Privacy Policy
Controller
The data controller responsible for processing personal data in connection with this website and related services is:
Quunthalnndhelia
Sysslomansgatan 17
753 14 Uppsala
Sweden
Contact identifiers for privacy requests: info@quunthalnndhelia.world, contact@quunthalnndhelia.world, support@quunthalnndhelia.world, help@quunthalnndhelia.world (please use the subject line “GDPR request”).
Geographic focus and marketing
Our team is based in Sweden and we primarily serve enquiries from adults in the European Economic Area, Switzerland, and the United Kingdom, subject to product and shipping rules that apply in each case. Personal data processed for newsletters, remarketing, or similar activities is handled under the legal bases and opt-in controls described in this policy and in the Cookie Policy. Marketing about Menvix is limited to lawful presentation of a food supplement and does not attribute disease-related effects to the product.
Scope and legal bases
This policy describes processing of personal data relating to visitors and customers who interact with the website, forms, and related communication. Processing is based on GDPR Articles 6(1)(a) consent where you opt in, 6(1)(b) for steps prior to a contract, 6(1)(c) for legal obligations, and 6(1)(f) legitimate interests such as fraud prevention and service improvement, balanced against your rights.
Categories of data
Depending on your interaction, we may process identification and contact data (name, email, telephone if supplied), message content, technical data (IP address, browser type, device identifiers), usage data (pages viewed, approximate region from IP), and cookie-related data as described in the Cookie Policy.
Purposes and retention
| Purpose | Typical retention |
|---|---|
| Responding to form submissions and customer enquiries | Up to twenty-four months after the last message unless a longer period is required for disputes or legal claims |
| Order-related communication and fulfilment preparation | For the duration of the contractual relationship plus statutory limitation periods |
| Security logs and abuse prevention | Up to twelve rolling months unless extended for investigations |
| Compliance with accounting or consumer laws where applicable | As required by Swedish or EU law |
Recipients and processors
Data may be shared with hosting providers, email delivery services, and analytics partners where you consent to optional cookies. Processors are bound by data processing agreements and instructions consistent with GDPR Chapter IV.
International transfers
Where data leaves the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions under GDPR Chapter V, together with supplementary measures when required.
Security measures
We apply access controls, encryption in transit for connections secured with HTTPS, separation of environments where feasible, and staff awareness regarding confidentiality. No method of transmission is completely risk-free; we review measures regularly.
Your rights
Under GDPR you may request access, rectification, erasure, restriction of processing, data portability (where applicable), and objection to processing based on legitimate interests. You may withdraw consent at any time where processing is consent-based, without affecting prior lawful processing. You may lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or another EU supervisory authority.
Automated decision-making
We do not use solely automated decision-making, including profiling, that produces legal or similarly significant effects for you in connection with this website.
Children
The site is not directed at children under sixteen. We do not knowingly collect children’s data without parental authority where required.
Changes
We may update this policy to reflect legal or operational changes. The “Last updated” date at the top reflects the latest revision.