Privacy Policy

Introduction

This Privacy Policy explains how Muha Meds (“we,” “our,” or “us”) collects, uses, and shares information when you visit this site, place an order, submit a form, or subscribe to our list.

By using the site you confirm you are at least twenty-one years of age and that you agree to the practices described below. If you do not agree, please do not use the site.

Information we collect

Information you provide. When you place an order we collect your name, email address, phone number, and delivery address, along with any delivery notes you add and the payment method you select. When you contact us we collect your name, email, optional phone number, and the content of your message. When you subscribe we collect your email address and your consent to receive email.

Information kept in your browser. We store a small amount of information on your device: the contents of your basket, whether you have dismissed or joined the mailing-list prompt, and your cookie preferences. These stay on your device and are not transmitted to us as a profile.

Analytics. Unless you switch it off, we record how the shop is used: the pages you open, the page that sent you here, and what you add to or remove from a basket. This is on by default. You can switch it off at any time on our Cookie Preferences page, and doing so deletes what has already been recorded for your browser.

We do not use a cookie for this. Nothing is stored on your device to recognise you. Visits are grouped using a one-way salted hash of your IP address and browser user-agent string, computed when the request arrives and never reversible into either value. Because an address is shared by everyone on the same network and changes when you move between networks, this grouping is approximate by nature: it cannot single you out, and we do not attempt to.

We never store your IP address or your browser’s user-agent string as themselves. Each is put through a one-way salted hash on arrival, which lets us tell one visit from another and spot abuse without holding the underlying values. Approximate country comes from our hosting provider, which resolves it at its network edge and passes us a two-letter code — we do not perform an address lookup or use a third-party location service. None of this identifies you by name, and an email address is attached only where you were shown an order confirmation.

Payment information. We do not collect or store card numbers or bank details. Orders are settled after checkout through the payment method you choose, and those details never pass through this site.

How we use your information

We use what we collect to process and deliver your order, to reply to your enquiry, to send the email you have opted into, to operate and secure the site, and to comply with applicable law. We do not sell or rent your personal information.

Where applicable we rely on the following legal bases: performance of a contract (to fulfil an order you placed), your consent (for marketing email, which is always opt-in), our legitimate interests (to operate and secure the site, understand how it is used, and answer enquiries), and compliance with legal obligations. Analytics runs on that legitimate interest with notice and a working opt-out rather than on prior consent; marketing email is never sent without you asking for it.

Sharing with service providers

We share limited information with the following providers so the site can operate. Each is required to protect your data and to use it only on our instructions.

• Neon — managed database; stores orders, enquiries, subscribers, and the product catalogue.
• Vercel — hosting and content delivery.
• Cloudinary — image and document delivery for product photography and certificates of analysis.
• Brevo — transactional and marketing email delivery, including order confirmations and newsletters.

We may also share information to comply with lawful requests, to enforce our terms, or to protect the rights, property, and safety of Muha Meds, our customers, or others.

Data retention

Orders and their line items are kept for as long as we need them for tax, accounting, and dispute-resolution purposes. Enquiries are kept for up to twenty-four months unless you ask us to delete them sooner. Subscriber records are kept until you unsubscribe, plus a short period to prevent accidental re-adds.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. California residents have additional rights under the CCPA/CPRA, including the right to know, to delete, and to opt out of sale (we do not sell personal information), and the right not to be discriminated against for exercising them.

To exercise any right, contact us at contact@allmuhameds.com from the address associated with the request. We verify identity before acting and typically respond within thirty days. You may appoint an authorised agent to act for you.

Security

We use industry-standard technical and organisational controls, including TLS in transit, encryption at rest with our database provider, and access controls on our internal tools. No system is perfectly secure — if we learn of a breach affecting you, we will notify you in accordance with applicable law.

Children

This site is intended for adults aged twenty-one and older. We do not knowingly collect information from anyone under twenty-one. If you believe we have, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. The “last updated” date above reflects the current version, and material changes will be highlighted on the site for a reasonable period after they take effect.

Contact us

Questions about this Privacy Policy or our data practices can be sent to contact@allmuhameds.com.