Privacy Policy

Last updated: September 13, 2026

This policy explains what information Cashmere Brunch (“we”, “us”) collects when you visit this site, why we collect it, and the choices and rights you have. We keep data collection to the minimum a small independent publication needs to run.

Who we are

Cashmere Brunch is an independent editorial site. For any privacy question, or to make a request about your data, use our contact form and mark it for the editor. We act as the data controller for the information described here.

What we collect

Information you give us

If you write to us through the contact form, we receive the name, email address and message you submit, and the topic you select. We use this only to read and reply to your message.

Information collected automatically

Like most websites, our host records standard technical information when a page is served — for example your approximate region, browser type, the page requested and the time of the request. We also use privacy-friendly analytics to measure how many people read each page. We do not use this information to identify you personally.

Cookies

We use a small number of cookies and similar technologies, only to measure readership and to remember your cookie choice. We do not use advertising or cross-site tracking cookies of our own. When you first visit, a banner lets you accept or decline non-essential (analytics) cookies; essential cookies needed to remember that choice are always set. You can change or withdraw your choice at any time by clearing this site’s cookies in your browser, and most browsers let you block cookies entirely.

Note that when you click an affiliate link to Amazon, Amazon and its partners may set their own cookies on their own sites. Those cookies are governed by Amazon’s privacy notice, not ours.

How we use your information

• To respond to messages you send us.
• To understand which articles are read, so we can decide what to write next.
• To keep the site secure and working, and to detect abuse or spam.
• To comply with our legal obligations.

Legal bases (EEA / UK visitors)

Where the EU or UK GDPR applies, we rely on: your consent for non-essential analytics cookies (which you can withdraw at any time); our legitimate interests in running, securing and improving a small publication, and in reading and answering messages you choose to send; and compliance with legal obligations where the law requires it.

How your information is shared

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We share limited data only with the service providers that make the site work, and only so they can perform that service for us:

• Hosting — our host serves the pages and keeps standard server logs.
• Contact form delivery — when you submit the form, the contents are passed to an email-delivery service so the message reaches the editor’s inbox.
• Analytics — an analytics provider gives us aggregate readership numbers.

We may also disclose information if required by law, or to protect our rights, safety, or the integrity of the site.

International transfers

We are based in the United States, and our service providers may process data in the United States or other countries. Where we transfer personal data out of the EEA or the UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK addendum) or an equivalent recognised mechanism.

How long we keep it

We keep contact-form messages only as long as needed to handle your enquiry and any follow-up, then delete them. Aggregate analytics contain no identifying detail and may be kept longer. Server logs are kept for a short period for security and troubleshooting.

Your rights

Depending on where you live, you may have some or all of the following rights over your personal information:

• EEA / UK (GDPR): to access, correct, delete, restrict or object to processing, to data portability, and to withdraw consent at any time. You also have the right to complain to your local data protection authority.
• California (CCPA/CPRA): to know what we collect, to access and delete it, to correct it, and to opt out of “sale” or “sharing” — we do neither. We will not discriminate against you for exercising any right.
• Other regions: similar rights may apply under your local law, and we honour them where they do.

To exercise any right, contact us through the contact form. We may need to verify your request, and we will respond within the time your law allows.

Do Not Track and Global Privacy Control

Because we do not track you across other websites, there is nothing to switch off. Where your browser sends a Global Privacy Control signal, we treat it as a valid request to opt out of any sale or sharing — which, again, we do not do.

Children

This site is intended for adults and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information, contact us and we will delete it.

Changes to this policy

We may update this policy as the site or the law changes. When we do, we will update the date at the top. Significant changes will be noted on this page.