1. Identity of the Controller
Business name: Cartilagethnatur
Address: 108 Birch Street, Redwood City, CA 94062, USA
Phone: +1 650-599-3456
Email: contactuse@cartilagethnatur.world
Website: https://cartilagethnatur.world
2. What Data We Collect
We collect only the data you voluntarily provide and data generated automatically by your browser:
- Contact form data: name, email address, and the content of your message, plus your consent record.
- Technical data: IP address (anonymised where possible), browser type, operating system, referring URL, pages visited, and time of visit. This data is collected through server logs and, if you consent, analytics cookies.
- Cookie preference data: a record of your cookie consent choices, stored in your browser's local storage.
We do not collect sensitive personal data (health information, financial data, etc.) and we do not use automated profiling or decision-making.
3. Legal Bases for Processing
- Contractual necessity / pre-contractual steps (Art. 6(1)(b) GDPR): responding to your contact form submission.
- Legitimate interests (Art. 6(1)(f) GDPR): server logs for security and technical maintenance purposes.
- Consent (Art. 6(1)(a) GDPR): analytics and marketing cookies, where you have opted in.
- Legal obligation (Art. 6(1)(c) GDPR): retaining records where required by applicable law.
Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
4. How We Use Your Data
- To respond to enquiries sent via the contact form.
- To maintain the security and performance of the website.
- To understand aggregate, anonymised patterns of site usage (analytics, only with consent).
We do not use your data for unsolicited commercial communications, sale of data, or any purpose incompatible with those stated above.
5. Sharing and Transfers
We do not sell, rent, or trade your personal data. Data may be shared with:
- Hosting and infrastructure providers acting as data processors under appropriate data processing agreements.
- Analytics providers (only if you have consented to analytics cookies), under standard contractual clauses where transfers outside the EEA occur.
- Law enforcement or regulatory authorities if required by law.
Any third-party processor is bound by contractual obligations to process data only on our instruction and to maintain appropriate security measures.
6. Retention Periods
- Contact form data: retained for up to 24 months after the enquiry is resolved, then deleted.
- Server logs: retained for up to 90 days for security purposes.
- Analytics data: retained in aggregated, anonymised form for up to 26 months.
- Cookie consent records: stored in browser local storage and expire after 12 months.
7. Your Rights
Under GDPR and applicable privacy law you have the right to:
- Access the personal data we hold about you (Art. 15 GDPR).
- Rectification of inaccurate data (Art. 16 GDPR).
- Erasure ("right to be forgotten") where applicable (Art. 17 GDPR).
- Restriction of processing in certain circumstances (Art. 18 GDPR).
- Data portability where processing is based on consent or contract (Art. 20 GDPR).
- Object to processing based on legitimate interests (Art. 21 GDPR).
- Withdraw consent at any time (Art. 7(3) GDPR).
- Lodge a complaint with a supervisory authority, including the California Privacy Protection Agency (CPPA) or a relevant EU data protection authority.
To exercise any right, contact us at contactuse@cartilagethnatur.world. We will respond within 30 days.
8. Security
We implement industry-standard technical and organisational measures to protect your data: HTTPS encryption, access controls, regular security reviews, and minimal data collection. No method of transmission or storage is completely secure, but we take all reasonable steps to protect your information.
9. Cookies
We use cookies and similar technologies. For full details, please read our Cookie Policy.
10. California Privacy Rights (CCPA / CPRA)
California residents have additional rights under the California Consumer Privacy Act and California Privacy Rights Act, including the right to know, delete, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at the details above.
11. Children's Privacy
This website is not directed at children under 16 years of age and we do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.
12. Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the site after changes constitutes acceptance of the updated policy.
13. Contact
For any privacy-related questions or to exercise your rights:
Email: contactuse@cartilagethnatur.world
Post: 108 Birch Street, Redwood City, CA 94062, USA