1. Who we are
MONS Supplies LLC is a Florida limited liability company that distributes beauty and personal-care brands in the United States. We are the data controller for the services listed below.
MONS Supplies LLC · Doral, Florida, United States
Privacy contact: Juan Arroquy · juan@mons-supplies.com · +1 (931) 440-0028
General: info@mons-supplies.com
2. What this policy covers
- www.mons-supplies.com — our corporate site, supplier application form and partner portal.
- Online stores we operate: mons.health, collagenilbymons.com and lubrigynbymons.com.
- Our Meta app “MONS Health Publisher” — an internal tool we use to publish content to, and manage comments and messages on, our own Facebook Page (MONS Health) and Instagram account (@mons.health).
- Our social media accounts on Facebook, Instagram and TikTok.
3. Data we collect
Data you give us
- Supplier or partner applications: company, contact name, email, phone, country, website, product categories and any message you send.
- Store accounts and orders: name, email, shipping address, phone, order contents and, if you choose, a saved payment method. Card numbers are handled by Stripe and never touch our servers.
- Newsletter sign-ups: your email address.
- Messages, comments or direct messages you send to our social accounts.
Data collected automatically
- Server logs: IP address, browser type, pages visited, time of visit.
- Cookies and similar technologies, including the Meta Pixel on our stores, which records page views and standard shopping events (add to cart, checkout, purchase) and outbound clicks to Amazon. See section 7.
Data from Meta Platforms
Through our Meta app we access only our own Pages and Instagram accounts. When you interact with our content, Meta provides us the public information tied to that interaction: your username or display name, the text of your comment or message, and the time it was posted. We do not request access to your profile beyond what is needed to answer you.
4. How we use data
- To process and ship orders, provide receipts and handle returns.
- To answer supplier and partner applications and manage partner accounts.
- To reply to comments and messages — including automated replies that send information, discount codes or resources you asked for by commenting a keyword on one of our posts.
- To send marketing emails you opted into (you can unsubscribe in every email).
- To measure and improve our advertising on Meta platforms and our sites.
- To keep our services secure and comply with legal obligations.
We do not sell personal data. We do not use Meta platform data to build profiles of people outside of our own customer relationship, and we never use it for surveillance, discrimination or eligibility decisions.
5. Who we share data with
| Provider | Purpose |
|---|---|
| Stripe | Payment processing for our stores |
| ShipStation and carriers (USPS, UPS, FedEx) | Fulfilment and delivery of orders |
| Amazon | Orders placed through our Amazon listings are governed by Amazon's privacy notice |
| Meta Platforms | Pixel measurement, advertising, and publishing/messaging on our own Pages and Instagram accounts |
| Railway and Google Workspace | Hosting, database and email infrastructure |
| Brand owners we distribute for | Aggregated sales data; personal data only when required to handle a product complaint |
We may also disclose data when required by law or to protect our rights, and in connection with a merger or sale of the business.
6. How long we keep data
- Order and invoice records: 7 years (tax and accounting requirements).
- Store account data: until you delete the account or after 3 years of inactivity.
- Supplier applications: 24 months after the last contact.
- Comments and messages received through Meta: the text needed to answer you is kept for up to 90 days, then deleted; we keep only the interaction ID and timestamp to avoid answering twice.
- Server logs: 30 days.
7. Cookies and the Meta Pixel
Our sites use essential cookies (session, cart, sign-in) and the Meta Pixel for measurement and advertising. The Pixel lets Meta match your visit to your Meta account when you are logged in, so we can measure our ads and show relevant ones.
You can limit this at any time: use your browser's cookie controls, opt out of interest-based ads at Meta Ad Preferences, or use the Digital Advertising Alliance opt-out at optout.aboutads.info.
8. Google user data and Google Workspace APIs
With your explicit consent, our internal mail tool connects to your Google account through the Google Workspace APIs. This section describes exactly what we access, why, and the limits we place on ourselves. It applies in addition to the rest of this policy.
What we access. Only after you sign in with Google and approve the consent screen, and only for the account you signed in with:
- Gmail messages, drafts, labels and settings — to display your mail inside the tool, draft and send replies on your behalf, organise messages with labels, and read the mailbox settings needed to render your mail correctly.
- Google Drive files — to store backups created by the tool, and to attach or save documents you choose.
- Your basic profile and email address — to identify which account is connected and show it back to you.
Why we need it. The tool exists so our team can read and answer business correspondence in one place. Sending requires write access; showing a thread requires read access; saving a backup requires Drive access. We request no scope that is not used by a feature you can see.
What we never do. We do not sell, rent or trade Google user data. We do not use it for advertising, for building profiles, or for any purpose unrelated to the tool. We do not use it to train generalised artificial-intelligence or machine-learning models. We do not allow humans to read your mail except with your explicit consent, to resolve a specific support issue you have raised, for security purposes such as investigating abuse, or where required by law.
Limited Use. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Storage and retention. Message content is fetched on demand and is not copied into a database of ours. The OAuth access and refresh tokens are stored encrypted as server environment variables, never in our code or in any repository. Tokens are deleted when you disconnect.
How to revoke. You can withdraw access at any time at myaccount.google.com/permissions, which immediately invalidates our tokens, or by writing to juan@mons-supplies.com and we will delete them for you. Revoking does not affect anything we processed lawfully before you revoked.
9. Your rights
Depending on where you live (including under the California Consumer Privacy Act and the EU/UK GDPR), you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any right, email juan@mons-supplies.com. We answer within 30 days and never discriminate against you for exercising your rights.
To delete data we hold about you — including data obtained through Meta — follow the steps on our Data deletion page.
10. Security
Data travels over HTTPS, is stored on access-controlled infrastructure in the United States, and payment data is tokenised by Stripe. Access tokens for our Meta app are stored as encrypted environment variables and are never exposed in our sites or code.
11. Children
Our services are intended for adults. We do not knowingly collect data from anyone under 18; if you believe a minor has provided data, contact us and we will delete it.
12. International transfers
We operate from the United States. If you contact us from elsewhere, your data will be processed in the US under the safeguards described in this policy.
13. Changes
We will post any update on this page with a new effective date. Material changes to how we use Meta platform data will also be announced on our social accounts.