Effective October 4, 2026 · Version 1.0 · Last updated October 4, 2026
This notice explains what personal data Mavericks Aminos collects, why, who receives it, how long we keep it, and what you can ask us to do with it. It is written to the content requirements of the Minnesota Consumer Data Privacy Act, Minn. Stat. §§ 325M.10 to 325M.21 and we extend the rights it describes to every United States resident regardless of where you live.
1. Who we are
Mavericks Aminos, 6168 Krogerus Rd, Chisholm, MN 55719, is the controller of the personal data described here. Reach us at [email protected]. That address is monitored and is the correct route for every request under this notice.
2. Two things we do not do
2.1 We do not sell personal data. We have never sold personal data and we do not exchange it for anything of value.
2.2 We do not sell sensitive data, and will not without your prior consent. Minnesota prohibits the sale of sensitive data without consent regardless of a business’s size, at Minn. Stat. § 325M.17 and Texas and Nebraska impose the same rule. We do not intend to sell sensitive data at all. If that ever changed we would obtain opt-in consent first and we would not treat silence as consent.
3. Categories of personal data we process
3.1 Data you give us
- Account data: name, email address, and a password we store only as a cryptographic hash.
- Research account data: organization name, your role, and any verification information we request when reviewing an application.
- Order data: billing address, shipping address, telephone number, order contents, and order history.
- Correspondence: the content of emails and form submissions you send us.
3.2 Data collected automatically
- Technical data: IP address, browser and device type, operating system, and language.
- Usage data: pages viewed, time on page, and the referring site.
- Cookie data: described in Section 8.
3.3 Data we do not hold
We do not accept payment cards and we do not receive or store card numbers, expiry dates or security codes. Payments are sent by Zelle from your own bank. We see only the sender name, the amount and any memo your bank passes to us.
3.4 Sensitive data
We do not ask for and do not knowingly collect data revealing racial or ethnic origin, religious belief, a mental or physical health condition or diagnosis, sexual orientation, citizenship or immigration status, genetic or biometric data, precise geolocation, or data from a known child. Do not send us any of it.
4. Why we process it
| Purpose | Data used |
|---|---|
| Reviewing and approving research account applications | Account and research account data |
| Taking payment and preventing fraud | Order data, technical data |
| Packing, shipping and tracking your order | Account and order data |
| Sending transactional messages: order confirmations, shipping notices, delay notices required by law, password resets | Account and order data |
| Answering your questions and handling claims | Correspondence, account and order data |
| Meeting tax, accounting and record-retention obligations | Order data |
| Keeping the site running, secure and free of abuse | Technical and usage data |
| Sending marketing email, where you have opted in | Account data |
Transactional messages are part of the service, not marketing. You cannot opt out of them while you hold an account and some of them we are legally required to send.
5. Automated decisions and profiling
5.1 We use automated fraud scoring at checkout. It can cause an order to be held for manual review or declined. No other automated process produces a legal or similarly significant effect on you.
5.2 Minnesota gives you a right that no other state gives, at Minn. Stat. § 325M.14, subd. 1(g) and we extend it to everyone. If an automated decision goes against you, you may question the result, ask why it went the way it did, ask what you could have done differently, ask what you can do differently next time, and review the data we used. If the decision rested on inaccurate data, we will correct the data and reconsider the decision.
6. Who receives it
We disclose personal data only to parties who need it to run the business and only for that purpose. The categories are:
- Payment. Your bank and the Zelle network, which carry the transfer you send.
- Shipping. The common carrier delivering your order.
- Email delivery. Our transactional and marketing email providers.
- Hosting and infrastructure. Hostinger, which hosts this site.
- Professional advisers. Accountants, auditors and lawyers, where engaged and where needed.
On written request to the address in Section 1 we will name the specific third parties to which we disclosed your personal data. Minnesota, Oregon and Delaware require that and we give it to everyone.
We also disclose personal data where the law requires it, where it is needed to establish or defend a legal claim, where it is needed to enforce the Terms of Sale, and where it is needed to protect the rights or safety of any person. If the business is sold or merged, account and order records may transfer to the acquirer and we will post notice here before that happens.
7. How long we keep it
| Record | Retention |
|---|---|
| Order, fulfilment, notice and refund records | 5 years from the order date, to meet tax and consumer-protection recordkeeping obligations |
| Account records | While the account is open, then 24 months |
| Research account verification records | 5 years from account closure |
| Marketing consent and opt-out records | 5 years from the date of the consent or the opt-out, whichever is later |
| Correspondence | 24 months from the last message in the thread |
| Server and security logs | 90 days |
Where a record is subject to a legal hold we keep it until the hold lifts, whatever the table says.
8. Cookies and tracking
8.1 Strictly necessary. Session, cart, authentication and security cookies. The site does not function without them and they cannot be switched off.
8.2 Everything else. We do not currently run advertising cookies or cross-site tracking. If we add analytics or advertising cookies we will list each one here with its provider, purpose and lifetime before it goes live and we will ask for consent where consent is required.
8.3 Global Privacy Control. This site honoors the Global Privacy Control signal as a valid opt-out of sale and of targeted advertising. Because we do neither, the signal changes nothing about how we handle your data, but it is respected and recorded.
9. Security
The site is served over TLS. Passwords are stored hashed. Administrative access is restricted to people whose work requires it, uses individual accounts, and is logged. We maintain an inventory of the personal data we hold so that we can act on the requests in Section 10. We review our safeguards whenever we change how data is processed.
No system is perfectly secure and we do not claim otherwise. Information sent over the internet travels at your own risk until it reaches us.
10. Your rights
10.1 You may ask us to:
- confirm whether we process personal data about you, and give you a copy;
- correct data that is inaccurate or out of date;
- delete data we no longer need to keep;
- give you your data in a portable, machine-readable format;
- name the specific third parties to which we disclosed your data;
- stop sending you marketing; and
- exercise the profiling rights in Section 5.2.
10.2 How to ask. Email [email protected]. We may need to verify your identity and we will not act on a request we cannot tie to the account.
10.3 Timing. We answer within 45 days. Where a request is complex we may extend once by a further 45 days and we will tell you why before the first period expires. We do not charge for a request unless it is manifestly unfounded or repetitive and we will tell you before we charge anything.
10.4 Appeals. If we refuse a request you may appeal by replying to our decision with the word “appeal” in the subject line. A person who was not involved in the original decision will review it. We answer appeals within 45 days, extendable by 60 days where reasonably necessary and we give written reasons. If we refuse the appeal we will tell you how to complain to your state attorney general.
10.5 No retaliation. We will not deny you goods or services, charge you a different price, or give you a lower level of service because you exercised a right under this notice.
11. Business contacts
Most of our customers are organizations. Under Minnesota law and under the privacy statutes of Virginia, Colorado, Connecticut, Texas, Oregon and Nebraska, an individual acting in a commercial or employment context is not a “consumer” and those statutes do not reach their data. California is the exception and does reach it. We do not rely on that distinction: the rights in Section 10 are available to you whether you bought as an individual or on behalf of an organization.
12. Children
This site is not directed at children, and our Terms of Sale require purchasers to be at least 21. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, write to us and we will delete it.
13. Marketing email
Marketing email is sent only to people who opted in. Every marketing message identifies itself as an advertisement, carries our postal address, and carries a one-click unsubscribe that needs no login, no password and no reason. We process unsubscribes immediately and in every case within ten business days. Unsubscribing from marketing does not stop transactional messages about orders you have placed.
14. Changes
The date at the top of this notice shows when it last changed. Where a change is material we will post it here before it takes effect and, where we relied on your consent, we will give you a reasonable opportunity to withdraw it.
15. Contact
Mavericks Aminos
6168 Krogerus Rd
Chisholm, MN 55719
[email protected]