Privacy Policy

Effective: August 17 2025

This policy explains what personal information KP Loba LLC ("we," "us," "our") collects when you visit www.karlapalomino.com or work with us, why we collect it, who we share it with, and what you can ask us to do with it.

It applies to the Site, our applications and forms, our email list, and any container, session, workshop, retreat, or membership we offer. It forms part of our Terms and Conditions.

We keep this short and plain on purpose. If anything here is unclear, email support@karlapalomino.com and ask.


Who we are

KP Loba LLC, a Wyoming limited liability company, operating as Karla Palomino.

Contact: support@karlapalomino.com 

What we collect

What you give us directly

  • Your name and email address, when you join our list, submit an application, or write to us

  • The contents of your applications and intake forms, which may include what you are working with, your intentions, and, where relevant to safe participation, health information you choose to share

  • What you share in calls, group spaces, and correspondence during a container

  • Your responses to any marketing consent question

  • Notes, documents, and recordings of sessions and calls

  • For in-person gatherings: emergency contact details, dietary needs, and health or accessibility information relevant to your safe participation

What our payment processor collects

When you pay, Stripe collects your billing details and card information. Stripe processes this directly. We can see the record of your payment, the amount, and the last four digits of your card. We never see or store your full card number.

What we collect automatically

Our website platform and email tools record standard technical information: your IP address, device and browser type, the pages you visit, and whether you open or click our emails. This is ordinary website analytics, not individual monitoring.

Cookies. The Site uses cookies to keep it working, to remember you if you have a member account, and to understand general traffic patterns. You can refuse or delete cookies in your browser settings, though some parts of the Site may not work properly if you do.

Do Not Track. Some browsers can send a Do Not Track signal. There is no common industry standard for how to respond to it, and we do not currently respond to those signals.

Why we collect it

  • To read and assess your application, and to talk with you about whether a container is right for you

  • To deliver what you have enrolled in, including access, materials, calls, and recordings

  • To take payment and keep financial records

  • To communicate with you about your enrollment

  • To keep in-person gatherings safe, where you have shared health or emergency information

  • To send you writing and offers, where you have asked to receive them

  • To meet our legal, tax, and accounting obligations

  • To keep the Site working and secure

  • To keep a record of our work together and to protect against legal claims

Sensitive information

Some of what you may share with us, particularly in applications and before in-person gatherings, is personal and can include health information. We ask for it only where it helps us hold you well or keep you safe. You decide how much to share.

We treat it as confidential, keep access to it limited to those who need it, and do not use it for marketing. Our confidentiality practices, and their limits, are described in our Terms and Conditions.

Who we share it with

We share personal information only with the service providers who help us run the business, and only as far as they need it to do their work:

  • Squarespace, which hosts the Site, our forms, and member accounts

  • Stripe, which processes payments

  • Our email platform, which sends our list and program emails

  • Scheduling, video call, and messaging tools used to run containers

  • Contractors who support administration, scheduling, and technology, each bound to keep what they see confidential

  • Our accountant and, if ever needed, our legal advisors

  • Venues, for in-person gatherings only, where they need names, dietary needs, or accessibility information to host you

We may also disclose information if the law requires it, or if we believe someone is at risk of serious harm.

We do not sell your personal information, and we do not share it with anyone for their own marketing. We have not done so in the past twelve months.

Where your information is held

We and our service providers are based in the United States, so your information is stored and processed there. If you take part in an in-person gathering outside the United States, limited information may be shared with the venue in that country as described above.

How long we keep it

We keep your information for as long as we need it to deliver what you have enrolled in and to stay in touch with you, and after that for as long as our legal, tax, and accounting obligations require, which is generally seven years for financial records. Then we delete it or strip it of anything identifying.

If you unsubscribe from our list, we keep a minimal record of your email address so that we do not add you back by mistake.

Signed waivers, agreements, session notes, and related documents are kept for ten years after your last session, and recordings for [X] years. We keep these to meet our legal and insurance obligations and to protect against legal claims.

What you can ask us to do

At any time, you can ask us to:

  • Tell you what personal information we hold about you

  • Correct anything that is wrong

  • Delete what we hold

  • Send you a copy of what you have given us

  • Stop sending you marketing

Unsubscribing from marketing takes one click, using the link at the bottom of any email we send.

For anything else, email support@karlapalomino.com. We will respond within forty-five days, and we will never treat you differently for asking. If you are enrolled in something, deleting your information may mean we can no longer deliver it, and we will tell you before we act.

Some records, such as waivers, agreements, session notes, and recordings, may be kept for the periods described in "How long we keep it" where the law requires or allows us to retain them.

California residents. California's "Shine the Light" law lets you ask whether a business has shared your personal information with third parties for their direct marketing. We do not, and we will confirm that in writing on request.

If you are in the UK or European Economic Area. You have additional rights, including the right to object to how we use your information, to ask us to restrict its use, and to complain to your local data protection authority. Where we rely on your consent, you can withdraw it at any time. Where we use your information to deliver something you have enrolled in, we rely on the contract between us. Where we send marketing, we rely on your consent. Where we keep records to protect against legal claims, we rely on our legitimate interests.

Security

We use reputable platforms, limit who can access what, require sound password practices from anyone we work with, and revoke access when an engagement ends. No system is completely secure, and we cannot guarantee that information sent over the internet is safe in transit, but we take reasonable care with what you entrust to us.

Children

The Site and our offerings are for adults. They are not directed to anyone under 18, and we do not knowingly collect information from minors. If you believe a minor has given us information, email us and we will delete it.

Changes to this policy

If we change this policy, we will update the effective date at the top and post the new version here. Where a change is significant, we will tell you by email or with a notice on the Site.

Contact

Questions, requests, or concerns about your personal information:

KP Loba LLC support@karlapalomino.com