Privacy Policy
Last updated:
1. Introduction
Ghythrelnrex ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website ghythrelnrex.world and purchase our products.
We comply with the General Data Protection Regulation (GDPR), the Irish Data Protection Act 2018, and related privacy rules. We process personal data only where a valid legal basis applies.
2. Data Controller Information
The data controller responsible for your personal data is:
- Company Name: Ghythrelnrex
- Address: 34 Dunlo St, Townparks, Ballinasloe, Co. Galway, H53 F2Y2, Ireland
- Email: customer@ghythrelnrex.world
- Country: Ireland
3. Personal Data We Collect
3.1 Information You Provide
We collect personal data that you voluntarily provide when you:
- Place an order through our website
- Contact us via email or contact forms
- Subscribe to our communications
This may include:
- Full name
- Email address
- Phone number (if provided)
- Delivery address
- Payment information
- Communication content
3.2 Automatically Collected Information
When you visit our website, we may automatically collect certain information, including:
- IP address
- Browser type and version
- Operating system
- Pages visited and time spent
- Referring website
- Device information
4. Legal Basis for Processing
We process your personal data based on the following legal grounds under GDPR:
- Contract Performance: Processing necessary to fulfill orders and provide our services
- Consent: When you have given explicit consent for specific purposes
- Legitimate Interests: For business operations, security, and fraud prevention
- Legal Obligation: When required by applicable laws and regulations
5. How We Use Your Data
We use your personal data for the following purposes:
- Processing and fulfilling your orders
- Communicating about your orders and inquiries
- Providing customer support
- Improving our website and services
- Sending marketing communications (with your consent)
- Complying with legal obligations
- Preventing fraud and ensuring security
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Order Information: 7 years for tax and accounting purposes
- Communication Records: 3 years from last contact
- Marketing Consent: Until consent is withdrawn
- Website Analytics: 26 months
After the retention period, your data will be securely deleted or anonymized.
7. Data Sharing and Disclosure
We may share your personal data with:
- Service Providers: Payment processors, shipping companies, and hosting providers who assist in our operations
- Legal Requirements: When required by law, court order, or governmental authority
- Business Transfers: In connection with a merger, acquisition, or sale of assets
We do not sell your personal data to third parties.
8. International Data Transfers
Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.
8A. Marketing Communications
We send direct marketing emails only where permitted by law and, where required, based on your consent. You can opt out at any time by using the unsubscribe link in our emails or by contacting us.
We keep a suppression list of opted-out contacts to ensure we respect your marketing preferences.
9. Your Rights Under GDPR
As a data subject, you have the following rights:
- Right of Access: Request copies of your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your data ("right to be forgotten")
- Right to Restrict Processing: Request limitation of data processing
- Right to Data Portability: Request transfer of your data to another service
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw previously given consent
To exercise any of these rights, please contact us at customer@ghythrelnrex.world. We will respond within 30 days.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- SSL/TLS encryption for data transmission
- Secure data storage with access controls
- Regular security assessments
- Employee training on data protection
However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
11. Children's Privacy
Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
12. Cookies
We use cookies and similar technologies on our website. For detailed information about our cookie practices, please see our Cookie Policy.
12A. Automated Decision-Making
We do not use your personal data to make solely automated decisions that produce legal or similarly significant effects on you.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
14. Complaints
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority. In Ireland, this is the Data Protection Commission (DPC):
- Website: www.dataprotection.ie
- Address: 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
15. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
- Email: customer@ghythrelnrex.world
- Address: 34 Dunlo St, Townparks, Ballinasloe, Co. Galway, H53 F2Y2, Ireland