Privacy Policy & Data Rights Disclosures

These disclosures take effect on 2026-11-12 and govern all interactions across madeinnewmexicos.com, including direct inquiry desk submissions, real-time chat sessions, and advertising traffic delivered from search and social platforms.

Any subsequent operational or regulatory amendments will be registered on this page with an updated timestamp and archived revision notes.

The legal data controller responsible for the processing of personal data gathered via this website is Madeinnewmexicos, trading online at madeinnewmexicos.com.

Our physical and registered business premises are located at:
127 N Plaza, Taos, New Mexico 87571, Taos, New Mexico, United States.

Direct administrative communications may be addressed to Anna Romero, Owner, via telephone at 505-469-2193 or via email at [email protected].

Our web code records strictly delimited operational parameters necessary to quote artisan goods and fulfill regional gift crates. Specifically:

• Inquiry Form Data (baga3ee.php): We record full name, telephone number, email address, physical shipping address or destination city, inquiry category classification, requested item specifications, order notes, and affirmative consent confirmation.
• Automated Telemetry: Alongside form submissions, our server logs the visitor’s Internet Protocol (IP) address, browser user-agent header, referring URL, timestamp when the form was rendered (tm), and timestamp when the form was transmitted.
• Support Chat Desk (wivi3f7.php): We retain the direct customer message transcript, message timestamps, and an anonymous session token stored locally in the visitor’s browser.
• Consent Records: The visitor’s preference is recorded locally under the cookie key site_consent_v2.
• Advertising Identifiers: When a visitor arrives via a commercial campaign, our incoming URL parameters register incoming click identifiers (gclid, msclkid, and fbclid).

We store no user account passwords, banking credentials, or credit card numbers. No digital transactions or binding quotes are executed on this website.

Information collected by Madeinnewmexicos is utilized exclusively for genuine trade operations:

• To review inventory availability with independent New Mexican artisans, weavers, and chile roasters.
• To formulate and deliver accurate written freight quotes and fragility packing schedules.
• To provide direct answers to customer questions submitted through our live chat desk.
• To diagnose server connectivity faults, defend against automated spam submissions, and preserve server stability.
• To measure advertising campaign efficiency and verify incoming ad traffic across search and social channels.

In compliance with applicable global privacy frameworks, every processing operation relies upon an identified lawful foundation:

This site is an active commercial destination for paid digital advertising. We receive direct paid traffic from google ads, microsoft advertising, and Meta Ads.

Each advertising platform attaches a unique query parameter to inbound links to measure marketing performance and verify ad clicks:

• Google Ads: utilizes the gclid (Google Click Identifier) parameter to evaluate campaign conversions.
• Microsoft Advertising: utilizes the msclkid (Microsoft Click Identifier) parameter to track retail search traffic.
• Meta Ads: utilizes the fbclid (Facebook Click Identifier) parameter to measure campaign responsiveness across Meta technologies.

These identifiers are parsed on page arrival. If consent is withheld or denied, these identifiers are not coupled with persistent tracking cookies.

We have deployed Google consent mode v2 across madeinnewmexicos.com. Prior to visitor interaction with our consent banner, the browser executes a default policy denying marketing and analytical storage.

Specifically, the four core parameters are held strictly in a denied posture:

• ad_storage: denied by default.
• ad_user_data: denied by default.
• ad_personalization: denied by default.
• analytics_storage: denied by default.

Only when a visitor deliberately selects “Accept” on our consent bar are these signals updated to granted. If the visitor selects “Decline”, or reopens settings to withdraw authorization, all four parameters are immediately reset to denied.

Personal data collected through madeinnewmexicos.com is transferred only to identified service providers executing critical infrastructure functions:

• Google Ireland Ltd / Google LLC: Operates Google Ads measurement and receives Consent Mode signals when authorized.
• Microsoft Ireland Operations Ltd: Operates Microsoft Advertising conversion measurement. Data processing is governed directly by the Microsoft Privacy Statement available at privacy.microsoft.com.
• Meta Platforms Ireland Ltd: Operates Meta Ads attribution scripts when advertising campaigns run on Meta platforms.
• Hosting Infrastructure Provider: Delivers secure server hosting in the United States and maintains the encrypted relational inquiry database.
• Transactional Mail Routing Provider: Relays inquiry notifications from baga3ee.php directly to our operator inbox at [email protected].

Our primary servers and physical workshop operations reside in Taos, New Mexico, United States. When visitors connect from outside the United States, their inquiries are processed directly within US jurisdiction.

Where data transfers involve personal information of European Union or United Kingdom residents, we rely upon Standard Contractual Clauses (SCCs) adopted by the European Commission, along with the EU-US Data Privacy Framework agreements established by our infrastructure partners.

We enforce fixed retention periods across all data categories rather than indefinite storage:

• Inquiries and Form Notification Copies: Stored securely for exactly 24 months following submission to maintain tax records, custom quote references, and artisan provenance histories.
• Support Chat Desk Transcripts: Retained for exactly 18 months from the date of the conversation to reference packaging questions and custom crate specifications.
• Server Access and Security Logs: Stored for exactly 60 days before automated system purging.
• Consent Choice Cookies (site_consent_v2): Retained in the visitor’s local browser storage for exactly 6 months before re-prompting.
• Data Subject Requests: Acknowledged and completed within 10 days of verified receipt.

Madeinnewmexicos implements rigorous administrative and technological safeguards to shield your data against unauthorized access, loss, or manipulation:

• Enforced Transport Layer Security (TLS 1.3) across all endpoints with HTTP Strict Transport Security (HSTS).
• Parameterized server queries on baga3ee.php to prevent database injection and unauthorized table reads.
• Automated honeypot filtering to prevent spam payload insertion without exposing client-side personal data.
• Strict physical and logical access controls restricted to authorized workshop staff in Taos, NM.

For individuals accessing madeinnewmexicos.com from the European Union, European Economic Area, or United Kingdom, the General Data Protection Regulation (gdpr) guarantees the following enforceable entitlements:

• Right of Access: You may request copies of personal records held by our workshop desk.
• Right to Rectification: You may correct inaccurate addresses, contact numbers, or item specifications.
• Right to Erasure (Right to be Forgotten): You may request deletion of previous inquiries where retention is no longer legally mandated.
• Right to Restriction of Processing: You may limit how we process your data during dispute reviews.
• Right to Data Portability: You may receive your data in a structured, machine-readable format.
• Right to Object: You may object to data processing grounded in legitimate commercial interests.
• Right to Withdraw Consent: You may revoke consent at any time via our footer consent control.

Under US state privacy statutes, including the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act (ccpa/CPRA), as well as laws enacted in Colorado, Connecticut, Virginia, Utah, and Oregon, residents hold specific protections:

• Right to Know and Access: The right to request disclosure of categories and specific pieces of personal data gathered.
• Right to Delete: The right to request deletion of personal information gathered from the consumer.
• Right to Opt Out of Sale or Sharing: We do not sell consumer personal data for monetary payment. Under CCPA definitions, utilizing advertising identifiers may be classified as “sharing”; you may opt out via our consent banner or through Global Privacy Control signals.
• Right to Non-Discrimination: We never discriminate in quotation terms, customer service, or catalog pricing against any visitor exercising privacy rights.

Madeinnewmexicos honors the global privacy control (GPC) specification. If your web browser emits the Sec-GPC header, our consent system treats that transmission as an immediate, affirmative opt-out request from commercial ad tracking and non-essential storage.

When a GPC signal is identified, marketing cookies are suppressed automatically without requiring the visitor to interact with our consent banner.

Our commercial offerings, artisan goods, and food gift crates are intended exclusively for adults and commercial buyers. We do not knowingly solicit, collect, or store personal information from individuals under sixteen (16) years of age.

If a parent or legal guardian discovers that a child has transmitted information to our workshop desk without appropriate consent, contact us immediately at [email protected]. We will delete such records from our database within 24 hours.

If you believe our workshop desk has mishandled your personal data or failed to fulfill a statutory request, you possess the right to file a formal complaint with relevant regulatory oversight authorities:

• United States: You may submit an inquiry to your respective state Attorney General’s Office (in New Mexico: Office of the New Mexico Attorney General, Consumer Protection Division), or to the California Privacy Protection Agency (CPPA) for California residents.
• European Union / UK: You may lodge a complaint with your local Data Protection Authority (DPA) or the Information Commissioner’s Office (ICO) in the United Kingdom.

To exercise any of your rights—including records access, deletion, correction, or portability—submit a formal request to our dedicated desk:

Please include your full name, the email address or telephone number previously provided on an inquiry, and the specific nature of your request. To protect your confidentiality, we verify identity before executing data extractions or deletions.

We may adjust these disclosures periodically to reflect updates in retail legislation, carrier shipping protocols, or platform tracking standards. Any modifications will be posted directly to this URL with a revised effective date.

Significant changes affecting customer contact records will be announced via direct notification to customers holding active open inquiries.

For inquiries regarding this privacy statement, data protection practices, or regional artisan provenance, reach our Taos workshop desk directly:

Madeinnewmexicos is dedicated to ensuring digital accessibility for individuals of all abilities. We design and test our web pages against the World Wide Web Consortium (W3C) Web Content Accessibility Guidelines (WCAG) 2.1 Level AA standards.

• Color Contrast: Text elements maintain contrast ratios of at least 4.5:1 against the ground surface (#DED2BC) and container cards (#D1C3AA).
• Keyboard Navigation: All interactive elements, including disclosure blocks, navigation menus, and form inputs, are fully reachable and operable via standard keyboard tabbing with distinct focus indicators.
• Screen Reader Semantic Structure: We maintain strict document hierarchies with logical heading sequences, ARIA landmark regions, and descriptive alt attributes on all artisan photography.
• Motion Controls: Reduced-motion preferences (prefers-reduced-motion) are detected, disabling parallax transforms and animated canvas loops automatically.

Should you encounter any accessibility barrier when browsing our catalogue or submitting an inquiry, please contact Anna Romero at 505-469-2193 or email [email protected]. We will provide catalog details and process your inquiry directly via phone or accessible electronic mail.