Privacy Policy

This Privacy Policy explains how Quiphralwlozarin ("we", "us", or "our"), operating the website at quiphralwlozarin.world, collects, uses, stores, and protects your personal data. We are committed to transparency and to complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) (EU) 2016/679 and the California Consumer Privacy Act (CCPA) where applicable.

By using our website or placing an order, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

The data controller responsible for the processing of your personal data is:

Quiphralwlozarin
605 S George St #130, York, PA 17401, United States
Phone: +1 (717) 747-3586
Email: feedbackaskinfo@quiphralwlozarin.world
Website: quiphralwlozarin.world

2. Personal Data We Collect

We collect personal data that you provide directly to us and data collected automatically when you use our website.

2.1 Data You Provide Directly

• Name: First and last name provided when placing an order or contacting us.
• Email address: Used to confirm your order and communicate with you.
• Phone number: Used to confirm your order and arrange delivery.
• Message content: Any notes or delivery instructions you submit via our order form.
• GDPR consent record: A record that you have agreed to the processing of your data.

2.2 Data Collected Automatically

• IP address and browser type: Collected automatically by our hosting infrastructure for security and fraud prevention purposes.
• Pages visited and time on site: Collected via analytics cookies (only if you have consented to analytics cookies).
• Device and operating system information: Used for optimizing website display.
• Cookie identifiers: As described in our Cookie Policy.

3. Purposes and Legal Basis for Processing

We process your personal data for the following purposes and on the following legal bases under GDPR Article 6:

3.1 Order Fulfillment

Purpose: Processing and fulfilling your order, communicating with you about delivery.
Legal basis: Article 6(1)(b) – Performance of a contract.

3.2 Legal Compliance

Purpose: Fulfilling legal obligations, including tax record-keeping and responding to lawful government or regulatory requests.
Legal basis: Article 6(1)(c) – Legal obligation.

3.3 Legitimate Interests

Purpose: Fraud prevention, website security, and improving our services.
Legal basis: Article 6(1)(f) – Legitimate interests. We have assessed that our legitimate interests do not override your fundamental rights and freedoms.

3.4 Consent

Purpose: Analytics and marketing activities (only where you have provided explicit consent via our cookie banner or opt-in mechanisms).
Legal basis: Article 6(1)(a) – Consent. You may withdraw consent at any time.

4. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data to third parties. We may share your data with carefully selected service providers who assist us in operating our website and fulfilling orders, subject to strict data processing agreements. These may include:

• Shipping and logistics providers (to deliver your order);
• Payment processors (to handle payment transactions securely);
• IT infrastructure and hosting providers;
• Analytics service providers (only if you have consented to analytics cookies).

All third-party processors are required to handle your data in accordance with applicable data protection laws and only for the specific purposes we have instructed.

We may also disclose your personal data if required to do so by law, or in response to valid legal process from law enforcement authorities.

5. International Data Transfers

Our operations are based in the United States. If you are located in the European Economic Area (EEA), your data may be transferred to and processed in the United States. Such transfers are carried out using appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, where applicable.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, and as required by applicable legal obligations:

• Order data: Retained for up to 7 years to comply with tax and accounting regulations.
• Contact data: Retained for the duration of our relationship and for up to 3 years thereafter.
• Analytics data: Retained in aggregated, anonymized form; cookie-based identifiers are retained for the period specified in our Cookie Policy.
• Consent records: Retained for 3 years from the date consent was given, for legal compliance purposes.

When your data is no longer required, we securely delete or anonymize it.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data. To exercise any of these rights, please contact us using the details in Section 10.

• Right of Access (Art. 15 GDPR): You have the right to request a copy of the personal data we hold about you.
• Right to Rectification (Art. 16 GDPR): You have the right to request correction of inaccurate or incomplete personal data.
• Right to Erasure (Art. 17 GDPR): You have the right to request deletion of your personal data, subject to certain legal exceptions.
• Right to Restriction of Processing (Art. 18 GDPR): You have the right to request that we restrict the processing of your data in certain circumstances.
• Right to Data Portability (Art. 20 GDPR): You have the right to receive your data in a structured, machine-readable format.
• Right to Object (Art. 21 GDPR): You have the right to object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• CCPA Rights (California residents): You have the right to know what personal information is collected, to delete personal information, and to opt out of the sale of personal information (we do not sell personal data).

We will respond to your request within 30 days. In complex cases, this may be extended to 60 days, and we will notify you accordingly.

8. Cookies

We use cookies and similar tracking technologies on our website. For detailed information about the cookies we use, their purpose, duration, and how to manage your preferences, please refer to our Cookie Policy.

9. Security Measures

We take the security of your personal data seriously. We implement appropriate technical and organizational measures to protect your data against unauthorized access, accidental loss, destruction, or damage, including:

• HTTPS encryption for all data transmissions;
• Access controls limiting data access to authorized personnel only;
• Regular security reviews of our systems and processes;
• Data processing agreements with all third-party service providers.

While we take all reasonable steps to protect your data, no method of transmission over the internet is 100% secure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform you without undue delay.

10. Children's Privacy

Our website and products are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us and we will promptly delete such data.

11. Links to Third-Party Websites

Our website may contain links to third-party websites. This Privacy Policy does not apply to those sites. We recommend reviewing the privacy policy of any third-party website you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. The updated policy will be published on this page with a revised "Last updated" date. For material changes, we will make reasonable efforts to notify you directly where we hold your contact details.

13. How to Lodge a Complaint

If you are located in the EEA and believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority. In the United States, you may contact the Federal Trade Commission (FTC) at ftc.gov.