PRIVACY POLICY
Welcome to https://mensalia.com (the “Site”). This Privacy Policy explains how TalesCastle LLC, operating under the trade name Mensalia (“Mensalia,” “we,” “us”), collects, uses, and protects personal data when you visit the Site or contact us.

1. Data Controller

Controller: TalesCastle LLC (d/b/a “Mensalia”)
Contact: support@talescastle.com
Location: United States (New Mexico)

2. Who This Policy Applies To

This Policy applies to:

• Site visitors (browsing and analytics).
• Business/professional contacts who write to us or request information (forms, email, WhatsApp, or other channels).
  The Site is intended for businesses and professionals (B2B).

3. Personal Data We Collect

Depending on how you interact with the Site, we may collect:

A) Data you provide

• Identification and contact: first and last name, email, phone number, company, job title.
• Request content: message, needs, information about your business (e.g., ecommerce, tools you use, goals).
• Information you choose to share via WhatsApp Business, email, forms, or during the process of scheduling a meeting.

B) Browsing data (automatically collected)

• IP address, device identifiers, browser type and version, pages visited, navigation events, date/time, and campaign parameters (when applicable).
• This data may be collected through cookies/similar technologies (see Section 6).

4. How We Use Your Data and Legal Basis

We process your data for the following purposes:

• Responding to requests and communications (contact inquiries, questions, demos, B2B commercial information).
  Legal basis: legitimate interest in responding to requests and managing B2B relationships, and/or pre-contractual steps.
• Scheduling and managing meetings when you book a call or appointment.
  Legal basis: pre-contractual steps and legitimate interest.
• Improving the Site, analytics, and measurement (Site performance, statistics, campaigns).
  Legal basis: consent for cookies/measurement where required (typically via the cookie banner) and/or legitimate interest in security and operation.
• Security and abuse prevention (technical monitoring, fraud prevention, Site protection).
  Legal basis: legitimate interest.
• B2B marketing communications (if applicable): sending service information or following up on your request.
  Legal basis: legitimate interest in B2B communications and/or consent where required. You may opt out at any time.

5. We Do Not Sell Your Data

Mensalia does not sell personal data.

6. Cookies and Similar Technologies

We use cookies and similar technologies for:

• Site functionality and security (e.g., session management, protection).
• Analytics (e.g., Google Analytics).
• Advertising measurement and remarketing (e.g., Meta Pixel), where you have accepted it.

You can configure your browser to reject cookies and, where applicable, manage your preferences via the Site’s cookie banner.

Recommendation: create a separate Cookie Policy with a cookie table (name, provider, purpose, duration) and link it here. If you want, I can draft it as well.

7. Tools and Providers That May Process Data (Processors / Third Parties)

To operate the Site and manage requests, we may use third-party tools. These tools may process personal data as processors on our behalf or as independent third parties under their own policies, including:

• WordPress (Site content management).
• Google Analytics (analytics and usage measurement).
• Meta Pixel (Meta Platforms) (campaign measurement, attribution, and/or remarketing, if enabled and you consent).
• Tally (forms for lead capture and collecting information you submit).
• Calendly (meeting scheduling and availability management; processes the data needed to book).
• WhatsApp Business (WhatsApp/Meta) (messaging channel if you choose to contact us there; processing is also subject to WhatsApp/Meta terms and policies).
• Shopify (we may use Shopify as part of our operations or for demos/related services; if you provide data linked to your Shopify store in the context of a request, it will be processed to respond to your request and evaluate the service).

We may also use technical providers such as hosting, email, and/or security tools to keep the Site running.

8. Who We Share Your Data With

We do not sell your data.
We only share data with providers needed to operate the Site and handle your request, or where required by law.

We may share personal data with:

• Providers listed in the previous section, to the extent necessary to deliver the Site and respond to your request.
• Authorities or third parties when required to comply with legal obligations or valid requests.

9. International Data Transfers

Mensalia is located in the United States (New Mexico), and some providers (e.g., Google, Meta, Calendly, WhatsApp, Tally, Shopify) may process data from the U.S. or other countries.

Where applicable (e.g., under GDPR), we will implement appropriate safeguards for international transfers (such as Standard Contractual Clauses or other recognized mechanisms), along with reasonable technical and organizational measures.

10. Data Retention

We retain data for as long as necessary for the purposes described:

• Inquiries and leads: while we handle the request and for a reasonable follow-up period, or until you request deletion or object (unless a legal obligation requires longer).
• Meetings (Calendly): as needed to manage the appointment and related communications.
• Analytics/measurement: according to cookie settings and the provider’s retention periods.
• Legal obligations: where applicable, for the periods required by law.

11. Your Rights (GDPR and Applicable Law)

If data protection law applies to you (e.g., GDPR), you may exercise:
access, rectification, erasure, restriction, objection, portability, withdraw consent, and lodge a complaint with the competent supervisory authority.

To exercise your rights, contact us at support@talescastle.com and specify the right you wish to exercise and the information needed to identify you. We may request reasonable identity verification.

12. Security

We apply reasonable technical and organizational measures to protect data (access controls, security practices, protections in transit/storage where applicable). However, no transmission over the Internet is 100% secure.

13. Third-Party Data You Provide

If you provide us with data about third parties (e.g., team members), you represent that you have a lawful basis to do so and that you have informed those individuals where required.

14. Children’s Privacy

The Site is not directed to individuals under 18, and we do not knowingly collect data from minors. If you believe a minor has provided us data, contact us so we can delete it.

15. Links to Third-Party Sites

The Site may contain links to third-party sites. We are not responsible for their privacy practices. We recommend reviewing their policies.

16. Changes to This Policy

We may update this Policy from time to time. We will publish the updated version on the Site and indicate the “Last updated” date.

17. Contact

If you have questions about this Privacy Policy, contact us at support@talescastle.com.

Last updated: February 13, 2026