Privacy policy
Last reviewed:
This policy explains how Braxylonthap (“we”, “us”) processes personal data when you use this website in connection with the Quoralis food supplement information and inquiry forms.
Data controller
Braxylonthap, Valtakatu 23, 96200 Rovaniemi, Finland. Contact channels published in the footer are provided as plain text identifiers.
Geographic scope
This site is operated from Finland and is primarily intended for visitors in the European Economic Area. If you access it from other regions, your local laws may give you additional rights. We describe processing here in line with the GDPR and Finnish law where they apply.
Google Ads and online advertising
Where we use Google Ads or similar advertising services, we may process limited data for delivery measurement, campaign reporting, or similar purposes. Processing depends on your cookie choices and consent when consent is required. For how Google uses data from sites that use its services, see Google’s privacy documentation. We do not use advertising to imply health outcomes or to target people based on sensitive health conditions in connection with Quoralis.
Food supplement topic
Forms and messages on this site may relate to a food supplement product. Data you send is used to answer administrative questions and for order-related communication. We do not process your data to infer sensitive health conditions for advertising purposes.
Categories of data
We may process identification and contact details (name, email, optional phone), message content you submit, technical logs (IP address, browser type, timestamps), and cookie-related data described in the cookie policy.
Purposes and legal bases
| Purpose | Legal basis (GDPR) | Retention |
|---|---|---|
| Respond to inquiries and manage pre-contractual communications | Article 6(1)(b) steps prior to a contract and Article 6(1)(f) legitimate interests in answering customer questions | Up to 24 months after the last contact unless a longer period is required by law |
| Website security, fraud prevention, and server stability | Article 6(1)(f) legitimate interests | Rotating technical logs, typically up to 90 days |
| Compliance with accounting or consumer rules if a purchase occurs | Article 6(1)(c) legal obligation | As defined by applicable Finnish or EU law |
Recipients and transfers
We use infrastructure and service providers that may process data in the European Economic Area or in countries with an adequacy decision or appropriate safeguards such as standard contractual clauses.
Your rights
Depending on the situation, you may request access, rectification, erasure, restriction of processing, data portability, and object to processing based on legitimate interests. You may lodge a complaint with the Finnish Office of the Data Protection Ombudsman (tietosuoja.fi).
Security
We apply access controls, encryption where appropriate for transmission, and vendor review processes. No method is fully risk-free; we mitigate known risks proportionally.
Children
This site is not directed at children. If you believe a minor submitted data, contact us so we can delete it when required.
Updates
We may update this policy to reflect legal or operational changes. Material updates will be indicated with a new review date.