Last updated October 1, 2026
Privacy Notice
This notice explains the limited personal information used to sell and protect the Makeup Theory digital edition.
Controller and scope
Diego Herrero Ramos, publishing as DH Ramos, is responsible for the information described here in connection with this website and the digital edition. This notice applies to the website, purchase flow, and private reader; it does not replace the privacy notices of third-party services you use independently.
Contact
For privacy, access, correction, deletion, refund, or support requests, email topchoicemkp@gmail.com. Please include the email used at checkout and enough information to verify the request. Do not email card numbers, passwords, or government identification.
Information used
When you buy, receive a gifted copy, or use the reader, we may process your email address, a gift grant or Stripe transaction and customer identifiers, payment status and amount where applicable, access status, timestamps, requested page numbers, and limited technical data used for security and rate limiting. When a purchase link includes campaign tags, Stripe may also receive limited source, medium, and campaign labels so the author can tell which promotion led to a purchase; these labels do not identify you by themselves. Stripe checkout records also include the time and versions of the purchase terms and privacy notice you accepted, plus your immediate-delivery request. We do not receive or store your full card number, bank credentials, or Stripe checkout card data.
Free tools and aggregate measurement
Tool selections and ingredient lists are processed in your browser and are not uploaded to our database, saved, used for face recognition, or sent to an AI model. Illustrations are educational examples. We count tool views and interactions, book-detail visits, and checkout steps in aggregate without visitor identifiers or analytics cookies. We respect browser Do Not Track and Global Privacy Control signals. Campaign labels travel in internal links and may be associated with a purchase; do not put personal information in campaign labels. A daily hash of the network address is used temporarily to limit measurement abuse.
Why it is used
This information is used to confirm payment, create and send private access, display your purchaser watermark, operate the reader, prevent abuse and unauthorized distribution, process refunds or disputes, provide support, and meet legal or accounting obligations.
Service providers
Stripe processes checkout, payment information, purchase-consent records, and campaign labels when present. Supabase provides authentication, protected content delivery, and database services. The website's hosting provider serves the public pages. Amazon supplies the external paperback badge and purchase destination when you choose to open it. These providers process information under their own terms, security measures, and privacy notices.
Sharing
Personal information is not sold. It may be shared with service providers as needed to operate the sale and reader, or when required to comply with law, protect rights, or prevent fraud and abuse.
Cookies and similar technology
The site's hosting and security layer may use short-lived, essential security cookies and technical signals to prevent abuse and keep the site available. The site does not intentionally use advertising trackers or sell personal information for targeted advertising.
Retention
Purchase, gift-access, and consent records are kept while access remains active and afterward for the periods reasonably required for accounting, tax, consumer-protection, fraud-prevention, dispute, and legal obligations. Page-access logs are automatically deleted after 90 days, access-link request logs after 30 days, and security rate counters after seven days. Aggregate traffic counts are retained for up to 13 months. Support correspondence is retained only while the request is active and for a reasonable follow-up period. Records subject to a legal hold or mandatory retention requirement may be kept for the required period.
Your choices and rights
Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, or a copy of personal information. In Mexico, these are commonly called ARCO rights. You may also ask us to limit non-essential use or disclosure of your information. Email topchoicemkp@gmail.com with the purchase email, the request type, and enough information to verify that you control the account. We will acknowledge the request, may ask for proportionate verification, and will communicate the determination within 20 business days and, if approved, implement it within the following 15 business days, subject to justified extensions and applicable law. Some purchase records may be blocked or retained when required for legal, tax, fraud-prevention, or dispute purposes rather than deleted immediately.
Children and minors
The website and digital edition are not directed to children under 13, and we do not knowingly collect their personal information. A buyer who has not reached the age of legal majority where they live must use the service only with a parent or legal guardian's authorization. If you believe a child provided information without appropriate authorization, contact us so it can be reviewed and, where required, deleted.
Security
Access is authenticated, book pages are stored outside the public website, and payment card data is handled by Stripe. No online system can promise absolute security, but reasonable technical and organizational safeguards are used.
International processing
Service providers may process data in countries other than yours. Their contractual and legal safeguards apply to those transfers.
Changes and incidents
Changes will be published on this page with a revised date. When a change materially affects how existing customer information is used, we will also provide notice through the purchase email or another reasonable channel when practicable. If a security incident is likely to materially affect your rights, we will provide notice through a reasonable channel consistent with applicable law.
Aviso de privacidad — Español
Responsable: Diego Herrero Ramos, quien publica como DH Ramos. Este aviso se aplica al sitio, sus herramientas gratuitas, la compra y el lector privado de Makeup Theory. Contacto: topchoicemkp@gmail.com.
Datos y finalidades
Para ejecutar la compra y licencia tratamos correo electrónico, identificadores de compra o regalo, importe, moneda, estado de pago y acceso, fechas, consentimientos y registros técnicos de acceso y seguridad. Se utilizan para confirmar el pago, entregar el acceso, autenticar al lector, mostrar la marca de agua, atender solicitudes, prevenir abuso y cumplir obligaciones legales. No recibimos el número completo de tarjeta ni las credenciales bancarias.
Las selecciones visuales y las listas de ingredientes introducidas en las herramientas se procesan en el navegador: no se envían al servidor, no se almacenan en nuestra base de datos y no se usan para reconocimiento facial ni se envían a un modelo de IA. Las imágenes son ilustraciones y no predicen resultados individuales ni diagnostican enfermedades.
Medición y proveedores
Contamos de forma agregada las visitas y el uso de herramientas, visitas al libro y pasos de compra, junto con etiquetas de campaña cuando existen. La medición no guarda correos, entradas de las herramientas, identificadores de visitante ni cookies analíticas. Respeta las señales Do Not Track y Global Privacy Control del navegador. Las etiquetas se conservan en enlaces internos y pueden asociarse a la compra en Stripe para medir su origen. No se deben incluir datos personales en etiquetas de campaña. Para limitar abuso se usa temporalmente un hash diario de la dirección de red.
Stripe procesa pagos; Supabase presta autenticación, base de datos y entrega protegida; el proveedor de alojamiento sirve el sitio. Estos encargados pueden procesar datos fuera de México conforme a sus contratos y medidas aplicables. Los enlaces o recursos externos de Amazon y Google tienen sus propios avisos. No vendemos datos personales ni incorporamos publicidad comportamental.
Conservación
Los registros de páginas se eliminan automáticamente después de 90 días, las solicitudes de enlaces después de 30 días y los contadores de límites después de 7 días. Los conteos agregados se conservan hasta 13 meses. Los registros de compra, licencia y consentimiento se conservan mientras exista acceso y durante los plazos legales de contabilidad, impuestos, reclamaciones y controversias. La correspondencia de soporte debe revisarse y depurarse cuando deje de ser necesaria.
Derechos y solicitudes
Puede solicitar acceso, rectificación, cancelación u oposición (ARCO), revocar consentimiento o limitar usos no necesarios escribiendo al correo indicado. Incluya el correo de compra, el derecho solicitado, los datos a los que se refiere y un medio de respuesta. Verificaremos su identidad proporcionalmente, sin solicitar por defecto números de tarjeta ni contraseñas. Comunicaremos la determinación en un máximo de 20 días hábiles y, si procede, la haremos efectiva dentro de los 15 días hábiles siguientes, con las ampliaciones justificadas permitidas por la ley. La cancelación puede implicar bloqueo o conservación de datos sujetos a obligaciones legales. La revocación no tiene efectos retroactivos; retirar datos indispensables puede impedir continuar el acceso.
Seguridad, menores y cambios
El lector requiere autenticación y autorización vigente. Las herramientas no son un servicio médico. El servicio no se dirige a menores de 13 años; los compradores menores de edad necesitan autorización de su representante. Publicaremos cambios con fecha y notificaremos los cambios sustanciales y las vulneraciones que afecten significativamente sus derechos conforme a la ley aplicable.