Legal
Privacy policy
Draft, not yet reviewed. This is a working outline of what
the site actually does with data. It has not been reviewed by a lawyer and
must not go live in this state. A US-facing site collecting email
addresses needs a policy that accounts for CAN-SPAM, and for state privacy
law (California, Colorado, Virginia and others) depending on where visitors
are. If EU or UK visitors are expected, GDPR applies too.
What we collect
- Email address, when you ask to be notified about US availability or subscribe to the journal.
- Business contact details, when you submit a wholesale enquiry: name, business name, email, location, business type and estimated volume.
- Basic analytics, if and when analytics are added. None are running today.
What we do with it
- Reply to your enquiry.
- Tell you when the product becomes available where you are.
- Send journal updates, if you asked for them.
What we do not do
- Sell your information.
- Share it with anyone outside the company, except a service provider needed to send the email.
- Send you anything you did not ask for.
Unsubscribing
Every email carries an unsubscribe link. You can also write to hello@brazilsnaturalsecret.com and we will remove you.
Still to be completed
- The named data controller for privacy requests.
- Retention periods.
- The email service provider actually used, and where it stores data.
- Cookie disclosure, once analytics are chosen.
- State-specific rights sections, and a decision on whether GDPR applies.