Privacy Policy
Effective Date: June 16, 2026
Last Updated: June 16, 2026
This Privacy Policy describes how Cartilagerrlivin.ddd ("we," "us," or "our") collects, uses, discloses, and protects personal information when you visit cartilagerrlivin.world (the "Website"). We are located in the United States and designed this notice primarily for US visitors, while also addressing rights of international users where applicable.
1. Business Contact Information
Business name: Cartilagerrlivin.ddd
Address: 543 Atlantic Ave #3, Rochester, NY 14609, United States
Email: reachus@cartilagerrlivin.world
Phone: +1 (585) 270-5166
For privacy-related requests, email us with the subject line "Privacy Request." We will verify your identity before fulfilling certain requests as required by law.
2. Scope and Applicability
This policy applies to personal information collected through the Website, our contact form, cookie preferences, and related communications. It does not apply to third-party websites, services, or offline activities unless we state otherwise. By using the Website, you acknowledge this policy. If you do not agree, please discontinue use.
We comply with applicable US federal and state privacy laws, including but not limited to the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the Children's Online Privacy Protection Act (COPPA), the CAN-SPAM Act, the New York Stop Hacks and Improve Electronic Data Security (SHIELD) Act, and comprehensive state privacy laws such as those in Virginia, Colorado, Connecticut, Utah, Oregon, Texas, Montana, and other states where residents may have specific rights.
3. Categories of Personal Information We Collect
Depending on how you interact with us, we may collect the following categories of personal information:
| Category | Examples | Collected |
|---|---|---|
| Identifiers | Name, email address, IP address | Yes |
| Customer records | Contact details, message content from forms | Yes |
| Internet/network activity | Pages viewed, browser type, referring URL, device data | Yes |
| Geolocation data | Approximate location derived from IP address | Yes |
| Inferences | Preferences inferred from site usage (if analytics enabled) | With consent |
| Sensitive personal information | Health, biometric, SSN, precise geolocation | No (do not submit) |
We do not knowingly collect sensitive personal information as defined under CPRA. Please do not submit medical records, financial account numbers, government ID numbers, or other sensitive data through our contact form.
4. Sources of Personal Information
- Directly from you when you complete our contact form, email us, call us, or set cookie preferences.
- Automatically through cookies, server logs, and similar technologies when you browse the Website.
- Service providers that assist with hosting, analytics (if consented), email delivery, and security.
5. How We Use Personal Information
We use personal information for the following business and commercial purposes:
- Responding to inquiries and providing customer support
- Operating, maintaining, and securing the Website
- Understanding how visitors use our content to improve the site (with consent for non-essential analytics)
- Complying with legal obligations and enforcing our Terms of Use
- Detecting, preventing, and addressing fraud, abuse, or security incidents
- Sending administrative communications related to your requests
- Marketing our services only where you have provided consent or where permitted by law, with opt-out available
We do not use personal information for automated decision-making that produces legal or similarly significant effects.
6. Legal Bases for Processing (International Visitors)
If you are located in the European Economic Area, United Kingdom, or another jurisdiction requiring a legal basis, we process personal data based on: (a) your consent; (b) performance of a contract or steps prior to entering a contract; (c) our legitimate interests in operating and improving the Website, balanced against your rights; or (d) compliance with legal obligations. You may withdraw consent at any time without affecting prior lawful processing.
7. How We Disclose Personal Information
We may disclose personal information to the following categories of recipients:
- Service providers / processors: hosting, email, analytics (if consented), and IT security vendors under contractual obligations to protect data and use it only for specified purposes
- Legal and safety: when required by law, subpoena, court order, or to protect rights, safety, and security
- Business transfers: in connection with a merger, acquisition, or sale of assets, subject to continued protection of your information
We do not sell personal information and we do not share personal information for cross-context behavioral advertising as "sale" or "sharing" is defined under California law. We have not sold personal information in the preceding 12 months.
8. Data Retention
- Contact form submissions: up to 24 months after our last correspondence with you, unless a longer period is required by law or needed to resolve disputes.
- Server and security logs: up to 90 days.
- Cookie consent records: up to 12 months.
- Analytics data (if consented): up to 26 months, aggregated where possible.
- Marketing suppression lists: retained as long as needed to honor opt-out requests.
When retention periods expire, we delete or de-identify information using reasonable measures.
9. Security Measures
We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information, consistent with the New York SHIELD Act and industry standards. Measures include HTTPS encryption, access controls, secure hosting environments, and limited personnel access on a need-to-know basis.
No method of transmission or storage is 100% secure. If you believe your interaction with us is no longer secure, contact us immediately. In the event of a data breach affecting New York residents where notification is required by law, we will provide notice as mandated by applicable statutes.
10. Your Privacy Rights (US Residents)
Depending on your state of residence, you may have some or all of the following rights regarding your personal information:
- Right to know / access: confirm whether we process your information and receive a copy of certain personal information we hold about you.
- Right to correct: request correction of inaccurate personal information.
- Right to delete: request deletion of personal information we collected from you, subject to legal exceptions.
- Right to opt out: opt out of the sale or sharing of personal information (we do not sell or share as defined by applicable law).
- Right to limit use of sensitive personal information: where applicable, limit use of sensitive data to permitted purposes (we do not collect sensitive PI).
- Right to data portability: receive personal information in a portable format where technically feasible.
- Right to non-discrimination: we will not deny services, charge different prices, or provide a different level of service solely because you exercised privacy rights, except as permitted by law.
- Right to appeal: residents of certain states (e.g., Virginia, Colorado) may appeal a denied request within the timeframe specified by state law.
How to submit a request: email reachus@cartilagerrlivin.world with "Privacy Request" in the subject line, or call +1 (585) 270-5166. Include your name, email, state of residence, and the right you wish to exercise. We will verify your identity using information you previously provided before disclosing or deleting data.
Response time: we aim to respond within 45 days as required by CCPA/CPRA and comparable state laws. If more time is needed, we will notify you of the extension and reason.
Authorized agents: California residents may designate an authorized agent to submit requests on their behalf. We may require proof of authorization and direct verification from the consumer.
11. California Residents (CCPA/CPRA Notice)
This section supplements the policy for California residents.
- Categories collected (last 12 months): identifiers, customer records, internet activity, and approximate geolocation, as described in Section 3.
- Business purposes: as described in Section 5.
- Disclosures for business purposes: service providers as described in Section 7.
- Sale/Sharing: we do not sell or share personal information for cross-context behavioral advertising.
- Retention: as described in Section 8.
- Shine the Light (Cal. Civ. Code § 1798.83): California residents may request information about disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.
California residents may submit requests using the methods in Section 10. If you use an authorized agent, we may require a signed permission and verification of your identity.
12. Nevada Residents
Nevada residents may opt out of the sale of certain covered information. We do not sell covered information as defined under Nevada Revised Statutes Chapter 603A. To submit a verified opt-out request, contact us using the information in Section 1.
13. Other State Privacy Laws
Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Oregon (OCPA), Texas (TDPSA), Montana (MCDPA), and other states with comprehensive privacy laws may exercise applicable rights described in Section 10. Contact us to exercise rights or appeal a decision. We will respond in accordance with the law of your state.
14. International Visitors (GDPR)
If you are in the EEA, UK, or Switzerland, you may also have rights to access, rectify, erase, restrict processing, object, data portability, and lodge a complaint with your local supervisory authority. International data transfers, if any, rely on appropriate safeguards such as Standard Contractual Clauses. Contact us to exercise GDPR rights.
15. Children's Privacy (COPPA)
The Website is not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA). If you are a parent or guardian and believe your child under 13 provided personal information to us, contact us immediately and we will delete such information from our records.
16. Email Communications (CAN-SPAM)
If we send commercial email messages, they will comply with the CAN-SPAM Act: accurate header and subject lines, identification of the message as an advertisement where required, inclusion of our physical address, and a clear opt-out mechanism. We will honor opt-out requests within 10 business days. Transactional or administrative messages related to your inquiries may still be sent as necessary.
17. Cookies and Tracking Technologies
We use cookies and similar technologies as described in our Cookie Policy. Non-essential cookies are placed only after you provide consent through our cookie banner. You may withdraw consent by adjusting cookie settings or clearing browser data.
Do Not Track: some browsers transmit "Do Not Track" (DNT) signals. Because there is no uniform industry standard for responding to DNT, we do not currently respond to DNT signals. You may use our cookie controls to manage tracking preferences.
Global Privacy Control (GPC): where required by applicable state law, we honor browser-based opt-out preference signals such as GPC as an opt-out of sale/sharing. Because we do not sell or share personal information, GPC will be treated as a confirmed opt-out preference on file.
18. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised "Last Updated" date. Continued use of the Website after changes constitutes acknowledgment of the updated policy. Where required by law, we will provide additional notice.
19. Contact Us
Questions or concerns about this Privacy Policy or our data practices:
Email: reachus@cartilagerrlivin.world
Phone: +1 (585) 270-5166
Mail: 543 Atlantic Ave #3, Rochester, NY 14609, United States