Privacy Policies
This Privacy Policy explains how & Bunt, operated by Carolina Poch Enciso, processes personal data when you visit this website or contact us. We process personal data only to the extent necessary to operate this website and respond to inquiries, and we do not engage in tracking, profiling, or marketing activities.
1. Data Controller
& Bunt, operated by Carolina Poch Enciso
Mexico City, Mexico
Email: pochcarolina@andbunt.com
2. Applicable Data Protection Laws
This website is operated from Mexico.
Personal data is processed in accordance with: The Mexican Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), and Where applicable, the General Data Protection Regulation (GDPR) for users located in the European Union, EEA, or UK. Where different legal standards apply, the stricter standard prevails.
3. Personal Data We Process
a) Data You Provide Voluntarily
When you contact us via email or contact forms, we may process:
- Name
- Email address
- Company name (if provided)
- Message content
Providing this data is voluntary.
b) Technical Data
When you visit this website, limited technical data may be processed automatically to ensure proper delivery and security of the site, including:
- IP address
- Browser type
- Version Device
- Operating system information
- Date and time of access
This data is used exclusively for technical operation and security.
4. Purposes of Processing
Personal data is processed solely for the following purposes:
- Responding to inquiries and communications
- Providing requested information or services
- Ensuring technical functionality, stability, and security of the website
- Complying with legal obligations
- No profiling, analytics, or marketing analysis is performed.
6. Legal Bases for Processing
Where GDPR applies, personal data is processed on the following legal bases:
- Consent, when you voluntarily contact us
- Pre-contractual measures, when responding to service inquiries
- Legitimate interests, limited to secure and functional website operation
- Legal obligation, where required by law7.
Cookies and Tracking Technologies
This website does not set cookies or tracking technologies directly by & Bunt. Any cookies or similar technologies that may be used are set by Webflow, the platform that hosts and delivers this website. These technologies are strictly necessary for technical website delivery, performance, and security. & Bunt does not use analytics, advertising, marketing, or cross-site tracking tools.
8. Third-Party Service Providers
This website relies on the following third-party service providers for technical operation:
- Webflow
Used for website hosting, infrastructure, and content delivery.
Webflow may process technical data such as IP address, device information, and browser data as part of providing these services.
- Adobe Fonts
This website uses Adobe Fonts to display web fonts consistently.
When a page is loaded, Adobe Fonts may receive technical data such as IP address and browser information to deliver font files. No cookies are set by & Bunt in connection with Adobe Fonts.
These providers act under their own privacy policies and are responsible for their respective data processing activities. & Bunt does not sell, rent, or share personal data with third parties for marketing purposes.
9. International Data Processing
Due to the use of Webflow and Adobe Fonts, personal data may be processed in countries outside your country of residence, including the United States. Where required by applicable law, appropriate safeguards are relied upon to ensure an adequate level of data protection.
10. Data Retention
Personal data is retained only for as long as necessary:
- Inquiry and communication data: retained until the request is resolved and deleted thereafter unless retention is required for legal or business reasons
- Technical data: retained only temporarily for security and operational purposes
Data is deleted or anonymized once no longer needed.
11. Your Rights
Depending on your location and applicable law, you may have the right to:
- Access your personal data
- Request correction or deletion
- Object to or restrict processing
- Withdraw consent at any time
- Requests can be made by contacting: carolinapoch@andbunt.com
If you are located in the EU/EEA or UK, you also have the right to lodge a complaint with your local data protection authority.
12. Data Security
Appropriate technical and organizational measures are in place to protect personal data, including encrypted connections (HTTPS) and secure hosting infrastructure.However, no method of data transmission or storage is completely secure.
13. Children’s Privacy
This website is not intended for children under the age of 16. We do not knowingly collect personal data from minors. If such data is identified, it will be deleted promptly.
14. Changes to This Privacy Policy
This Privacy Policy may be updated to reflect legal, technical, or operational changes. The most current version will always be available on this page.
15. Contact
For any questions regarding this Privacy Policy or personal data processing, please contact Carolina Poch Enciso.
Email: carolinapoch@andbunt.com
Last updated: 12/02/2026