1. Introduction and Data Controller
Mobilitydetox, operating at 889 Broadway, New York, NY 10003, USA, acts as the data controller responsible for your personal information collected through our website and consultation services. We are committed to protecting your privacy and processing data in accordance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) where applicable, and other relevant international privacy legislation.
By accessing our website or submitting information through our contact form, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please refrain from using our services.
For privacy-related inquiries, contact us at service@mobilitydetox.world or by phone at +1 212-420-9020.
2. Personal Data We Collect
We collect personal data only when necessary for the purposes outlined in this policy. The categories of data we may collect include:
2.1 Information You Provide Directly
- Full name when submitting our contact form or scheduling a consultation
- Email address for correspondence and service-related communication
- Message content and inquiry details submitted through contact forms
- Phone number if voluntarily provided during consultation scheduling
- GDPR consent records including timestamp and consent version
- Payment information processed through third-party payment providers during service purchases
2.2 Information Collected Automatically
- IP address and approximate geographic location derived from IP
- Browser type, version, and operating system
- Device type and screen resolution
- Pages visited, time spent on pages, and navigation paths
- Referring website or search engine
- Cookie identifiers and similar tracking technologies as described in our Cookie Policy
2.3 Information from Third Parties
We may receive limited information from analytics providers and payment processors strictly necessary to deliver our services. We do not purchase personal data from data brokers or marketing list vendors.
3. Purpose and Legal Basis for Processing
We process your personal data for specific, legitimate purposes. The legal bases under GDPR include consent, contract performance, legitimate interests, and legal obligation.
3.1 Responding to Inquiries
When you submit a contact form, we process your name, email, and message to respond to your request. Legal basis: consent (GDPR Article 6(1)(a)) and pre-contractual measures (Article 6(1)(b)).
3.2 Providing Consultation Services
Data collected during consultation scheduling and delivery is processed to fulfill our service agreement with you. Legal basis: contract performance (Article 6(1)(b)).
3.3 Website Analytics and Improvement
With your consent, we use analytics tools to understand how visitors interact with our website, enabling us to improve content and user experience. Legal basis: consent (Article 6(1)(a)).
3.4 Legal Compliance
We may process data to comply with applicable laws, respond to lawful requests from authorities, or establish, exercise, or defend legal claims. Legal basis: legal obligation (Article 6(1)(c)) and legitimate interests (Article 6(1)(f)).
3.5 Marketing Communications
We send promotional emails only with your explicit opt-in consent. You may withdraw consent at any time without affecting the lawfulness of prior processing. Legal basis: consent (Article 6(1)(a)).
4. Data Retention Periods
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law.
- Contact form submissions: Up to twelve months from the date of submission, unless an ongoing service relationship exists
- Consultation records: Up to three years following the last session, to support follow-up services and maintain service continuity
- Payment records: Seven years as required by tax and accounting regulations
- Cookie consent preferences: Twelve months, after which consent is re-requested
- Analytics data: Twenty-six months in aggregated form, then permanently deleted
- Marketing consent records: Duration of consent plus three years for compliance documentation
Upon expiration of the retention period, data is securely deleted or anonymized so it can no longer be associated with an identifiable individual.
5. Data Sharing and Third-Party Processors
We do not sell, rent, or trade your personal data to third parties for their marketing purposes. We share data only in the following circumstances:
5.1 Service Providers
We engage trusted third-party processors who assist with website hosting, email delivery, payment processing, and analytics. These providers process data solely on our instructions and are bound by data processing agreements requiring GDPR-compliant safeguards.
5.2 Legal Requirements
We may disclose personal data when required by law, court order, or governmental regulation, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
5.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity. We will notify affected users before personal data becomes subject to a different privacy policy.
6. Security Measures
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- HTTPS encryption for all data transmitted between your browser and our servers
- Access controls limiting data access to authorized personnel on a need-to-know basis
- Regular security assessments of our website infrastructure and third-party providers
- Secure storage of physical and digital records containing personal data
- Employee training on data protection principles and incident response procedures
- Incident response protocols for detecting, reporting, and investigating data breaches within seventy-two hours as required by GDPR
While we strive to protect your personal data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security but commit to promptly notifying affected individuals and relevant authorities in the event of a breach posing risk to your rights and freedoms.
7. Your Rights Under GDPR and Applicable Law
Depending on your location, you may have the following rights regarding your personal data:
- Right of access: Request a copy of the personal data we hold about you
- Right to rectification: Request correction of inaccurate or incomplete data
- Right to erasure: Request deletion of your data when no longer necessary or when you withdraw consent
- Right to restrict processing: Request limitation of processing under certain circumstances
- Right to data portability: Receive your data in a structured, machine-readable format
- Right to object: Object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent: Withdraw consent at any time without affecting prior lawful processing
- Right to lodge a complaint: File a complaint with your local data protection authority
To exercise any of these rights, contact us at service@mobilitydetox.world. We will respond within thirty days. We may request identity verification before processing your request to prevent unauthorized access to personal data.
California residents may additionally request information about data categories shared with third parties and opt out of the sale of personal information. We do not sell personal information as defined by the CCPA.
8. International Data Transfers
Mobilitydetox is based in the United States. If you access our website from the European Economic Area, United Kingdom, or other regions with data protection laws, your data may be transferred to and processed in the United States.
Where transfers occur to countries without an adequacy decision from the European Commission, we rely on Standard Contractual Clauses approved by the European Commission, supplemented by additional safeguards where necessary, to ensure your data receives an equivalent level of protection.
9. Children's Privacy
Our website and services are not directed at individuals under the age of sixteen. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly. Parents or guardians who believe their child has provided personal data should contact us immediately.
10. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. The date at the top of this page indicates the most recent revision. Material changes will be communicated through a prominent notice on our website or via email to registered users. Continued use of our services after changes constitutes acceptance of the updated policy.
11. Contact Information
For questions, concerns, or requests related to this Privacy Policy or your personal data, contact:
Mobilitydetox
889 Broadway, New York, NY 10003, USA
Email: service@mobilitydetox.world
Phone: +1 212-420-9020