Last updated September 14, 2026

Privacy Policy

This policy explains what personal data the Amalia Brooks website collects, why, and the choices and rights you have. It is written for readers everywhere and follows the EU and UK General Data Protection Regulation (GDPR), the ePrivacy rules on cookies, and US state privacy laws including the California Consumer Privacy Act as amended by the CPRA.

1. Who is responsible

This website is operated by Amalia Brooks (“we”, “us”), who is the controller of the personal data described here. For any privacy question or request, contact us through a direct message to @amaliabrooks_1 on Instagram.

2. What we collect

• Newsletter sign-ups. If you join the mailing list we collect your email address, the date and your consent. This is only collected when you submit the form and tick the consent box.
• Choices stored in your browser. Your 18+ confirmation, cookie choices and motion preference are saved in your own browser’s storage. They are not sent to us.
• Analytics (only with your consent). If analytics are enabled in future and you allow them, we measure visits, pages viewed, approximate country and which retailer links are clicked. We do not use analytics for advertising or to identify you personally.
• Technical data. Like every website, our hosting provider processes your IP address, browser type and request details to deliver pages securely and prevent abuse. These logs are kept for a limited period.
• Retailer links. When you click a “Read on Amazon” or “Free sample” link, your country is read from the request once to send you to your local Amazon store. It is not stored.

We do not knowingly collect special category data, and we never ask for payment details — purchases happen on the retailer’s own site.

3. Why we use it (legal bases)

• Sending the newsletter — your consent, which you can withdraw at any time.
• Analytics and embedded media — your consent through the cookie settings.
• Running and securing the website, and remembering your 18+ confirmation — our legitimate interests in providing a safe site for adult readers, and storage that is strictly necessary for a service you requested.
• Keeping records we are required to keep — legal obligation.

4. Who we share it with

We do not sell your personal data and we do not share it for cross-context behavioural advertising. We only use service providers who process data on our instructions: our website host, our email newsletter provider and, if you consent, our analytics provider. When you follow a link to Amazon, Goodreads, TikTok or Instagram, their own privacy policies apply.

5. International transfers

Our providers may process data outside your country, including in the United States. Where the GDPR or UK GDPR applies, transfers rely on an adequacy decision (such as the EU–US Data Privacy Framework) or on standard contractual clauses.

6. How long we keep it

• Newsletter data — until you unsubscribe, then removed or suppressed so you are not emailed again.
• Analytics — aggregated statistics; any identifiers expire within the periods listed in the Cookie Policy.
• Browser choices — until you clear your browser storage; cookie choices are re-requested after 12 months.

7. Your rights

Depending on where you live, you can:

• access the personal data we hold about you and get a copy;
• correct it, or ask us to delete it;
• object to or restrict how we use it, and receive it in a portable format;
• withdraw consent at any time (for example by unsubscribing or changing your cookie settings);
• if you are in California or another US state with a privacy law, know what we collect, delete or correct it, and opt out of any sale or sharing — which we do not do;
• lodge a complaint with the data protection authority in the country where you live or work.

To use any of these rights, contact us through a direct message to @amaliabrooks_1 on Instagram. We will answer within one month (45 days for US state requests) and will not treat you differently for exercising them.

8. Adults only

This website and newsletter are intended for adults aged 18 or older. We do not knowingly collect personal data from anyone under 18. If you believe a minor has signed up, contact us and we will delete the data.

9. Security

The site is served over HTTPS with modern security headers, and we limit the data we collect to what is needed. No method of transmission is completely secure, but we take reasonable steps to protect your information.

10. Changes

We may update this policy as the site or the law changes. The date at the top shows the latest version; material changes will be highlighted on the site or in the newsletter.