Privacy Policy
Last updated: March 17, 2025
1. Data controller and contact details
The data controller responsible for the processing of your personal data in connection with this website is:
Dhorxellvortgrax
206 1st Ave, New York, NY 10009, United States
Email: admin@dhorxellvortgrax.world
Phone: +12122538686
2. Introduction and scope
This Privacy Policy describes how we collect, use, store, and protect your personal data when you use our website https://dhorxellvortgrax.world (the "Site") and related services. We process personal data in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) where it applies, and with the laws of the United States, including state privacy laws where applicable.
By using the Site or providing your data to us, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Site or provide your personal data.
3. Legal basis for processing (GDPR)
Where the GDPR applies, we process your personal data on one or more of the following legal bases:
- Contract: Processing necessary for the performance of a contract with you or to take steps at your request before entering into a contract (e.g. processing orders and inquiries).
- Legitimate interests: Processing necessary for our legitimate interests (e.g. improving the Site, security, analytics) where not overridden by your rights.
- Consent: Where you have given clear consent for specific processing (e.g. marketing, non-essential cookies).
- Legal obligation: Processing necessary to comply with a legal obligation (e.g. tax, consumer law).
4. Types of personal data we collect
We may collect the following categories of personal data:
- Identity and contact data: Name, email address, telephone number, and postal address when you place an order, contact us, or subscribe to communications.
- Transaction and order data: Order details, payment-related information (processed by third-party payment providers), and delivery information.
- Technical and usage data: IP address, browser type and version, device type, time zone, pages visited, and other technical data collected via cookies and similar technologies (see our Cookie Policy).
- Communication data: Content of messages you send to us (e.g. via contact or order forms).
5. Purposes of processing
We use your personal data for the following purposes:
- To process and fulfill orders and inquiries.
- To communicate with you about your orders, account, or requests.
- To send service-related messages (e.g. order and shipping confirmations).
- To improve the Site, our services, and user experience (including analytics, where you have consented or where permitted by law).
- To comply with legal and regulatory obligations (e.g. tax, consumer rights).
- To protect the security and integrity of the Site and our systems.
- Where you have consented, to send marketing communications (you may withdraw consent at any time).
6. Retention periods
We retain your personal data only for as long as necessary for the purposes set out in this policy or as required by law:
- Order and customer data: Retained for the duration of the contractual relationship and thereafter for a period required by tax and commercial law (typically 6–7 years in the US; where GDPR applies, as required by national law).
- Contact and inquiry data: Retained until the inquiry is resolved and for a reasonable period thereafter for follow-up and legal purposes (e.g. up to 3 years unless longer retention is required by law).
- Marketing and consent-based data: Retained until you withdraw consent or object, or for the period stated at the time of collection.
- Technical and cookie data: As specified in our Cookie Policy (e.g. session data until you close the browser; analytics as per the relevant tool).
After the retention period, we delete or anonymize your data so that it can no longer identify you.
7. Security measures
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:
- Use of HTTPS and encryption for data in transit.
- Restriction of access to personal data to authorized personnel only.
- Secure storage and handling of data (e.g. access controls, secure servers).
- Regular review and update of our security practices.
Despite our efforts, no method of transmission or storage over the internet is completely secure. We encourage you to use strong passwords and to protect your account and device.
8. Sharing and disclosure of personal data
We may share your personal data with:
- Service providers: Payment processors, shipping and logistics partners, email and hosting providers, and analytics providers, under contracts that require them to protect your data and use it only for the purposes we specify.
- Legal and public authorities: When required by law, court order, or to protect our rights, safety, or property.
We do not sell your personal data. We do not share your data with third parties for their own marketing purposes without your consent.
9. International transfers
Your data may be processed in the United States or in other countries where our service providers operate. If you are in the European Economic Area (EEA) or the UK, such transfers may involve countries that do not provide the same level of data protection. In those cases, we ensure appropriate safeguards are in place (e.g. standard contractual clauses approved by the European Commission or equivalent mechanisms) as required by applicable law.
10. Your rights (GDPR and similar laws)
Where applicable (e.g. under the GDPR or US state privacy laws), you may have the following rights:
- Access: To obtain confirmation as to whether we process your data and to receive a copy of your personal data.
- Rectification: To have inaccurate personal data corrected.
- Erasure: To request deletion of your personal data in certain circumstances ("right to be forgotten").
- Restriction: To request that we restrict processing in certain situations.
- Data portability: To receive your data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.
- Objection: To object to processing based on legitimate interests or to processing for direct marketing.
- Withdraw consent: Where processing is based on consent, to withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
- Complaint: To lodge a complaint with a supervisory authority (e.g. in the EU, the data protection authority of your country).
To exercise any of these rights, please contact us using the details in section 1. We will respond within the time frame required by applicable law (e.g. one month under the GDPR, unless extended). We may need to verify your identity before processing your request.
11. Children
Our Site and services are not directed at individuals under the age of 16 (or higher where required by local law). We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will take steps to delete such information.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the Site, or the law. The "Last updated" date at the top will be revised when we make material changes. We encourage you to review this page periodically. Where required by law, we will seek your consent or provide additional notice for material changes.
13. Contact
For any questions about this Privacy Policy or our processing of your personal data, please contact us at:
Dhorxellvortgrax
206 1st Ave, New York, NY 10009, United States
Email: admin@dhorxellvortgrax.world
Phone: +12122538686