Privacy Policy

Last updated: October 17, 2026

This policy explains what information Cashmere Brunch (“we”, “us”) collects when you visit this site, why we collect it, and the choices and rights you have. We keep data collection to the minimum a small independent publication needs to run.

Who we are

Cashmere Brunch is an independent editorial site. For any privacy question, or to make a request about your data, use our contact form and mark it for the editor. We act as the data controller for the information described here.

What we collect

Information you give us

If you write to us through the contact form, we receive the name, email address and message you submit, and the topic you select. We use this only to read and reply to your message.

Information collected automatically

Like most websites, our host records standard technical information when a page is served — for example your approximate region, browser type, the page requested and the time of the request. We also use privacy-friendly analytics to measure how many people read each page. We do not use this information to identify you personally.

Cookies

We use a small number of cookies and similar technologies to measure readership, to remember your cookie choice, and to track affiliate links. When you first visit, a banner lets you accept or decline analytics cookies. Our affiliate partner, Skimlinks, loads for all visitors: it may set cookies so that a store can credit us when you buy through a link here. You can block or clear cookies at any time in your browser.

When you click an affiliate link, the store you visit (such as Amazon) and our affiliate network, Skimlinks, may set their own cookies. Those are governed by their own privacy policies, not ours.

How we use your information

• To respond to messages you send us.
• To understand which articles are read, so we can decide what to write next.
• To keep the site secure and working, and to detect abuse or spam.
• To comply with our legal obligations.

Legal bases (EEA / UK visitors)

Where the EU or UK GDPR applies, we rely on: your consent for non-essential analytics cookies (which you can withdraw at any time); our legitimate interests in running, securing and improving a small publication, and in reading and answering messages you choose to send; and compliance with legal obligations where the law requires it.

How your information is shared

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We share limited data only with the service providers that make the site work, and only so they can perform that service for us:

• Hosting — our host serves the pages and keeps standard server logs.
• Contact form delivery — when you submit the form, the contents are passed to an email-delivery service so the message reaches the editor’s inbox.
• Analytics — an analytics provider gives us aggregate readership numbers.
• Affiliate links — Skimlinks receives the page you are on and the links you click, so purchases can be credited to us.

We may also disclose information if required by law, or to protect our rights, safety, or the integrity of the site.

International transfers

We are based in the United States, and our service providers may process data in the United States or other countries. Where we transfer personal data out of the EEA or the UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK addendum) or an equivalent recognised mechanism.

How long we keep it

We keep contact-form messages only as long as needed to handle your enquiry and any follow-up, then delete them. Aggregate analytics contain no identifying detail and may be kept longer. Server logs are kept for a short period for security and troubleshooting.

Your rights

Depending on where you live, you may have some or all of the following rights over your personal information:

• EEA / UK (GDPR): to access, correct, delete, restrict or object to processing, to data portability, and to withdraw consent at any time. You also have the right to complain to your local data protection authority.
• California (CCPA/CPRA): to know what we collect, to access and delete it, to correct it, and to opt out of “sale” or “sharing” — we do neither. We will not discriminate against you for exercising any right.
• Other regions: similar rights may apply under your local law, and we honour them where they do.

To exercise any right, contact us through the contact form. We may need to verify your request, and we will respond within the time your law allows.

Do Not Track and Global Privacy Control

We do not track you across other websites ourselves, but our affiliate network may use cookies to credit purchases. Where your browser sends a Global Privacy Control signal, we treat it as a valid request to opt out of any sale or sharing — which, again, we do not do.

Children

This site is intended for adults and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information, contact us and we will delete it.

Changes to this policy

We may update this policy as the site or the law changes. When we do, we will update the date at the top. Significant changes will be noted on this page.