Privacy Policy

Last updated: 1 July 2026

This Privacy Policy explains how personal data is collected and used when you visit audrey.mt (the "Website"). We are committed to protecting your privacy and handling your data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Maltese data protection law.

1. Who we are

audrey.mt is the official website of the young Maltese singer Audrey Schembri. As Audrey is a minor, the Website is operated on her behalf by her parents / legal guardians (referred to as "we", "us" and "our"), who act as the data controller.

If you have any questions about this policy or your data, you can contact us at privacy [at] audrey.mt.

2. The data we collect

We do not run contact forms, accounts, newsletters or online sales, so we do not ask you for personal details. The only data processed is:

• Usage and analytics data - if (and only if) you accept analytics cookies, such as pages viewed, approximate location (country/region from a truncated IP), device and browser type, referring website and time spent on the site. This is collected by Google Analytics in aggregated, non-identifying form.
• Your cookie choice - a small record of whether you accepted or rejected analytics cookies, stored in your browser so we don't ask again.
• Technical server logs - like most websites, our hosting provider may temporarily log standard request information (e.g. IP address, timestamp) for security and to keep the site running.

3. Cookies and similar technologies

Cookies are small files stored on your device. We use only the minimum necessary, plus optional analytics cookies that load only after you accept them in the cookie banner. You can change your choice at any time via the "Cookie Settings" link in the footer.

4. Google Analytics

We use Google Analytics 4 to understand how many people visit the site and which pages are popular, so we can improve the content. It is configured to anonymise IP addresses and we do not use it for advertising or to identify you personally. Analytics is loaded only with your consent; if you reject or ignore the banner, no analytics cookies are set.

5. Embedded and third-party content

Some pages include content served by third parties. When this content loads, those providers may receive your IP address. We use privacy-friendly options wherever possible:

• YouTube (videos on the Music page) - embedded in privacy-enhanced mode (youtube-nocookie.com) and shown as a thumbnail first, so YouTube only loads and may set cookies once you choose to play a video.
• Cloudinary - image hosting and delivery. When images load, Cloudinary may receive your IP address as part of standard server logs.
• OpenStreetMap / CARTO - map tiles on the Journey page.
• Google Fonts and Font Awesome - fonts and icons used across the site.
• flagcdn / YouTube image servers - country flags and video thumbnails.

Each provider processes data under its own privacy policy. We encourage you to review Google's Privacy Policy for the Google services above.

6. Legal bases for processing

• Consent (Art. 6(1)(a) GDPR) - for analytics cookies.
• Legitimate interests (Art. 6(1)(f) GDPR) - for keeping the site secure and operational, and for displaying embedded content you choose to interact with.

7. How long we keep data

Analytics data is retained by Google Analytics for a limited period (we use a retention setting of up to 14 months) after which it is automatically deleted. Your cookie preference stays on your device until you clear it or change your choice.

8. International transfers

Some providers (such as Google) may process data outside the EU/EEA. Where this happens, the transfer is protected by appropriate safeguards such as the EU Standard Contractual Clauses.

9. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate data;
• Erase your data ("right to be forgotten");
• Restrict or object to certain processing;
• Withdraw consent at any time, without affecting prior processing.

To withdraw or change your cookie consent, use the "Cookie Settings" link in the footer. You can also block or delete cookies in your browser settings.

10. Children's privacy

This Website celebrates the work of a child performer and is managed by her parents / legal guardians. We do not knowingly collect personal data from children. If you believe a child's personal data has been shared with us, please contact us and we will remove it promptly.

11. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the latest version.

12. Contact and complaints

For any privacy request, email us at privacy [at] audrey.mt. If you are not satisfied with our response, you have the right to lodge a complaint with the Maltese supervisory authority, the Information and Data Protection Commissioner (IDPC) - idpc.org.mt.