Privacy Policy

Last updated: 17 October 2026

Who is responsible for your data?

Lise Duarte Nuñez is the data controller for personal data processed through liseduartenunez.com. For privacy questions or to exercise your rights, email contact@liseduartenunez.com.

When you contact me

The contact form requires your name, email address, inquiry type and message so I can understand and answer your request. Depending on the inquiry, you may also provide your institution, organisation, project or current musical situation. You can contact me directly by email instead.

For Focused lessons, the email buttons prepare a draft in your own email app. Nothing is sent until you choose to send it. You may provide your musical goal, instrument and equipment, practice time, preferred session and language, country or time zone, and availability. For a minor, a parent or legal guardian should handle the inquiry. This is a contact request, not a booking, and no payment is collected through that page.

I use correspondence to answer questions and discuss teaching, masterclasses, mentorship, audition preparation or collaborations. Requests concerning a potential service are processed to take steps at your request before entering a contract. Other professional correspondence is processed on the basis of my legitimate interest in responding to inquiries. Providing information is voluntary, but without the contact details and context needed for your request I may be unable to respond.

Sending a message does not subscribe you to a mailing list or give consent to optional cookies. Please do not send unnecessary sensitive information, identity documents or payment details.

Newsletter and free MTDM worksheet

The optional monthly newsletter is in English and contains percussion practice ideas, new resources and occasional course news. The sign-up form asks for your email address and an unticked consent checkbox. Brevo sends a confirmation email; only after you confirm do you join the newsletter list and receive the welcome email with the worksheet link. Contacting me or visiting a confirmation page alone does not subscribe you.

The legal basis for newsletter delivery is your consent. I use Brevo to manage subscriptions and send emails. Records may include your email address, the form and consent version, subscription and confirmation dates, delivery events and withdrawal status. Providing your email is necessary to receive the newsletter and worksheet by email, but subscription is voluntary. You may unsubscribe at any time through the link in an email or by contacting me. Withdrawal does not affect processing that was lawful before withdrawal.

The retention policy for active newsletter contacts is until withdrawal, or up to three years after your last voluntary interaction, followed by manual review and deletion or a request to renew consent. Sending you an email or an automatically recorded email open does not restart that period. An unconfirmed request is not used for newsletters; unconfirmed requests are reviewed after 30 days. These reviews are manual, not automated. After withdrawal, only the information necessary to respect your choice and demonstrate consent or withdrawal is retained separately from active mailing use. A minimal suppression record is kept for three years; evidence needed for a specific legal obligation or dispute may be retained for the applicable period. Provider security logs and backup purge schedules are separate; their complete deletion deadlines have not been verified. You may contact me about a particular record.

The current account setting requires separate consent for individual email-pixel tracking and does not track contacts whose consent is unknown. This sign-up form does not collect that separate consent. Brevo may still use technical delivery and security measurements; emails may contain technical images and links routed through its delivery service. This is not a promise that emails contain no pixels or technical logs. See Brevo’s explanation of email-pixel consent and technical measurements.

Sign-up form security: Cloudflare Turnstile

The newsletter button opens a form hosted by Brevo on sibforms.com. Cloudflare Turnstile on that form helps distinguish people from bots. It processes technical signals such as IP address, browser information, TLS fingerprint and the form’s origin. The basis for protecting the form is the legitimate interest in preventing automated abuse. Cloudflare also uses signals to improve bot detection, acting as a controller for that purpose. See the Turnstile Privacy Addendum and Cloudflare Privacy Policy, including its retention, international-transfer and rights information. If verification does not work, you may contact me by email instead.

Brevo acts as a processor for newsletter management. Its processing terms and safeguards are described in its Terms of Use and Data Processing Agreement and Privacy Policy. Cloudflare and the providers’ authorised subprocessors may process information outside the European Economic Area, subject to the transfer safeguards described in their respective policies and processing agreements. You can contact me for information about the relevant safeguards. I do not sell the newsletter list.

Who receives your information?

I receive and handle your inquiries. Hostinger provides website hosting and the professional email service; its authorised service providers may process information needed to deliver and secure those services. Authorised technical support providers may access relevant information when needed to maintain the website, subject to confidentiality and limited access. Google receives information when you enable Analytics or YouTube, as described below. Information may also be disclosed where required by law.

How long is information kept?

For inquiries that do not lead to a service, the retention policy is up to 12 months after the last exchange, followed by manual deletion. Deletion is not automated. If a service is agreed, relevant records are kept for its administration and for applicable legal obligations or the establishment, exercise or defence of legal claims; the relevant service information will explain any additional processing.

The following Hostinger information was checked on 15 October 2026. Backup retention, log consultation windows and deletion of correspondence are different things:

  • Website backups: the site uses Hostinger Business hosting with automatic daily backups enabled. Hostinger publishes standard retention periods of 7 days for daily backups and 6 weeks for weekly backups, after which older backups are removed. See Hostinger’s backup documentation. The account currently also shows older restore points whose backup type is not identified. These published standard periods are therefore not presented as a verified maximum for every copy held for this site; the retention of on-demand backups and any additional internal purge delay have not been confirmed.
  • Website access and error logs: hPanel provides an analytics consultation window of up to 7 days. This is not confirmation that every underlying HTTP, PHP error or security log is deleted after 7 days. The provider’s complete retention and purge periods for these records have not been confirmed. See Hostinger’s website analytics documentation.
  • Email logs: Hostinger publishes a 30-day consultation window for delivery logs and mailbox access logs. This does not establish a separate deadline for deleting all internal copies.
  • Email recovery: deleted messages may remain in Trash for up to 30 days. Hostinger separately describes recovery of a deleted mailbox within 30 days and permanent removal of that mailbox’s email data after that period. These are recovery rules, not a confirmed retention period for all routine server-side email backups. See Hostinger’s guidance on deleted messages and deleted mailboxes.

Deleting an active message does not necessarily remove a backup copy immediately. Technical records and recovery copies serve website operation, fault diagnosis, security and recovery, subject to any applicable legal preservation requirement. Contact me for information about a particular record or deletion request. A provider clarification has been requested for the unconfirmed periods above.

Website operation and security

Hosting and email services process technical information such as IP addresses, request details and security events to deliver pages and messages and protect the website. The legal basis is the legitimate interest in operating a reliable, secure professional website. Necessary cookies remember your privacy choices; WordPress also uses cookies for administrator login and security.

Google Analytics

Google Analytics 4 is used with your consent through the Statistics category to understand visits, traffic sources, approximate location, browser and device information, and interactions such as scrolling, outbound links and downloads. Google receives the analytics data. GA4 does not log or store individual IP addresses. Do not include personal information in page URLs.

The retention settings last checked on 11 October 2026 were 2 months for event data and 14 months for user data, with the user retention period reset by new activity. These settings do not determine the retention of most standard aggregated reports. See Google’s explanation of Analytics data retention and the Cookie Policy for cookie lifetimes.

YouTube and external links

Embedded YouTube videos are blocked until you consent to the YouTube videos category. Once enabled, Google can receive technical and viewing information and use its own cookies. If you are signed into Google, activity may be linked to your account under Google’s settings and privacy policy. You may leave optional categories disabled and still browse the rest of the website.

Links to Instagram, Facebook, TikTok and other external websites lead to separate services with their own privacy policies.

International transfers

Hostinger and Google may process information outside the European Economic Area. Hostinger’s Data Processing Addendum, including its subprocessor list, describes its processing arrangements and Standard Contractual Clauses for relevant transfers to countries without an adequacy decision.

For its analytics services, Google states that it relies on the EU-US Data Privacy Framework for relevant transfers to the United States and on Standard Contractual Clauses where applicable. See Google’s international-transfer information. Google’s transfer frameworks and Privacy Policy also explain its wider services, including YouTube. You can consult these safeguards through the links or contact me to request information or a copy of the relevant safeguards.

Your choices and rights

Use Cookie settings to accept, reject or choose optional categories and to change or withdraw consent. Withdrawal stops future optional loading without affecting the lawfulness of processing already carried out. See the Cookie Policy for details.

Depending on the processing and applicable conditions, you may request access, correction, deletion, restriction or portability of your data, object to processing based on legitimate interests, and withdraw consent. Email contact@liseduartenunez.com. Additional information to confirm your identity will be requested only where necessary. Requests are normally answered within one month; if a lawful extension is needed, you will be informed within that month.

You may lodge a complaint with the French data protection authority, the CNIL, or your competent supervisory authority. There is no automated decision-making with legal or similarly significant effects in the website’s contact process.