Privacy Policy

Geographic scope

The Site is operated from the United States. If you access the Site from another country, your information may be processed in the United States or in other locations where our service providers operate. By using the Site, you understand that cross-border transfer may be required to deliver the services you request.

We do not use forms on this Site to collect health diagnoses or sensitive medical records. Messages should relate to orders, product information, or routine customer service.

United States state privacy rights

Depending on your U.S. state of residence, you may have rights to know what personal information we collect, to request deletion, to correct inaccuracies, to opt out of certain “sales” or “sharing” as defined by local law, and to appeal our response. We do not discriminate against you for exercising these rights. To submit a request, use the contact details in the footer with enough information for us to verify your identity.

California residents may learn more about their rights under the California Consumer Privacy Act (CCPA) as amended by the CPRA by reviewing this policy and contacting us. We describe categories of data collected and purposes in the sections below.

Data controller

Thorxianshex
152 Walton St NW
Atlanta, GA 30303
United States

Contact channels are listed in the Site footer as plain text. For privacy requests, include enough detail to verify your identity proportionately.

Categories of data we process

• Identity and contact data you submit in forms (for example name, email address, optional phone number, message content).
• Technical data such as browser type, device category, and approximate region derived from standard server logs.
• Cookie and similar technologies data as described in the Cookie Policy.

Purposes and lawful bases

• Responding to inquiries and managing pre-contractual steps (GDPR Art. 6(1)(b) where relevant, otherwise Art. 6(1)(f) legitimate interest in communication).
• Operating and securing the Site, including fraud prevention and abuse mitigation (Art. 6(1)(f)).
• Analytics or marketing where you have provided consent through the cookie controls (Art. 6(1)(a)).
• Compliance with legal obligations (Art. 6(1)(c)).

Retention

Form messages are retained only as long as needed to complete the conversation and meet legal, accounting, or dispute requirements, typically up to twenty-four months unless a longer period is required by law. Server logs are rotated on a short cycle compatible with security monitoring.

Sharing and transfers

We use service providers that process data on our instructions (processors). Where data leaves the European Economic Area, we rely on appropriate safeguards such as Standard Contractual Clauses when required.

Security

We apply reasonable technical and organizational measures including access limitations, transport encryption where applicable, and vendor review. No method of transmission is completely secure; we work to reduce risk in proportion to the data involved.

Your rights

Depending on your location, you may have rights to access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You may lodge a complaint with a supervisory authority. We will respond within one month where GDPR applies, subject to extension for complex requests as permitted by law.

Children

The Site is not directed at children under sixteen, and we do not knowingly collect their personal data.

Updates

We may update this policy to reflect legal or operational changes. Material updates will be indicated by revising the effective date above.