Política de privacidad
Last Updated: March 2026
This Privacy Policy describes how EPETAH LLC operating as Balmbare ("Balmbare," "we," "us," "our") collects, uses, discloses, and protects personal information when you visit balmbare.com, make a purchase, or interact with us. This policy is designed to comply with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and applicable federal privacy standards.
1. Information We Collect
Information you provide: name, email address, phone number, billing and shipping address, payment information (processed by our payment processor — we do not store full card numbers), account login credentials, order history, and communications you send us.
Information collected automatically: IP address, browser type and version, device identifiers, operating system, pages visited, time spent on pages, referring URL, approximate geographic location, and cookie and pixel data.
Information from third parties: our e-commerce platform (Shopify), payment processors, shipping carriers, analytics providers, advertising platforms (including Meta/Facebook), and subscription management tools (Loop Subscriptions).
2. How We Use Your Information
- Order fulfillment: processing, shipping, and tracking orders; managing returns and refunds
- Subscription management: recurring billing, renewal notifications, and cancellation processing via Loop Subscriptions
- Customer support: responding to inquiries, resolving disputes, and documenting chargeback evidence
- Marketing: sending promotional emails and offers — you may opt out at any time via the unsubscribe link in any email
- Fraud prevention and legal compliance: detecting unauthorized activity, responding to legal process, and enforcing our Terms of Service
- Analytics and improvement: understanding how customers use our website to improve products and experience
3. Cookies and Tracking Technologies
We use cookies, web beacons, pixels (including the Meta Pixel), and similar tracking technologies for site functionality, analytics, and targeted advertising. You may configure your browser to block cookies, though some site features may not function properly. We honor the Global Privacy Control (GPC) browser signal as an opt-out of the sale or sharing of your personal information for advertising purposes.
4. How We Share Your Information
We do not sell your personal information in the traditional sense. However, sharing identifiers with advertising platforms for targeted advertising may constitute a "sale" or "sharing" under California law. You may opt out as described in Section 6.
We share information with:
- Service providers: Shopify (platform), payment processors, shipping carriers, email service providers, analytics tools — all are contractually restricted to using your data only to provide services to us
- Loop Subscriptions: for subscription billing and management
- Advertising partners: Meta/Facebook and similar platforms receive identifiers for ad targeting and measurement
- Legal and compliance: we disclose information when required by law, subpoena, court order, or to protect the rights, safety, and property of Balmbare and others
- Business transfers: in connection with a merger, acquisition, asset sale, or similar transaction, your information may be transferred as a business asset
5. Data Retention
We retain personal information for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Order and transaction records are retained for a minimum of 5 years for accounting, dispute resolution, and chargeback documentation purposes.
6. Your California Privacy Rights (CCPA/CPRA)
California residents have the following rights regarding their personal information:
- Right to Know: request disclosure of the categories and specific pieces of personal information we have collected about you
- Right to Delete: request deletion of your personal information, subject to legal exceptions (e.g., we may retain information needed to complete transactions, detect fraud, or comply with legal obligations)
- Right to Correct: request correction of inaccurate personal information
- Right to Opt Out of Sale/Sharing: email info@balmbare.com with subject: Do Not Sell or Share My Information, or enable the Global Privacy Control (GPC) in your browser
- Right to Limit Use of Sensitive Personal Information: we do not collect sensitive personal information beyond what is necessary for order processing
- Right to Non-Discrimination: we will not discriminate against you for exercising any of these rights
To submit a rights request, email info@balmbare.com with subject: California Privacy Rights Request. We will respond within 45 days. We may need to verify your identity before processing your request.
7. Children's Privacy
Our website and products are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately.
8. Security
We implement commercially reasonable administrative, technical, and physical safeguards to protect your personal information, including SSL/TLS encryption for data in transit and access controls for data at rest. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
9. Third-Party Links
Our website may contain links to third-party websites. This Privacy Policy does not apply to those sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.
10. Updates to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected in the "Last Updated" date at the top of this page. Your continued use of our website after changes are posted constitutes acceptance of the updated policy.
Contact
EPETAH LLC operating as Balmbare
12552 South 125 West suite 101 Draper Utah 84020 United States
info@balmbare.com
For California privacy requests: use subject line "California Privacy Rights Request"