Privacy Policy

Controller: Mulentuhub Advisory Ltd
Registered/Business address: 350 Fifth Avenue, New York, NY 10118, United States
Email: [email protected]
Privacy contact (DPO function): [email protected]

If you have questions about this policy, want to exercise your rights, or want to request deletion of information you submitted, contact us using the privacy email above. If you contact us from within the European Economic Area (EEA) or the United Kingdom, we will respond in line with applicable GDPR/UK GDPR requirements, including response timeframes and identity verification measures.

Legal bases by purpose and data type

• Responding to inquiries (name, email, message content): Contract necessity (Art. 6(1)(b)) where you request information about services, and legitimate interests (Art. 6(1)(f)) to manage communications and provide support.
• Optional phone number (if provided): Legitimate interests (Art. 6(1)(f)) to facilitate communication, or consent (Art. 6(1)(a)) where required by local law based on your channel and context.
• Website security, fraud prevention, and logs (IP address, timestamps, user agent): Legitimate interests (Art. 6(1)(f)) to protect the website and detect malicious activity.
• Analytics (cookie identifiers, usage data): Consent (Art. 6(1)(a)) where required for non-essential cookies.
• Marketing measurement/retargeting (e.g., Meta Pixel identifiers): Consent (Art. 6(1)(a)) where required, and you can reject marketing cookies without losing access to the site.
• Legal compliance requests: Legal obligation (Art. 6(1)(c)) where we must retain or disclose information to comply with law.

Where we rely on legitimate interests (Art. 6(1)(f)), we consider and balance our interests against your rights and expectations. You may object to such processing as described in the “Your rights” section.

• Inquiry form submissions and email correspondence: retained for up to 2 years from the last interaction, then deleted or anonymized unless needed for legal claims or compliance.
• Operational engagement communications (if an advisory engagement proceeds): retained for the duration of the engagement and up to 6 years thereafter where necessary for professional recordkeeping and legal compliance (e.g., contract documentation), subject to applicable law.
• Analytics data (e.g., GA4): retained for up to 14 months (tool setting), then automatically deleted or aggregated according to provider controls.
• Cookie consent choice (stored in local storage): stored until you clear your browser storage or update your choice; we also refresh the consent prompt if settings change or if required by law.
• Security logs: retained for up to 90 days unless a longer period is required to investigate security incidents.
• Marketing audiences (if enabled through consent): retained according to the advertising provider’s settings and your consent choice; you can withdraw consent at any time by rejecting marketing cookies.

When retention periods expire, we delete data, de-identify it, or securely archive it only where lawful and necessary. If you request deletion, we will evaluate the request against legal obligations and legitimate interests such as security and legal defense.

No sale of personal data

Mulentuhub does not sell personal data and does not share personal data for monetary consideration. If we use advertising tools, they are used for measurement and audience building only when you have provided consent, and you can withdraw consent through the cookie settings on your device (reject cookies) or by clearing browser storage.

If you access the website from the EEA/UK, personal data may be transferred to the United States or other countries that may not provide the same level of data protection as your home jurisdiction. When transfers are subject to GDPR/UK GDPR restrictions, we use appropriate safeguards such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission for transfers to third countries, where applicable.
• UK International Data Transfer Addendum or other approved UK transfer mechanisms where applicable.
• Adequacy decisions where the destination country is recognized as providing adequate protection.
• Supplementary measures where appropriate, such as data minimization and access controls.

You may request more information about transfer safeguards by contacting [email protected].

• Right of access: request confirmation of whether we process your data and obtain a copy.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”): request deletion where processing is no longer necessary or where you withdraw consent and no other legal basis applies.
• Right to restriction: request that we limit processing in certain situations, such as while a complaint is investigated.
• Right to data portability: receive certain data you provided to us in a structured, commonly used format, and request transmission to another controller where technically feasible.
• Right to object: object to processing based on legitimate interests; we will stop unless we have compelling legitimate grounds or need to process for legal claims.
• Right to withdraw consent: where we rely on consent (e.g., analytics/marketing cookies), you can withdraw it at any time by updating cookie choices (reject optional cookies) or clearing your browser storage.

How to exercise your rights: Email [email protected] with your request and the email address you used to contact us. We may ask for reasonable information to verify your identity. We aim to respond within one month, and we may extend this period where permitted by law due to complexity or number of requests.

Right to lodge a complaint: If you are in the UK, you can complain to the Information Commissioner’s Office (ICO). If you are in the EEA, you can complain to your local supervisory authority. We encourage you to contact us first so we can address your concerns directly.

If you believe a child has provided personal data to us, contact [email protected] and we will take steps to delete the information where appropriate and lawful. We may request limited information to help locate the record and verify the request.

Security measures may include access controls, least-privilege permissions, secure hosting configurations, and staff practices designed to minimize unauthorized access. If you suspect any security issue involving your data, contact [email protected] so we can investigate. We do not request passwords or payment card information through our website inquiry form.

Updates are posted on this page with an updated “Last Updated” date. If changes materially affect how we process personal data, we may provide notice on the website or via email when we have your email address for correspondence and such notice is appropriate. Continued use of the website after an update means you have read the revised policy.