PRIVACY POLICY

Wealth y Wellness LLC 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110, USA Contact: info@wealthwellnessco.com Effective date: 11 September 2026 Last updated: 11 September 2026 1. WHO WE ARE AND WHAT THIS POLICY COVERS Wealth y Wellness LLC ("Wealth y Wellness", "we", "us") is a limited liability company formed in the State of New Mexico, United States, with its registered address at 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110, USA. We produce personalized educational digital guides and ebooks. This policy explains what personal data wealthwellnessco.com collects, why we collect it, how long we keep it, who it is shared with, and the rights you hold over it. It covers this website and the email correspondence that follows from it. It does not cover any third-party website you reach by following a link from here. We are the controller of the personal data described below. For any question about this policy, or to exercise any right in section 8, write to info@wealthwellnessco.com. 2. THE DATA WE COLLECT We collect only what a small publishing studio needs to answer an enquiry and to produce a guide that was ordered. a) Data you give us through the contact or brief form: your name, your email address, and the content of the message or brief you write. These fields are the only ones the form has. The form also carries a hidden anti-spam field that is never shown to you and is never stored. b) Personalization data, when you commission a guide: the answers you choose to give to the personalization questionnaire (for example: the topic you selected, your stated goals, your preferences, your available time, the context you want the guide to address). You decide what to write there. Please do not send us health data, financial account data, government identifiers, or any other sensitive category of information; we do not need it and we do not want it. If you send it anyway, we will delete it. c) Correspondence: the emails you exchange with us, including revisions and delivery confirmations. d) Technical data strictly necessary to serve the page: your browser's request to our server produces a standard web-server log entry containing the IP address, the time of the request, the page requested, the referring page and the browser's user-agent string. These logs are produced by the hosting server and are used for security and error diagnosis only. e) Local browser storage: your language choice (English or Spanish) and your cookie-consent choice are stored in your own browser's localStorage. They are not sent to us and they never leave your device. See the Cookie Policy. We do not operate user accounts, we do not run advertising, we do not build profiles, and we do not make automated decisions that produce legal or similarly significant effects about you. 3. WHY WE USE IT, AND THE LEGAL BASIS For visitors in the European Economic Area and the United Kingdom, the legal bases under the GDPR and the UK GDPR are: - To answer your enquiry and correspond with you: Article 6(1)(b), steps taken at your request before entering into a contract; or Article 6(1)(f), our legitimate interest in replying to people who write to us. - To produce, revise and deliver a guide you ordered: Article 6(1)(b), performance of a contract with you. - To keep records of transactions and correspondence for accounting, tax and dispute purposes: Article 6(1)(c), legal obligation, and Article 6(1)(f), our legitimate interest in defending claims. - To keep the website and its mail server secure: Article 6(1)(f), our legitimate interest in protecting the service against abuse. - For strictly necessary cookies and equivalent local storage: no consent is required; anything beyond strictly necessary is used only with your consent, Article 6(1)(a). 4. WHAT WE DO NOT DO We do not sell personal data. We do not share it with data brokers. We do not use it to train any machine-learning model. We do not send marketing email to people who only wrote us an enquiry. We do not use analytics, advertising pixels, social plugins, session recording, heatmaps or A/B-testing tools on this website. 5. WHO CAN SEE IT Our website and our email are hosted on a HestiaCP server operated on our behalf by our web provider. The mail transfer agent on that server (Exim) processes the contact form and the mailbox. That provider acts as our processor: it may access personal data only to run the service and only on our instructions, under a written agreement. Beyond this hosting arrangement, no third-party service receives the personal data submitted through this site. We may disclose data if we are legally required to, for example in response to a valid order from a competent authority, and to our professional advisers where genuinely necessary to obtain advice. 6. INTERNATIONAL TRANSFERS We are established in the United States and our servers are located in the European Union. If you write to us from the EEA or the UK, your data is processed on servers inside the EEA and also accessed by us in the United States. For those transfers to the United States we rely on the European Commission's Standard Contractual Clauses, together with the technical measures described in section 9. You may request a copy of the relevant transfer safeguards by writing to info@wealthwellnessco.com. 7. HOW LONG WE KEEP IT - Enquiries that do not become an order: up to 12 months from the last message, then deleted. - Personalization questionnaires and delivered guides: up to 24 months from delivery, so we can re-issue a file you lost and handle any dispute, then deleted. - Transaction and billing records: for as long as United States federal and New Mexico state tax and accounting law require us to keep them. - Web-server logs: rotated and deleted by the hosting server on its own schedule, typically within 30 days. - Your language and cookie choices: they live in your browser until you clear your browser storage. 8. YOUR RIGHTS If you are in the EEA or the UK, you have the right to access your data, to have it corrected, to have it erased, to restrict or object to its processing, to data portability, and to withdraw a consent you gave without that affecting the lawfulness of what was done beforehand. You also have the right to lodge a complaint with your national supervisory authority. If you are a California resident, the CCPA as amended by the CPRA gives you the right to know what personal information is collected, used and disclosed, the right to delete it, the right to correct it, the right to opt out of its sale or sharing, and the right not to be discriminated against for exercising any of these. We do not sell or share personal information as those terms are defined by the CPRA, and we do not process sensitive personal information for the purpose of inferring characteristics. If you live in another United States state with a comprehensive privacy law, including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana and Delaware, you hold the equivalent rights those laws grant, exercised the same way. To exercise any right, write to info@wealthwellnessco.com from the address you corresponded with us from, and tell us what you want. We answer within 30 days. We do not charge for this. We may ask one clarifying question if we genuinely cannot identify your records; we will not demand identity documents for a simple deletion request. 9. SECURITY The site is served only over HTTPS. Mail is transmitted over authenticated, encrypted connections and the domain publishes SPF, DKIM and DMARC records. Access to the mailbox and to the server is limited to the people who need it. We keep the amount of personal data we hold deliberately small, because the data we never collect is the data that cannot be exposed. 10. CHILDREN This website and these products are intended for adults. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, write to info@wealthwellnessco.com and we will delete it. 11. CHANGES If this policy changes, the new version is published here with a new "Last updated" date. Material changes affecting how we use data already collected will be communicated by email to the address we hold for you, where we hold one.