Privacy & newsletter policy

Who is responsible

Dia De Muertos Press
228 Cameron Ave
Colonial Heights, VA 23834
United States

Privacy requests: privacy@diademuertos.press

Our promise to subscribers

We never sell or rent subscriber information, or share it with others for their own marketing or unrelated purposes. We use subscriber information only to provide the Dia De Muertos Press information, author-related materials and book recommendations that you agreed to receive, and to perform the delivery, security, preference management and request handling necessary to support those subscriptions. Where service providers must process information to deliver those services, they may use it only for that purpose on our behalf. Disclosures required by law are handled only as legally required.

Information collected

We collect your email address, optional name, newsletter selections, tags and any reader details you choose to provide or that we record with permission. We keep subscription status, consent source and dates, and email delivery records. Our hosting and email services may also process connection details such as IP addresses and server logs.

Purposes and legal bases

We use subscriber details to send only the Dia De Muertos Press updates, author-related materials and book recommendations you requested through your newsletter selections, and to manage your preferences, relying on consent for those subscriptions. You can withdraw consent at any time. We also use necessary records to maintain security, handle requests and prevent further unwanted messages, where supported by our legitimate interests or applicable legal obligations.

Hosting, email providers and other recipients

The newsletter application and SMTP mail service run on servers operated by Dia De Muertos Press in the United States.

International processing and safeguards

Dia De Muertos Press operates in the United States. Newsletter and subscriber information is processed and stored on servers in the United States. If you access or subscribe to our services from another country, including the European Economic Area, your information will be transferred to and processed in the United States. We review the contractual and legal safeguards provided by any hosting, email-delivery, or storage providers we use. Contact Privacy@diademuertos.press for information about the safeguards applicable to your information.

Retention and backups

We retain active subscriber information while you remain subscribed. Unconfirmed subscription requests are reviewed and deleted within 30 days. When you unsubscribe, we stop sending marketing messages and retain only the information reasonably necessary to document consent, honor your opt-out, prevent accidental resubscription, maintain security, and demonstrate compliance.
Identifiable email-delivery and engagement records are retained for up to 24 months after the related activity. Consent and unsubscribe records may be retained for up to three years after the subscription ends. Lead-magnet access, verification, and download records are retained for up to 24 months after access expires. Transactional email content containing private access links is redacted by the application after two days.
Application, mail-server, and security logs are retained for up to 90 days unless a longer period is needed to investigate abuse or a security incident. Database and file backups are kept on a rolling basis for up to 30 days and are accessible only to authorized personnel. Personal information deleted from the active system may remain in a protected backup until that backup expires. If a backup is restored, current erasure requests and suppression records will be reapplied before the restored information is used for marketing.
When a subscriber requests erasure, we remove or detach identifying profile information as described in this policy. We may retain a keyed suppression record to prevent the address from being accidentally imported or contacted again. Non-identifying aggregate reporting may be retained. Information may be kept longer when required by law, necessary to resolve a security incident, or needed for the establishment, exercise, or defense of legal claims. We review retained information periodically and delete or de-identify it when it is no longer necessary.

Email tracking and cookies

Campaigns can contain an open-tracking image and tracked links. When enabled, these record opening or clicking activity associated with a subscriber. Email applications and automated scanners may affect those measurements. This application uses a session cookie for security and preference forms. Additional hosting or linked-site technologies may have their own privacy effects.

Choices and EU/EEA rights

Use the unsubscribe link to stop all marketing messages, or the personal preference link to leave individual public newsletters. These actions do not require an account or payment. The preference page also offers a data download and subscriber-profile erasure. Contact us for correction or other requests. Where GDPR applies, you may have rights of access, rectification, erasure, restriction and portability, may withdraw consent, and may object to direct marketing. You may complain to a competent supervisory authority. We assess requests under the applicable law and its exceptions.

Suppression and limits of self-service erasure

Profile erasure removes subscriber contact details, custom fields and subscriptions and invalidates the personal preference link. Delivery records without the profile details remain for reporting; a keyed email fingerprint remains to prevent accidental re-import. That fingerprint is a suppression record, not a claim of complete anonymization. Previously sent mail, backups, server logs, campaign content and personalized tracked destination URLs may require separate handling under our retention process. A message already being transmitted cannot be recalled.

Reader gifts and protected downloads

When you request a reader gift, we use your email address to deliver an access link and verification codes. We keep the offer requested, verification date, access expiration, download-start count and dates, and any optional newsletter choice and consent wording. A security session cookie keeps verification tied to your browser. Requesting a file alone does not subscribe you to a newsletter. Files may be held on our own server or a private cloud provider named in this notice. Contact us about access, correction or erasure; verified readers can also open their preferences from the download page.

US privacy and commercial-email practices

Our newsletters identify the sender and include a mailing address and a way to stop marketing messages. We honor unsubscribe requests and maintain suppression records. State privacy rights and request procedures depend on the law applicable to the business and reader. Contact our privacy address with questions or requests.

Other disclosures / representative / children

Our newsletters and reader downloads are intended for people aged 16 or older. We do not knowingly collect personal information from children under 13. If we learn that we collected information from a child without the authorization required by applicable law, we will delete it. A parent or guardian may contact Privacy@diademuertos.press about a child’s information.
We do not use subscriber information for automated decision-making or profiling that produces legal or similarly significant effects. Newsletter interests, tags, engagement measurements, and lead-magnet activity may be used only to administer subscriptions and provide the materials readers requested.
Dia De Muertos Press has not appointed a Data Protection Officer because its current newsletter activities do not involve large-scale processing of sensitive information or large-scale systematic monitoring. Dia De Muertos Press is established in the United States and has not currently appointed a representative in the European Union or European Economic Area. Privacy questions and rights requests may be sent to Privacy@diademuertos.press.