1. Introduction and Data Controller
Ghefryonvorgal.world ("we", "us", "our") operates the website ghefryonvorgal.ddd. We are committed to protecting your privacy and ensuring the security of your personal information. As the data controller, we are responsible for determining how and why your data is processed in accordance with applicable data protection laws including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
Contact Information: 165 Erie St, Jersey City, NJ 07302, USA. Email: question@ghefryonvorgal.world. For data protection inquiries, please use this contact information and allow up to 30 days for a response.
2. Categories of Personal Data We Collect
We collect and process the following categories of personal data to provide our services and improve your experience:
- Identity data: Your full name when you submit an order form or create an account.
- Contact data: Email address, telephone number (if provided), and mailing address for order fulfillment and customer support.
- Technical data: IP address, browser type and version, device information, operating system, time zone setting, and browser plug-in types when you access our website.
- Usage data: Information about how you use our website, including pages visited, time spent on pages, page interaction information, and navigation paths (when analytics cookies are accepted).
- Marketing and communications data: Your preferences for receiving marketing from us and your communication preferences, collected only with your explicit consent.
3. Purposes and Legal Basis for Processing
We process your personal data for the following purposes:
- Fulfilling orders, processing payments, and delivering products to you.
- Responding to your inquiries and providing customer support.
- Improving our website, services, and user experience through analytics.
- Complying with legal obligations, including tax and regulatory requirements.
- Preventing fraud and ensuring the security of our systems.
- Sending marketing communications (only with your consent and where permitted by law).
For users in the European Union and European Economic Area, our legal bases under GDPR include: Contract (processing necessary to fulfill your order), Legitimate Interest (website operation, security, and improvement), Consent (analytics, marketing cookies, and non-essential communications), and Legal Obligation (compliance with applicable laws).
4. Data Retention Periods
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Order and transaction data: 7 years from the date of the transaction to comply with legal, tax, and accounting requirements.
- Marketing consent records: Until you withdraw consent or request deletion.
- Analytics data: Up to 26 months from the date of collection.
- Technical and security logs: Up to 12 months.
- Customer support correspondence: Up to 3 years from the date of the last communication.
After the retention period expires, we securely delete or anonymize your data in accordance with our data retention policy.
5. Your Rights Under Data Protection Laws
Depending on your location, you may have the following rights:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data ("right to be forgotten") where applicable.
- Right to Restrict Processing: Request that we limit how we use your data in certain circumstances.
- Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format.
- Right to Object: Object to processing based on legitimate interests or for direct marketing.
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
- Right to Lodge a Complaint: Lodge a complaint with a supervisory authority in your country of residence.
To exercise any of these rights, please contact us at question@ghefryonvorgal.world. We will respond within 30 days. California residents may have additional rights under the CCPA.
6. Data Sharing and Third-Party Recipients
We may share your personal data with the following categories of recipients:
- Payment processors: To process transactions securely.
- Shipping and logistics providers: To fulfill and deliver your orders.
- Analytics providers: When you consent to analytics cookies, to understand website usage.
- Professional advisers: Lawyers, auditors, and insurers where necessary.
- Regulatory authorities: When required by law.
We do not sell your personal data to third parties. All third-party processors are bound by contractual obligations to protect your data and use it only for the purposes we specify.
7. Security Measures
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include: encryption in transit (HTTPS/TLS), access controls and authentication, regular security assessments, employee training on data protection, and secure data storage practices. While we strive to protect your data, no method of transmission over the Internet is 100% secure.
8. International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence. Where we transfer data outside the European Economic Area, we ensure adequate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or other mechanisms recognized by applicable data protection laws.
9. Children's Privacy
Our website and services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately and we will take steps to delete such information.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of our website after such changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically.