Privacy Policy
Last updated:
This Privacy Policy explains how Thunmareoz (“we”, “us”) processes personal data when you use the website at thunmareoz.world (the “Site”), including when you submit forms or contact us about the Cavelo food supplement.
Geographic scope and audience
The Site is operated from the United States. The controller’s registered contact address is in Washington, DC. Visitors from the European Economic Area, United Kingdom, and other regions may use the Site; the rights described in this Policy apply where applicable law grants them.
Online advertising and platform rules
We may use third-party advertising or analytics platforms (for example Google Ads) subject to their terms and this Policy. Where we promote food supplements, we seek to follow platform policies for dietary supplements, including limits on misleading claims, unproven guarantees, and inappropriate use of sensitive health topics in ad content.
Landing pages are intended to describe the product factually as a food supplement and to avoid suggesting medical outcomes. This does not waive any obligation you have to comply with platform policies when running your own campaigns.
Data controller and contact
Controller: Thunmareoz
Address: 1211 Connecticut Ave NW, Washington, DC 20036, United States
Email (plain text): info@thunmareoz.world, contact@thunmareoz.world, support@thunmareoz.world, help@thunmareoz.world
For privacy requests, include enough detail to identify your inquiry and allow us to verify legitimacy where required by law.
Categories of personal data
Depending on how you use the Site, we may process:
- Identity and contact data (for example name, email address, phone number if you provide it).
- Communication content (messages you send through forms or email).
- Technical data (such as IP address, browser type, device identifiers, and timestamps) collected through cookies and similar technologies where applicable.
- Preference data relating to cookie choices stored locally in your browser.
Purposes and legal bases (GDPR Article 6)
| Purpose | Legal basis |
|---|---|
| Responding to inquiries and processing orders or requests you initiate | Performance of a contract or steps prior to a contract; legitimate interests in customer communication |
| Operating and securing the Site, fraud prevention, and server logs | Legitimate interests; legal obligations where applicable |
| Optional analytics or marketing where you consent through the cookie banner | Consent (withdrawable at any time) |
| Compliance with accounting, tax, or regulatory requests | Legal obligation |
Retention
We keep personal data only as long as needed for the purposes above, unless a longer period is required by law. Illustrative periods:
- Contact and order-related messages: typically up to 24–36 months after the last interaction unless a dispute or legal hold requires longer storage.
- Server logs: a shorter rolling period as configured on hosting infrastructure.
- Records required for tax or commercial law: as mandated by applicable rules in the United States and, where relevant, the EU or UK.
Recipients and processors
We may share data with service providers that host the Site, deliver email, or provide analytics when you enable such categories in cookie settings. Processors are bound by instructions and security expectations consistent with this Policy.
International transfers
If data is transferred outside your country, we rely on appropriate safeguards where required (for example standard contractual clauses) and document decisions as applicable law demands.
Your rights
Where the GDPR applies, you may have the right to access, rectify, erase, restrict processing, data portability, and object to processing based on legitimate interests. You may withdraw consent for consent-based processing at any time. You may lodge a complaint with a supervisory authority in your country of residence.
California residents may have additional rights under the CCPA/CPRA regarding disclosure, deletion, and opt-out of certain sharing. Submit requests using the contact details above.
Security measures
We apply administrative, technical, and organizational measures appropriate to the risk, including access limitations and encryption where suitable. No method of transmission over the Internet is completely secure.
Children
The Site is not directed to children, and we do not knowingly collect personal data from children without parental consent where such consent is required.
Changes
We may update this Policy to reflect legal or operational changes. The “Last updated” date at the top will change when revisions are published.