Privacy Policy
Sable Springs LLC ("Sable Springs Review", "we", "us", or "our") operates the website at bonesmobility.shop. This Privacy Policy explains what personal data we collect, how we use it, and your rights as a data subject. By using our website, you acknowledge this policy.
1. Data Controller
Sable Springs LLC
1040 Sable Creek Blvd, Suite 200
Austin, TX 78701, United States
Email: privacy@bonesmobility.shop
Phone: +1-800-555-0190
2. Personal Data We Collect
We may collect the following categories of personal data:
- Order data: full name, phone number, delivery address - collected when you place an order via our order form.
- Contact data: name, email address, and message content - collected when you submit our contact form.
- Technical data: IP address, browser type, device type, pages visited, referral URL - collected automatically via server logs and analytics cookies (with your consent).
- Cookie data: preferences stored in your browser relating to consent choices - collected on first visit and updated on your instructions.
We do not intentionally collect sensitive personal data (health, financial, or biometric data).
3. Legal Bases for Processing (GDPR Article 6)
- Article 6(1)(b) - Contract: processing order data to fulfil a sales transaction.
- Article 6(1)(a) - Consent: analytics and advertising cookies, where you have given explicit consent via our cookie banner.
- Article 6(1)(f) - Legitimate interests: server security, fraud prevention, and improving our editorial content.
4. How We Use Your Data
- To process and fulfil orders for CardioX and confirm delivery by telephone.
- To respond to enquiries submitted via our contact form.
- To analyse website traffic and improve user experience (analytics cookies - consent required).
- To serve relevant advertising through Google Ads (advertising cookies - consent required).
- To comply with legal obligations.
5. Cookies and Google Services
We use Google Analytics (_ga, _gid, _ga_*) and Google Ads (_gcl_au) cookies. These are loaded only after you provide explicit consent via our cookie banner. We operate Google Consent Mode v2: all Google advertising and analytics data collection defaults to denied until consent is granted.
Google Ads Remarketing allows us to show advertisements to previous visitors on the Google Display Network. This is activated only with your consent. You can opt out via Google Ad Settings.
Google Analytics collects anonymised traffic data to help us understand how visitors use the site. For more information, see Google's Privacy Policy.
6. Third-Party Sharing
We do not sell your personal data. We may share data with:
- Delivery couriers - to fulfil your order (name, address, phone).
- Google LLC - for analytics and advertising services, subject to Google's privacy terms.
- IT service providers - hosting and infrastructure, under data processing agreements.
7. International Data Transfers
Data transferred to Google LLC servers in the United States is subject to the EU-US Data Privacy Framework and Google's standard contractual clauses. We take appropriate safeguards to ensure adequate protection for any cross-border data transfer.
8. Data Retention
Order data is retained for 7 years for legal and tax compliance purposes. Contact enquiry data is retained for 2 years unless an ongoing relationship exists. Analytics data is retained for 26 months within Google Analytics. Cookie consent logs are retained for 13 months.
9. Your Rights
Under applicable privacy law, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data (subject to legal retention obligations).
- Withdraw consent for data processing based on consent at any time.
- Object to processing based on legitimate interests.
- Request restriction of processing.
- Lodge a complaint with a supervisory authority.
To exercise your rights, contact us at privacy@bonesmobility.shop.
10. Supervisory Authority
For visitors in the United States, the relevant data protection authority is the Federal Trade Commission (FTC). You have the right to file a complaint regarding our data practices at www.ftc.gov. For visitors in EU member states, the relevant national Data Protection Authority (DPA) in your country of residence has jurisdiction. A list of EU DPAs is available at edpb.europa.eu.
11. Security
This website is served over HTTPS. We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the website after any changes constitutes acceptance of the updated policy.
13. Contact
For any privacy-related questions, please contact: privacy@bonesmobility.shop