Privacy Policy

1. Introduction

Ghivexonshythrel ("we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website ghivexonshythrel.world or make a purchase from us.

This policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679 and other applicable data protection laws.

2. Data Controller Information

The data controller responsible for your personal data is:

• Company Name: Ghivexonshythrel
• Address: Midtveien 19, 1592 Våler i Østfold, Norway
• Email: business@ghivexonshythrel.world
• Website: https://ghivexonshythrel.world

3. Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide Directly

• Contact Information: Name, email address, phone number (optional), shipping address
• Order Information: Products purchased, order history, payment details
• Communication Data: Messages, inquiries, and correspondence with us
• Consent Records: Records of your consent preferences

3.2 Information Collected Automatically

• Technical Data: IP address, browser type and version, device information, operating system
• Usage Data: Pages visited, time spent on pages, navigation patterns
• Cookie Data: Information collected through cookies and similar technologies (see our Cookie Policy)

4. Purposes and Legal Basis for Processing

We process your personal data for the following purposes and legal bases:

4.1 Contract Performance (Article 6(1)(b) GDPR)

• Processing and fulfilling your orders
• Communicating about your orders and deliveries
• Providing customer support
• Managing returns and refunds

4.2 Legal Obligations (Article 6(1)(c) GDPR)

• Compliance with tax and accounting requirements
• Responding to legal requests from authorities
• Maintaining required business records

4.3 Legitimate Interests (Article 6(1)(f) GDPR)

• Improving our website and services
• Analyzing website usage and performance
• Preventing fraud and ensuring security
• Internal administration purposes

4.4 Consent (Article 6(1)(a) GDPR)

• Sending marketing communications (where you have opted in)
• Setting non-essential cookies

5. Data Sharing and Recipients

We may share your personal data with the following categories of recipients:

• Service Providers: Payment processors, shipping carriers, email service providers
• Professional Advisors: Lawyers, accountants, auditors when necessary
• Legal Authorities: When required by law or to protect our legal rights

We do not sell your personal data to third parties. All service providers are bound by data processing agreements and are only permitted to process your data in accordance with our instructions.

6. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When such transfers occur, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other legally recognized transfer mechanisms

7. Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected:

• Order Data: 7 years from the date of purchase (for tax and legal requirements)
• Account Data: Until you request deletion or close your account
• Marketing Data: Until you withdraw consent or unsubscribe
• Technical Logs: Up to 12 months
• Cookie Data: As specified in our Cookie Policy

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of Access (Article 15): Request a copy of your personal data
• Right to Rectification (Article 16): Request correction of inaccurate data
• Right to Erasure (Article 17): Request deletion of your data ("right to be forgotten")
• Right to Restriction (Article 18): Request limitation of processing
• Right to Data Portability (Article 20): Receive your data in a portable format
• Right to Object (Article 21): Object to processing based on legitimate interests
• Right to Withdraw Consent (Article 7): Withdraw consent at any time for consent-based processing

To exercise any of these rights, please contact us using the details provided in Section 2. We will respond to your request within 30 days.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Secure Socket Layer (SSL) encryption for data transmission
• Access controls limiting data access to authorized personnel
• Regular security assessments and updates
• Secure data storage systems
• Employee training on data protection

10. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or significantly affects you.

11. Children's Privacy

Our website and products are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a minor, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

13. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with a supervisory authority. In Norway, the relevant authority is:

Datatilsynet (Norwegian Data Protection Authority)
Website: www.datatilsynet.no

We encourage you to contact us first so we can address your concern directly before filing a complaint.

14. Data Processing Specific to Contact and Order Requests

When you submit a request through our website form, we process the submitted details to respond to your inquiry, provide product information, and, where requested, assist with order handling. The legal basis is Article 6(1)(b) GDPR (pre-contractual steps) and, where relevant, Article 6(1)(f) GDPR (legitimate interest in handling customer communication).