Privacy

Last updated 29 October 2026

What we collect through almasombrete.com, why, and what you can do about it.

Who we are

Alma Sombrète is a sole proprietorship owned by Barby García Gutiérrez, 26 South Rio Grande Street, Suite 2072, Salt Lake City, UT 84101, USA (“Alma Sombrète”, “we”). For anything about your data, write to privacy@almasombrete.com.

What we collect

When you join the list

Your email address, the date and time you joined, and which page you joined from. That’s all. We don’t ask for your name, phone number or anything else.

When you visit

We count visits with Vercel Web Analytics. It sets no cookies and doesn’t identify you. It records the page you viewed, the site that referred you, your approximate location (country, region, city), and your browser, operating system and device type. Visits are grouped using a temporary code that is discarded after 24 hours. Our host also keeps short-lived technical logs, which can include your IP address, to keep the site secure and running.

We don’t use advertising cookies, tracking pixels or social media trackers.

Why we use it

To confirm that you joined, and to tell you when Carmen is available. This is what you signed up for.
To send occasional news from the house: new fragrances, events and openings. You can opt out of this and stay on the Carmen list. Just tell us.
To understand, in aggregate, how many people visit and what they look at.

We don’t sell your data, we don’t share it for advertising, and we don’t use it to make automated decisions about you.

Who handles it for us

A few service providers process data on our behalf, under contract, only to provide their service:

Vercel (hosting, analytics and storage of the list): United States
Resend (sending email): United States
Cloudflare (our domain, and forwarding of email you send us): global network

This means your data is stored and processed in the United States. We’ll disclose information if the law requires it.

How long we keep it

Your email address stays on the list until you unsubscribe or ask us to delete it, or 24 months after the last email we sent you, whichever comes first. Unsubscribing deletes your address. Analytics data is aggregated and contains nothing that identifies you.

Your choices and rights

Wherever you live, you can:

unsubscribe from any email with the link at the bottom of it, or by replying “unsubscribe”;
ask what we hold about you, and get a copy;
ask us to correct it or delete it;
object to a use of your data or withdraw your consent at any time. This doesn’t affect anything we did before you withdrew.

Write to privacy@almasombrete.com. We’ll reply within 20 days, and act on unsubscribe requests within 10 business days at the latest. We may need to confirm that the address is yours before sending you data.

If you’re in Mexico, these are your ARCO rights; see our Aviso de privacidad. If you’re in the EU or UK, we rely on your consent to process your email address. You also have the rights to restrict processing and to data portability, and you can complain to your local data protection authority.

Security

The list is stored with private access, and only the people who run the house can see it. No system is perfectly secure. If a breach affects your data, we’ll tell you as the law requires.

Children

This site isn’t meant for anyone under 16, and we don’t knowingly collect their data. If you think a child has joined the list, write to us and we’ll delete the address.

Changes

If we change this policy, we’ll update the date above. If the change is significant, for example a new use of your email, we’ll email the list before it takes effect.

Contact

Alma Sombrète (Barby García Gutiérrez, sole proprietor) · 26 South Rio Grande Street, Suite 2072, Salt Lake City, UT 84101, USA · privacy@almasombrete.com