Privacy Policy

Mondus LLC (“we,” “us,” or “our”) respects your privacy and is committed to protecting it through compliance with this Privacy Policy. This Privacy Policy describes how we collect, use, disclose, and safeguard information about visitors to BestBalm (the “Website”) and any related services we provide.

By visiting or using the Website, you acknowledge that you accept the practices described in this Privacy Policy, which is incorporated into our Terms of Use by reference. If you do not agree with our practices, please do not use the Website.

We may update this Privacy Policy from time to time. Your continued use of the Website after we make changes constitutes acceptance of those changes. Please check this page periodically for updates.

1. Scope

This Privacy Policy applies to information we collect:

  • On or through the Website;

  • In email, text messages, and other electronic communications between you and us;

  • From third parties, such as our analytics, advertising, and affiliate partners.

It does not apply to information collected by us offline, by any third party (including any application or content that may link to or be accessible from the Website), or through any other means.

The Website is not intended for children under 16 years of age. We do not knowingly collect personal information from anyone under 16. If you are under 16, please do not provide any information to us. If we learn we have collected personal information from a child under 16 without verified parental consent, we will delete that information.

2. Information We Collect

We collect several types of information from and about users of the Website.

A. Information You Provide Directly

  • Contact and Inquiry Information. If you contact us by email or through a contact form, we collect the information you provide, which may include your name, email address, and the contents of your message.

  • Newsletter or List Sign-Up. If you opt in to a mailing list, we collect the email address and any other information you submit.

  • Submissions. Any comments, reviews, feedback, or other materials you submit are collected and may be displayed publicly at your own risk.

B. Information We Collect Automatically

  • Usage Data. As you navigate the Website, we automatically collect details of your visits, including pages viewed, time spent, referring URLs, click-stream data, and other traffic logs.

  • Device Information. Information about your device and internet connection, including IP address, device type, operating system, browser type and version, language settings, and screen resolution.

  • Approximate Location. We may derive your approximate geographic location (such as city, region, and country) from your IP address.

  • Cookies and Similar Technologies. We and our partners use cookies, web beacons, pixels, tags, and similar technologies to collect information about your interactions with the Website. See Section 4 below.

C. Information from Third Parties

  • Analytics Providers. We use analytics services (such as Google Analytics and similar tools) that collect, monitor, and analyze how visitors use the Website.

  • Advertising and Affiliate Networks. When you click an affiliate link, the destination merchant or affiliate network may set cookies on your device to track the referral and any subsequent purchase. These cookies are governed by the respective third party’s privacy policy, not ours.

  • Traffic Sources. Where traffic is referred to us from advertising platforms or content discovery networks, those platforms may share information about how you arrived at the Website.

3. How We Use Information

We use the information we collect for the following purposes:

  • To operate, maintain, and improve the Website and its content;

  • To respond to your inquiries, comments, or requests;

  • To send you newsletters, updates, or marketing communications you have requested (with the right to opt out at any time);

  • To measure the performance of our content, including reach, engagement, and conversions on affiliate links;

  • To detect, investigate, and prevent fraud, abuse, security incidents, or other unlawful activity;

  • To comply with our legal obligations, enforce our Terms of Use, and protect our rights and the rights of others;

  • For any other purpose with your consent, or as otherwise disclosed at the time of collection.

4. Cookies and Tracking Technologies

Cookies are small text files placed on your device when you visit a website. We use the following categories of cookies and similar technologies:

  • Strictly Necessary Cookies. Required for the Website to function. These cannot be disabled.

  • Analytics and Performance Cookies. Help us understand how visitors use the Website so we can improve it.

  • Advertising and Affiliate Cookies. Used by our partners to measure the performance of advertising campaigns, attribute affiliate referrals, and serve relevant content. Third parties that set these cookies include affiliate networks and the merchants we link to. We do not control these cookies, and they are subject to the respective third party’s privacy policies.

You can manage cookies through your browser settings, by using the cookie consent banner displayed on the Website (where required by law), or by visiting opt-out pages such as the Network Advertising Initiative (https://optout.networkadvertising.org) or the Digital Advertising Alliance (https://optout.aboutads.info). EU and UK users may also visit https://www.youronlinechoices.eu. Disabling cookies may affect the functionality of the Website.

Do Not Track Signals. Some browsers transmit “Do Not Track” signals. There is no industry consensus on how to interpret these signals, and we currently do not respond to them. We do, however, honor Global Privacy Control (GPC) signals where required by law as a valid request to opt out of the sale or sharing of personal information.

5. How We Disclose Information

We do not sell personal information for monetary consideration. We may disclose information in the following circumstances:

  • Service Providers. To vendors, contractors, and service providers who perform services on our behalf (such as hosting, analytics, email delivery, customer support, and security), under contractual obligations of confidentiality.

  • Advertising and Affiliate Partners. We share certain device and usage information with affiliate networks and advertising partners to attribute conversions, measure campaign performance, and deliver relevant content. Under certain U.S. state privacy laws, some of this activity may be considered “sharing” for cross-context behavioral advertising; see Section 7 for your opt-out rights.

  • Legal Compliance. To comply with applicable law, regulation, legal process, or governmental request, including subpoenas, court orders, and law enforcement requests.

  • Protection of Rights. To enforce our Terms of Use, protect our rights, property, or safety, and the rights, property, or safety of our users or others.

  • Business Transfers. In connection with any merger, acquisition, restructuring, financing, or sale of all or part of our assets, information may be transferred to the successor entity.

  • Aggregated or De-Identified Information. We may disclose aggregated or de-identified information that cannot reasonably be used to identify you, without restriction.

6. Data Security

We have implemented reasonable administrative, technical, and physical measures designed to protect personal information from accidental loss and unauthorized access, use, alteration, and disclosure. However, no method of transmission over the internet or electronic storage is fully secure. We cannot guarantee absolute security of information transmitted to or stored by us, and any transmission is at your own risk.

7. U.S. State Privacy Rights

A. California Residents (CCPA / CPRA)

This section supplements our Privacy Policy and applies solely to residents of California. We adopt this notice to comply with the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”).

In the preceding twelve (12) months, we have collected the following categories of personal information:

Category Examples
Identifiers Real name, postal address, unique personal identifier, online identifier, IP address, email address, account name.
Commercial Information Records of products or services considered, purchasing or consuming histories or tendencies inferred from interactions with the Website.
Internet or Similar Network Activity Browsing history, search history, information on interactions with the Website, applications, or advertisements.
Geolocation Data Approximate location derived from IP address.
Inferences Inferences drawn from any of the above to create a profile reflecting preferences and characteristics.

Sources of Personal Information. We collect this information directly from you, automatically through your use of the Website, and from third-party partners as described in Section 2.

Business Purposes for Collection. We use this information for the purposes described in Section 3.

Disclosures. We disclose personal information to the categories of recipients described in Section 5.

Sale and Sharing. We do not “sell” personal information for monetary consideration. However, the use of advertising and affiliate cookies and similar technologies that share device and usage information with third parties may qualify as “sharing” for cross-context behavioral advertising under the CCPA. California residents have the right to opt out of such sharing.

Your California Rights. Subject to certain exceptions, California residents have the right to:

  • Know what personal information we have collected, used, disclosed, or shared about them;

  • Request deletion of personal information collected from them;

  • Request correction of inaccurate personal information;

  • Opt out of the sale or sharing of personal information;

  • Limit the use and disclosure of sensitive personal information;

  • Not receive discriminatory treatment for exercising any of these rights.

To exercise these rights, contact us at [email protected]. We may need to verify your identity before fulfilling your request. You may also designate an authorized agent to make a request on your behalf, subject to verification.

B. Residents of Other U.S. States with Comprehensive Privacy Laws

If you are a resident of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Tennessee, Iowa, Indiana, Delaware, New Jersey, New Hampshire, Maryland, Minnesota, Kentucky, Nebraska, or another U.S. state with a comprehensive consumer privacy law, you may have rights similar to those described above for California residents. These typically include the right to access, delete, correct, and obtain a portable copy of your personal information, and the right to opt out of “targeted advertising,” “sale” of personal information, and certain types of profiling.

To exercise any of these rights, please email [email protected]. If we decline to act on your request, you may appeal that decision by replying to our response.

8. European Economic Area, United Kingdom, and Switzerland (GDPR / UK GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, this section applies to you and supplements the rest of this Privacy Policy.

Controller

Mondus LLC is the controller of personal data processed in connection with the Website. You can contact us at [email protected] or at the postal address listed at the end of this Privacy Policy.

Legal Bases for Processing

We rely on the following legal bases under the GDPR and UK GDPR to process personal data:

  • Consent. Where you have given consent, such as for non-essential cookies or to receive marketing communications. You may withdraw consent at any time.

  • Legitimate Interests. To operate, secure, and improve the Website, to measure content performance and affiliate conversions, to prevent fraud and abuse, and to enforce our terms — provided these interests are not overridden by your rights.

  • Legal Obligation. To comply with applicable laws and respond to lawful requests from public authorities.

  • Contract. To take steps at your request prior to entering into a contract, or to perform a contract with you (for example, to respond to your inquiry).

Your GDPR / UK GDPR Rights

Subject to applicable law, you have the right to:

  • Access the personal data we hold about you;

  • Rectify inaccurate or incomplete personal data;

  • Erase your personal data (“right to be forgotten”);

  • Restrict our processing of your personal data;

  • Object to our processing of your personal data, including for direct marketing or where based on legitimate interests;

  • Receive your personal data in a portable, machine-readable format;

  • Withdraw consent at any time, without affecting the lawfulness of processing based on consent before withdrawal;

  • Lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner’s Office (ICO) at https://ico.org.uk. In the EEA, you can find your supervisory authority at https://edpb.europa.eu.

To exercise any of these rights, contact us at [email protected].

International Data Transfers

The Website is hosted and operated in the United States, and our service providers may be located in the United States or other countries. When we transfer personal data from the EEA, the UK, or Switzerland to a country that has not been deemed to provide an adequate level of data protection, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum, where applicable), to protect your personal data.

9. Data Retention

We retain personal information only for as long as is necessary to fulfill the purposes for which it was collected, including to comply with legal, accounting, or reporting obligations, to resolve disputes, and to enforce our agreements. When personal information is no longer needed, we will delete or anonymize it.

10. Third-Party Websites

The Website contains links to third-party websites operated by merchants, affiliate networks, advertisers, and other parties. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party website you visit.

11. Marketing Communications

If you have opted in to receive marketing communications from us, you can opt out at any time by clicking the “unsubscribe” link in any marketing email or by contacting us at the email address below. Even if you opt out of marketing communications, we may still send you transactional or administrative messages, such as responses to inquiries.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date at the top of this page and, where required by law, provide additional notice. Your continued use of the Website after any change becomes effective constitutes acceptance of the revised Privacy Policy.

13. Contact Us

If you have any questions, comments, or concerns about this Privacy Policy or our privacy practices, please contact us at:

Mondus LLC

###company_address###

Email: [email protected]