Skip to content
HINABI
The Music The Letters The Book About Read your first letter
Your Data

Privacy Policy

Last updated: 18 July 2026

What we collect, why, and the control you have over it — written plainly, and kept to a minimum.

On this page

  1. Who we are
  2. What we collect
  3. How we use it
  4. Our lawful bases
  5. Who we share it with
  6. Marketing & your choices
  7. Cookies
    1. Who we are
    2. What we collect
    3. How we use it
    4. Our lawful bases
    5. Who we share it with
    6. Marketing & your choices
    7. Analytics and advertising
    8. International transfers
    9. How long we keep it
    10. Your rights
    11. Security
    12. Children
    13. Complaints
    14. Changes

1Who we are & who controls your data

Hinabi Privé ("Hinabi Privé", "we", "us", "our") is the business behind Hinabi Music — the music project of the artist known as Pat Hinabi — and operates this website at hinabimusic.com, publishing VOL II: KURATA, the VOL II: KURATA Letters, and the book DRAMA. Where you see "Hinabi Music", that is the brand; the entity that controls your data, and that takes any payment, is Hinabi Privé.

Hinabi Privé is based in the United Kingdom. You can reach us at hello@hinabimusic.com.

2What we collect

We keep data collection to a minimum. Depending on how you use the site, this may include:

  • Waitlist details — when you join the DRAMA waitlist on this site, the first name, contact number and email address you enter.
  • Messages you send us — if you email us, your email address and whatever you choose to write.
  • Basic technical data — our host keeps standard server logs (such as IP address and browser type) to deliver and secure the site.

If you subscribe to the Letters, your account and payment details are collected and held by our publishing platform, not by this website — see section 5.

3How we use it

  • to add you to a waitlist and let you know when the book or music is available;
  • to reply to you when you get in touch;
  • to run, secure and improve the website; and
  • to send you updates about HINABI where you have asked us to.

We do not sell your personal data, and we do not use it for automated decision-making or profiling.

4Our lawful bases

Under UK data protection law we rely on:

  • Consent — for joining a waitlist and for marketing emails. You can withdraw it at any time.
  • Legitimate interests — for keeping the site secure and running it well, balanced against your rights.
  • Contract — where we need to do something you have asked us to do.

5Who we share it with

We share personal data only with the service providers who help us run HINABI, and only as far as they need it:

  • Our publishing platform (at kurataletters.hinabimusic.com) — runs the Letters subscription and, through its payment processor, handles billing. We never see or store your full card details.
  • Our website host — serves the site and keeps standard security logs.
  • Email and form tools — help us manage waitlist sign-ups and reply to you.

We may also disclose data if the law requires it, or to protect our rights. The social platforms we link to (Instagram, Facebook, Threads) are run by others under their own privacy policies.

6Marketing & your choices

We only send marketing emails to people who have asked for them. Every one includes an unsubscribe link, and you can opt out at any time — either through that link or by emailing us. Opting out of marketing does not stop essential messages about something you have subscribed to.

7 Cookies and tracking

This website uses Google Analytics, which sets cookies to measure how the site is used. With Google’s advertising features enabled (see “Analytics and advertising” below), these cookies may also support demographic and interest reporting and advertising audiences. Our host may use strictly necessary cookies to deliver and secure the site. You can control or delete cookies through your browser settings, and manage advertising cookies through the choices described below.

8 Analytics and advertising

This site uses Google Analytics to understand how visitors find and use it, collecting information such as pages viewed, approximate location (from IP address), device and browser type, and referring source. This is processed by Google on our behalf. See Google’s Privacy Policy.

Beyond basic analytics, this site uses Google’s advertising features, including Google Signals. When a visitor is signed in to a Google account and has turned on Ads Personalisation, Google Analytics may associate the visit with that account, allowing aggregated demographic and interest data (such as age range, gender, and interests) to be reported and audiences to be built for advertising, including across the different devices a visitor uses.

This site may also use tools provided by Meta Platforms (Facebook and Instagram) for measurement and advertising, which may set their own cookies and process usage data in line with the Meta Privacy Policy.

You can turn off ad personalisation through Google Ads Settings, review or delete associated activity via Google My Activity, opt out of Google Analytics with the Google Analytics opt-out add-on, and manage Meta ad preferences in your Facebook or Instagram settings.

9International transfers

Some of our providers are based outside the UK, including in the United States. Where your data is transferred abroad, we rely on legal safeguards recognised under UK data protection law — such as UK "adequacy" regulations or the International Data Transfer Agreement (or the UK Addendum to the EU Standard Contractual Clauses) — so that your data stays protected.

10How long we keep it

We keep personal data only as long as we need it for the purpose we collected it — for example, waitlist details until the launch they relate to has passed and a reasonable follow-up window has closed, or until you ask us to remove them. After that we delete or anonymise it.

11Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the personal data we hold about you;
  • have inaccurate data corrected;
  • ask us to delete your data, or restrict how we use it;
  • object to processing based on our legitimate interests;
  • ask for your data in a portable format; and
  • withdraw consent at any time.

To exercise any of these, email privacy@hinabimusic.com. We will respond within one month.

12Security

We take reasonable technical and organisational steps to protect your data. No method of transmission over the internet is completely secure, but we work to keep what we hold safe and to limit who can access it.

13Children

This site and its subscriptions are intended for adults and are not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has given us their data, contact us and we will delete it.

14Complaints

If you have a concern about how we handle your data, please tell us first so we can put it right. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk.

15Changes to this policy

We may update this policy from time to time. The version here, with the "last updated" date above, is the current one. If we make a significant change, we will take reasonable steps to let you know.

HINABI — a Hinabi Privé project
It begins and ends in love.
Instagram Facebook Threads
The Music The Letters The Book About Read your first letter
VOL II: KURATA and the VOL II: KURATA Letters are published by Hinabi Privé. Terms & Conditions · Privacy Policy © 2026 Hinabi Privé · VOL II: KURATA