeals. If we decline your request, you may appeal by replying with the subject line “Appeal.” We will respond in writing within the time required by law, generally within 45 to 60 days, and will explain how to contact your state attorney general if you are still not satisfied.

California. To the extent California privacy law applies to us, in the past 12 months we collected identifiers (email address, first name, IP address) and internet or network activity (email engagement) for the purposes in Section 3, and we did not sell or share personal information. We keep it as described in Section 7.

9. Visitors outside the United States

The Page and the email list are directed to people in the United States, and we do not market to people elsewhere. Because the Page is on the internet, it can be reached from other countries, and if you subscribe from outside the United States, your information will be processed in the United States and by our service providers in the United States and other countries.

If European or UK data-protection law applies to our handling of your information, TMF FITUNATE LLC is the controller. We rely on your consent to send marketing emails, which you can withdraw at any time, on our legitimate interests in securing and delivering the Page and keeping opt-out records, and on legal obligations where they apply. For transfers involving MailerLite, its Data Processing Addendum includes European Commission Standard Contractual Clauses and references the UK International Data Transfer Addendum. MailerLite also states in its Privacy Policy that MailerLite, Inc. is certified under the EU-U.S. Data Privacy Framework and participates in its UK Extension (and the Swiss-U.S. framework). These are MailerLite's published safeguards and statements; their application to a particular transfer depends on the parties and circumstances. Other service providers may have their own transfer arrangements. You may have the rights to access, correct, erase, restrict or object to processing, portability, and withdrawal of consent, and the right to complain to your local supervisory authority. To use these rights, follow the process in Section 8.

If we begin to promote the project in other countries, we will review our obligations there and update this policy.

10. Children

The Page and the music-update list are intended for people who are 16 years of age or older and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe a child has subscribed, email support@dezwhitfield.com and we will promptly delete the information and remove the address from the list.

11. Updates to this policy

We may update this policy when our features, providers, or practices change, including when the full Dez Whitfield website launches. We will post the new version with an updated effective date and will notify subscribers by email of material changes where the law requires it. We will not use information you gave us under this policy in a materially different way without first giving you notice and, where required, obtaining your consent.

12. Contact

Privacy questions, requests, and unsubscribe help: support@dezwhitfield.com

TMF FITUNATE LLC, PO Box 807532, Chicago, IL 60680