Last updated: 22 July 2025
This Privacy Policy explains how we collect, use, and protect your personal data when you subscribe to The Levett Letter & Lounge.

‍1. WHO WE ARE – DATA CONTROLLER
‍The Data Controller responsible for your personal data is:
‍Musée de Mougins SAS
‍5 rue des Mûriers, 06250 Mougins, France
SAS registered under number 512 676 560 00034
Contact: admin@thelevettletter.com

2. WHAT DATA WE COLLECT
‍When you subscribe to The Levett Letter & Lounge, we collect the following information:
Full name
Email address
Telephone number
Job position and company name
Country and billing address
VAT number (if applicable)
Payment data (processed securely via Stripe)
Proof of age or institutional affiliation (for rebate eligibility)

We do not collect or store full credit card details. All payment processing is securely handled by our provider, Stripe, in accordance with their own privacy policy.

‍3. WHY WE COLLECT YOUR DATA
‍We use your personal data for the following purposes:
To process and manage your subscription
To create your member account and provide platform access
To send service-related communications (access, invoices, renewal notices)
To verify eligibility for youth or institutional rebates
To issue tax-compliant invoices (including VAT or reverse charge, where applicable)
To comply with legal, tax, and accounting obligations

We do not use your data for promotional marketing or profiling without your explicit consent.

‍4. LEGAL BASIS FOR PROCESSING
‍We process your data on the following legal grounds:
‍Contractual necessity – to fulfil the subscription and related services
Legal obligation – to meet VAT and invoicing requirements
Legitimate interest – to manage subscriptions securely and efficiently
Consent – if explicitly given for additional communications

5. DATA SHARING
‍We do not sell your data to third parties. We share your data only with trusted service providers acting on our behalf:
‍Stripe – payment and invoicing processor
Website and platform hosting providers
Email systems (for service communications only)

These providers are contractually obligated to comply with data protection laws.

‍6. WHERE YOUR DATA IS STORED
‍Your data is stored on secure servers in the European Union or in jurisdictions deemed adequate by the European Commission. Only authorized members of our team may access your data under strict confidentiality.

‍7. HOW LONG WE KEEP YOUR DATA
‍Your data is kept as long as your subscription is active, and up to 6 years after cancellation for legal, accounting, and audit purposes.If you request deletion, we may retain only what is necessary to meet regulatory obligations.

‍8. YOUR RIGHTS UNDER GDPR
‍You may at any time:
Access the personal data we hold about you
Correct inaccurate or incomplete data
Request deletion of your data
Request data portability (in machine-readable format)
Object to or restrict certain types of processing
Withdraw consent (if applicable)
‍
To exercise these rights, contact: admin@thelevettletter.com

9. COOKIES AND TRACKING
‍At this time, we do not use cookies or online tracking tools. If that changes, we will update this policy and request consent where required.

‍10. COMPLAINTS
‍If you have concerns about your data or believe your rights have been violated, you may file a complaint with your national data protection authority.
In France:
CNIL – Commission Nationale de l’Informatique et des Libertés
www.cnil.fr

‍11. CHANGES TO THIS POLICY
‍We may update this policy from time to time. The latest version will always be available at: www.thelevettletter.com/privacy-policy
‍We will notify subscribers of any significant changes by email.