Privacy Policy

Who we are

Rummage Media (rummagemedia.com and rummage.media, the “site”) is operated by Soravai Studios LLC (“we”, “us”, “our”). We are the business responsible for (the “controller” of) the personal information described here. You can reach us about privacy at rummagemedia@soravai.com.

What we collect, why, and our legal basis

• Mailing lists. If you sign up, we collect your email address and which list you joined, to send what you asked for: premiere, release and studio news, or free sample chapters of our books and audiobooks (followed by related release news). Legal basis: your consent, which you can withdraw at any time using the unsubscribe link in every email.
• Messages you send us. If you email us, we receive your name, email address and whatever you choose to include, and use it to reply and manage the enquiry. Legal basis: our legitimate interest in responding to you, or taking steps toward an agreement you request.
• Technical data. When you visit, our hosting provider automatically processes standard server data — IP address, browser and device type, pages requested and timestamps — to deliver the site and keep it secure. Legal basis: our legitimate interest in operating a secure website.

We do not collect sensitive personal information, and we do not use your information for automated decision-making or profiling.

Cookies and similar technologies

This site does not set its own cookies, does not use local storage to track you, and runs no analytics or advertising tags. Our fonts are served from our own servers. Embedded video players (see below) may set their own cookies or similar technologies once you press play.

Do Not Track and Global Privacy Control. Because we do not track visitors across websites, a browser Do Not Track signal does not change how this site behaves. We treat a Global Privacy Control signal as a request to opt out of any sale or sharing of personal information — which we do not do in any case.

Who we share it with

We share personal information only with service providers that process it on our behalf and under contract:

• website hosting and delivery (Vercel Inc.);
• our email and mailing-list providers, to store correspondence and send emails you've asked for;
• video providers — YouTube (Google, played in privacy-enhanced mode) and Mux — which collect viewing and device data when you press play, under their own policies (for example Google's Privacy Policy).

We may also disclose information if required by law, to protect our rights or the safety of others, or as part of a sale or reorganisation of our business. We do not sell your personal information and we do not share it for cross-context behavioural advertising.

How long we keep it

• Mailing-list data: until you unsubscribe, then removed from active lists (we may keep your address on a suppression list so we don't email you again).
• Correspondence: as long as needed to handle your enquiry and any follow-up, generally no longer than three years, unless the law requires longer.
• Server logs: kept by our hosting provider for a limited period for security and operations.

Security

The site is served only over encrypted connections (HTTPS), and we limit access to personal information to people who need it. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information.

Your rights

Wherever you live, you can ask us to access, correct or delete the personal information we hold about you, and to stop sending you emails.

California residents. In the last 12 months we have collected identifiers (email address, IP address) and internet activity information (server logs), for the purposes above. Under the CCPA/CPRA you have the right to know what we collect and how we use it, to delete it, to correct it, and to opt out of its sale or sharing (we do neither). We will not discriminate against you for using these rights. You may use an authorised agent, and we may need to verify your identity, and the agent's authority, before acting on a request.

EU, EEA and UK residents. You also have the right to restrict or object to our processing, to data portability, and to withdraw consent at any time (without affecting earlier processing). You can complain to your local data-protection authority, though we'd welcome the chance to resolve your concern first.

To make any request, email rummagemedia@soravai.com. We respond within the time the law requires (generally 30 days in the EU/UK and 45 days in California).

International transfers

We are based in the United States and our providers may process information in the US and other countries. Where the law requires, these transfers rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.

Children

This site is not directed to children under 13 (or under 16 in the EU/EEA and UK), and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this policy

We will post any changes here and update the effective date above. If a change materially affects how we use personal information you've already given us, we will tell you before it takes effect. See also our Terms of Use.

Contact

Soravai Studios LLC — rummagemedia@soravai.com