Privacy notice
Last updated: 26 October 2026.
This notice explains what I ask you for, what I use it for, who else receives it, and how you can ask me to delete it.
Who is responsible for your data
The data controller is Leandro Valdés, based in Playa del Carmen, Quintana Roo, México. For anything to do with your data, the address is yumecraftsmx@gmail.com.
There's no company behind this and no support team: your data reaches me and I'm the one who handles it.
What I ask you for
In the request form: your name, your email, your country, your city and your ZIP or postal code. WhatsApp is optional.
Whatever you write about the piece is kept too: model, size, colours, when you need it, comments and your reference photo, if you attach one.
Your request also records where you reached the site from — that you came from Instagram, for instance — and which page you filled the form on. It tells me which posts are working.
If you've received your piece and fill in the survey, I keep your name, your city, your email, what you write and the photo, if you send one. Your first name, city, words and photo are published only if you tick the box that allows it; your email is never published.
I don't ask for financial details, ID documents or sensitive personal data. If you send them anyway in a comment, I don't use them.
If you write to me on Instagram or Facebook
I keep what you write in a comment or message to Yume, your username if the platform provides it, and the date, so I can reply. Replies are drafted by an AI assistant (Claude, by Anthropic) and I review them before they're sent, except one-emoji thank-yous. It's stored in a private file on GitHub; to have it deleted, write to yumecraftsmx@gmail.com.
What I use it for
To prepare a quote with the price of the piece and the cost of shipping, to reply to you and follow up on your project, and to arrange delivery if you go ahead. Without these I can't handle your request.
The city and ZIP or postal code are for working out the shipping. Without them I can't give you a final price.
The survey, to improve the work and, if you allow it, to publish your review.
Now and then I may also write to tell you about new Yume pieces or other projects of mine. This isn't needed for your request, and you can say no whenever you like, now or later, by replying to that email or writing to yumecraftsmx@gmail.com.
Where it's kept and who else sees it
Your request arrives in a spreadsheet and in my inbox, both Google's. Your reference photo, if you attach one, is kept in my Google Drive. The site is published on Cloudflare.
If you order a piece, the courier receives your name, address and phone number to deliver it: in Mexico, usually Paquetexpress; outside Mexico, FedEx or DHL.
Meta is told that a request was sent, without what you wrote in it. The details are under “Cookies and browsing”.
During the Clarity trial, Microsoft receives how people move through the pages, without what you type in the forms. The detail is also under “Cookies and browsing”.
To keep the workshop's accounts I use an AI assistant, Claude, by Anthropic, which can read the sales record with the name of whoever bought.
No one else receives your data, except under a legal obligation.
How long I keep it
For as long as it serves the purposes in this notice: your request, your piece and, unless you've said no, the update emails. Data from a sale is also kept for as long as tax law requires.
If you ask me to delete it, I delete it, except for what the law requires me to keep.
What you can ask me for
You can ask to see your data, correct it if it's wrong, have it deleted, or object to my using it, for everything or only for the update emails. You can also withdraw your consent whenever you want.
Write to yumecraftsmx@gmail.com from the address you used for the request and tell me what you want. I reply within twenty working days at the latest.
You don't have to explain why.
Cookies and browsing
The site stores the language you chose in your browser, so it doesn't have to ask again. While you fill in the form it also keeps what you've written so far, which is deleted when you close the tab.
It also uses the Meta Pixel, an Instagram and Facebook cookie that tells whether an ad brought a visit or a request. It tells Meta that you opened a page and that you sent the form, not what you wrote in it. Meta may link that visit to your Instagram or Facebook account, under its own rules. If you browse from Europe, the site asks you first and respects your answer.
Cloudflare counts the visits to each page without any personal data about the visitor. The fonts are served from this same domain.
Until 5 January 2027, the site also uses Microsoft Clarity to see how people move through the pages: where they click, how far they scroll and where in the form someone stops. It records those movements along with the type of device and an approximate location, taken from the IP address. What you type in the forms is masked and not recorded. It uses two cookies on this domain, _clck and _clsk; Microsoft may also use its own. Recordings are deleted after 30 days.
Microsoft handles this data as an independent controller and may also use it for its own services, including Microsoft Advertising; it explains this in its privacy statement: https://privacy.microsoft.com/en-us/privacystatement. If you browse from Europe, the site asks you first. You can change your answer with “Cookie settings”, at the foot of every page, or by writing to me at yumecraftsmx@gmail.com.
Changes to this notice
If anything changes — what I ask for, the tools I use — I write it here and update the date above.
