Privacy Policy

1. Introduction

This Privacy Policy describes how Thrivehipsbones ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at thrivehipsbones.world. We are a United States-based business located in Minnesota and are committed to protecting your privacy in accordance with applicable U.S. federal and state privacy laws.

This policy applies to visitors and users in the United States. By using our Website, you acknowledge that you have read and understood this Privacy Policy.

2. Business Information

Entity Name: Thrivehipsbones

3. Information We Collect

We collect the following categories of personal information:

3.1 Information You Provide Directly

• Identifiers: Name and email address when you submit our contact form.
• Communications: Message content and any other information you choose to include in your inquiry.
• Consent Records: Records of your agreement to this Privacy Policy and your cookie choices stored in your browser.

3.2 Information Collected Automatically

• Device and Browser Data: Browser type, operating system, device type, and language preferences.
• Usage Data: Pages visited, time spent on pages, referring URLs, and interaction with site features.
• Network Data: IP address and general geographic location derived from IP address.
• Cookies and Similar Technologies: Information stored through cookies, local storage, and similar technologies. See our Cookie Policy for details.

3.3 Information We Do Not Collect

We do not knowingly collect sensitive personal information such as Social Security numbers, financial account details, precise geolocation, biometric data, or government-issued identification numbers through this Website.

4. How We Use Your Information

We use personal information for the following business and commercial purposes:

• Responding to your inquiries and providing customer support
• Operating, maintaining, and improving our Website
• Understanding how visitors use our Website and analyzing performance
• Complying with legal obligations and enforcing our Terms of Use
• Protecting against fraud, unauthorized access, and security threats
• Communicating with you about your requests, where you have provided contact information

We do not use personal information for automated decision-making or profiling that produces legal or similarly significant effects.

5. Legal Bases for Processing

Depending on the context, we process personal information based on:

• Your Consent: When you submit a contact form or accept non-essential cookies.
• Legitimate Business Interests: To operate, secure, and improve our Website, where those interests are not overridden by your privacy rights.
• Legal Obligations: When required to comply with applicable law, regulation, or legal process.
• Contractual Necessity: When processing is needed to respond to your requests or provide services you ask for.

6. How We Share Your Information

We do not sell your personal information. We also do not share your personal information for cross-context behavioral advertising (as defined under the California Consumer Privacy Act, as amended by the California Privacy Rights Act).

We may disclose personal information to the following categories of recipients:

• Service Providers: Third parties that perform services on our behalf, such as hosting, analytics, and technical support, under contractual obligations to protect your data and use it only for specified purposes.
• Legal and Safety Purposes: When required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, subject to the acquirer honoring this Privacy Policy.

7. Your Privacy Rights (United States)

Depending on your state of residence, you may have the following rights regarding your personal information:

• Right to Know / Access: Request information about the categories and specific pieces of personal information we have collected about you.
• Right to Delete: Request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information we maintain about you.
• Right to Opt Out of Sale or Sharing: Request that we not sell or share your personal information. As stated above, we do not sell or share personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: Where applicable under state law, request limits on the use of sensitive personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to Appeal: Residents of certain states (including Colorado and Virginia) may appeal a denial of a privacy request.

7.1 California Residents (CCPA / CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the rights listed above. In the preceding 12 months, we have collected the categories of personal information described in Section 3 for the purposes described in Section 4. We have not sold or shared personal information for cross-context behavioral advertising.

California residents may also request information about disclosures of personal information to third parties for their direct marketing purposes under California Civil Code Section 1798.83 ("Shine the Light" law). To make such a request, contact us using the information in Section 14.

7.2 Other State Privacy Laws

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws may exercise rights similar to those described above. We will honor applicable requests in accordance with the law of your state.

7.3 How to Exercise Your Rights

To submit a privacy request, contact us at askuse@thrivehipsbones.world or call +1 763 497 7069. Please include your name, the email address associated with your inquiry (if applicable), your state of residence, and the specific right you wish to exercise. We will verify your identity before processing your request and respond within the timeframe required by applicable law (typically 45 days, with a possible 45-day extension where permitted).

You may designate an authorized agent to submit a request on your behalf. The agent must provide proof of authorization as required by applicable law.

7.4 Global Privacy Control (GPC)

We honor Global Privacy Control (GPC) browser signals as a valid opt-out preference for the sale or sharing of personal information, where required by applicable state law. Because we do not sell or share personal information for cross-context behavioral advertising, GPC signals will be recorded but will not change our current practices.

8. Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this policy:

• Contact Form Submissions: Up to 2 years from the date of submission, unless a longer period is required by law or needed to resolve a dispute.
• Cookie and Consent Data: As described in our Cookie Policy, typically up to 1 year.
• Server Logs and Usage Data: Up to 12 months, unless needed for security investigations.

When retention periods expire, we securely delete or anonymize personal information.

9. Security Measures

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information, including:

• HTTPS encryption for data transmitted between your browser and our servers
• Access controls limiting employee and contractor access to personal information
• Regular review of our data collection and storage practices
• Secure hosting infrastructure with industry-standard protections

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

10. Children's Privacy (COPPA)

Our Website is not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us immediately at askuse@thrivehipsbones.world. If we learn we have collected information from a child under 13 without verified parental consent, we will delete that information promptly.

11. Email Communications (CAN-SPAM)

If we send you email communications in response to your inquiry or with your consent, those messages will comply with the CAN-SPAM Act. You may opt out of marketing emails at any time by following the unsubscribe instructions in the email or by contacting us directly. We will honor opt-out requests within 10 business days. We will not share your email address with third parties for their own marketing purposes without your consent.

12. Third-Party Links and Services

Our Website may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

13. International Visitors and GDPR

If you access our Website from outside the United States, your information may be transferred to and processed in the United States, where privacy laws may differ from those in your country. If you are located in the European Economic Area (EEA) or United Kingdom, you may have additional rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, data portability, and object to processing. To exercise GDPR rights, contact us at askuse@thrivehipsbones.world.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last Updated" date at the top of this page indicates when the policy was most recently revised. Material changes will be posted on this page. We encourage you to review this policy periodically.

15. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or want to submit a complaint, please contact us:

California residents may also contact us to designate an authorized agent or to appeal a denied privacy request as described in Section 7.