Privacy

Privacy & data protection

This page explains how Morning Movement Online operated by Jyxallandhar gathers and respects personal data across the United States and Canada, whenever visitors arrive from the European Economic Area, and in other regions where applicable laws supplement these disclosures.

Last reviewed:

1. Data controller & contacts

Controller: Jyxallandhar
Postal address: 1230 Pleasant St, Barre, MA 01005, United States
Email: welcome@jyxallandhar.world
Phone: +1 978 355 4378

For GDPR- or Canadian-privacy-related inquiries, including requests to exercise your rights, send an email using the address above with “Privacy Request” as the subject so we route it quickly.

2. Categories of personal data

  • Identifiers you send through the contact form (name and email).
  • Message content typed into the textarea field.
  • Technical connection data transmitted by browsers (approximate timestamps, truncated IP).
  • Optional consent choices stored locally for cookies inside your browser via localStorage.

3. Purposes & legal bases

We process contact inquiries to correspond with you. The legal basis under GDPR Article 6(1)(b) is taking steps prior to entering a contract at your request, supplemented by GDPR Article 6(1)(a) consent when you submit the GDPR checkbox.

Operational security logs rely on GDPR Article 6(1)(f) legitimate interests in keeping the domain stable. Cookie analytics or marketing activates only after consent pursuant to GDPR Article 6(1)(a) via the cookie banner preferences.

For visitors to whom Canadian law applies (including the Personal Information Protection and Electronic Documents Act, PIPEDA, or substantially similar provincial private-sector statutes), we identify these purposes openly, rely on meaningful consent except where exemptions apply, collect and use personal information only for purposes a reasonable person would consider appropriate under the circumstances, and limit disclosure to what is necessary. Optional analytics and marketing technologies are switched off unless you affirmatively allow them in the cookie interface.

4. Retention & sharing

Routine email threads persist only as long as needed to finalize an answer unless law requires longer storage. Servers may create standard backups erased on rolling schedules. Hosting or mail providers in the United States might process transmissions under contract clauses that emphasize confidentiality.

Automations exclude selling personal information for unrelated profiling. Whenever we onboard new processors, contracts include data protection wording compatible with GDPR expectations.

Personal information may be stored or processed in the United States and potentially other countries where our service providers operate. In those cases we use contractual, technical, and organizational measures appropriate to the sensitivity of the information to provide a comparable level of protection where required by law.

5. Your rights & safeguards

Depending on your region, you may request access, rectification, erasure, restriction, portability, objection, or lodge a supervisory authority complaint (for EU visitors). MFA-hardened staff mailboxes, HTTPS transport, least-privilege credential policies, and routine review of vendor agreements support your data.

If you are in Canada, you may request access to the personal information we hold about you and ask that inaccurate or incomplete information be corrected. You may also withdraw consent where processing is consent-based, subject to legal or contractual restrictions and reasonable notice. If you believe we have not handled your information appropriately, you may file a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) after contacting us using the coordinates in section 1. Provincial privacy commissioners may accept complaints in certain provinces depending on circumstance and jurisdiction.

If you are in Québec, Québec’s privacy legislation (Law 25 and related frameworks) may provide additional rights regarding consent, portability, automation, de-indexing requests, data governance, assessments, and breaches. Québec residents may make requests via the contact details in section 1 and consult the Commission d’accès à l’information du Québec (cai.gouv.qc.ca) regarding applicable rules.

Commercial electronic messages: we do not add you to a marketing list solely because you used the contact form. If we ever send commercial electronic messages to addresses in Canada, we obtain consent aligned with Canada’s anti-spam legislation (CASL) where consent is required, identify ourselves clearly in each message, and include a functioning unsubscribe mechanism. Typical administrative replies answering your inquiries are not treated as unsolicited commercial messages.

Californians may request disclosure or deletion absent statutory exceptions after identity verification. Children’s data is neither sought nor knowingly collected beyond incidental technical logs; guardians may contact us to remove mistakenly submitted material.

6. United States state privacy (CCPA/CPRA & similar)

If you reside in the United States, certain state laws (including the California Consumer Privacy Act as amended by the California Privacy Rights Act, together “CCPA/CPRA”) may grant you specific rights regarding personal information depending on how our activities qualify under those laws. This section supplements the rest of this policy and uses CCPA/CPRA terms such as “personal information,” “business,” “sell,” “share,” and “sensitive personal information” as defined under California law where applicable.

Scope. We operate Morning Movement Online from the United States. We do not knowingly collect, sell, or share personal information of consumers we actually know are younger than 16 for behavioral advertising, and we do not direct our services to children under 13. If you believe a child has submitted personal information, contact us using section 1 so we can delete it where appropriate.

Categories collected (illustrative). In the preceding 12 months we may have collected the categories described in section 2 (for example identifiers such as name and email when you write to us, internet or similar network activity in server or security logs, and inferences drawn from analytics only if you opt in to optional cookies). We use this information for the purposes in section 3 and retain it as described in section 4.

Sale and sharing. We do not sell your personal information for money. If optional marketing or analytics technologies are enabled only after you consent, some partners may process identifiers in ways that could constitute “sharing” for cross-context behavioral advertising under California law; in that case you may opt out by turning off those categories in our cookie interface or, where your browser sends a recognized opt-out preference signal (such as Global Privacy Control), our site treats optional categories as off until you actively change them. We do not discriminate against you for exercising privacy rights granted by law.

Your California and similar rights. Depending on eligibility and exceptions, you may have the right to know what personal information we collect, use, disclose, and retain; to request deletion; to correct inaccurate personal information; to opt out of sale or sharing for cross-context behavioral advertising; and to limit certain uses of sensitive personal information (we do not intend to use sensitive personal information beyond what is reasonably necessary to provide the services described on this site). You may designate an authorized agent where permitted by law; we may require proof of your identity and, for agents, written authorization.

How to submit a request. Email us using the address in section 1 with “US Privacy Request” in the subject line, or call the phone number in section 1. We will verify your request consistent with applicable law and respond within the timeframes those laws require (or explain any extension permitted by law). If your state provides a right to appeal a denied request, you may reply to our decision email asking for appeal review and we will describe any further steps.

Other US states. Colorado, Virginia, Connecticut, Utah, and other states have enacted consumer privacy laws that may grant residents additional rights (such as access, correction, deletion, portability, or opt-out of targeted advertising or profiling in certain contexts). Where those laws apply to our processing, we honor applicable rights after verification. Nothing in this policy limits rights that cannot be waived under the laws of your state.

California “Shine the Light.” California residents may request certain information regarding disclosure of personal information to third parties for their direct marketing purposes; submit the request using the contact details in section 1 with “Shine the Light” in the subject.

Independent resources: the California Attorney General publishes consumer materials on the CCPA/CPRA at oag.ca.gov/privacy/ccpa. The US Federal Trade Commission provides general guidance on privacy and advertising at ftc.gov.