Privacy Policy

1. Information we collect

Information you provide

• Email address and optional marketing-consent choices when you join a waitlist.
• A friend’s email address when you submit a referral. A referral does not subscribe that person to marketing.
• Contact and purchase information supplied during checkout, such as name, email, phone number if provided, payment status, and coarse billing geography.
• Messages and other information you send when contacting us.

Information collected automatically

• Basic device, browser, request, security, and server-log information needed to deliver and protect the site.
• Your cookie choice and a first-party landing-page variant assignment.
• Only after you accept optional analytics: page visits, interactions, approximate location, device information, referring source, and conversion events.

Payment information

Stripe processes payment credentials. HIMBOS does not store full card numbers, CVCs, wallet tokens, or payment cryptograms. We retain minimized payment facts needed to confirm and support a purchase, which may include Stripe identifiers, amount, currency, payment status, card brand and last four digits, wallet type, and billing country or postal code.

2. How and why we use information

• Provide the site, waitlist, referrals, checkout, membership badge, confirmations, and support.
• Process and reconcile payments, prevent fraud, secure our systems, and keep reliable transaction records.
• Send transactional messages you request or that are necessary for your purchase or membership.
• Send launch, product, or promotional email only when you separately opt in, with a way to unsubscribe.
• Measure referrals and, with consent, understand site performance and compare landing-page versions.
• Comply with law, enforce our terms, and establish or defend legal claims.

Depending on where you live, our legal bases may include performing a contract, your consent, compliance with legal obligations, and our legitimate interests in operating, securing, and improving the service. You may withdraw consent at any time without affecting earlier lawful processing.

3. Providers and disclosures

We use service providers acting on our instructions, including:

• Vercel for website hosting and delivery.
• Supabase for database and backend services.
• Stripe for checkout, payments, and fraud prevention.
• Resend for transactional email and, only after required safeguards are active, consented marketing email.
• Google Tag Manager and Google Analytics for consented website analytics.
• Microsoft Clarity for consented experience analytics, session recordings, and heatmaps.

We may also disclose information to professional advisers, authorities when legally required, or a successor in a merger, financing, reorganization, or sale. The current website implementation is not configured to sell personal information or use it for cross-context behavioral advertising. Counsel should confirm broader company practices.

4. Cookies and analytics controls

Required storage supports security, checkout, your consent choice, and a consistent page version. Optional analytics are blocked until you accept them. You can reject optional analytics as easily as accepting, and can revisit your choice through “Cookie settings” in the footer. See our Cookie Notice for provider, purpose, and retention details.

Where legally required and technically supported, we also treat a recognized browser opt-out preference such as Global Privacy Control as an instruction not to use optional analytics.

5. Retention

We keep personal information only as long as reasonably necessary for the purpose it was collected, including providing membership benefits, maintaining transaction and consent records, resolving disputes, preventing abuse, and satisfying accounting or legal duties. Retention varies by record and applicable law. We delete or de-identify information when it is no longer needed. Cookie durations are listed in the Cookie Notice.

6. International transfers and security

Our providers may process information in the United States and other countries. Where required, we rely on approved contractual or legal transfer safeguards. We use reasonable administrative, technical, and organizational measures, but no internet system is completely secure.

7. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, or receive a copy of your information; object to certain processing; withdraw consent; appeal a denied request; or complain to a regulator. You can unsubscribe from marketing using the link in the message. Transactional messages necessary to service a purchase may still be sent.

To make a privacy request, email hi@himbos.com. We may need to verify your identity. Authorized agents may submit requests where applicable. We will not discriminate against you for exercising a privacy right.

8. Children

HIMBOS is not directed to children, and we do not knowingly collect personal information from children where prohibited by law. Contact us if you believe a child provided information improperly.

9. Changes and contact

We may update this policy as our services or legal requirements change. We will post the revised date and provide additional notice when required. Questions or requests may be sent to hi@himbos.com or mailed to:
Himbos Inc.
P.O. Box 190032
Miami Beach, FL 33119