Privacy Policy

1. Controller Identity and Contact Details

Data Controller:
Zorvexalzar
Diezerstraat 13, 8011 RA Zwolle, The Netherlands
Phone: +31 20 888 5031
Email: write-to-us-@zorvexalzar.world

2. Data We Collect

2.1 Data you provide directly

When you fill in our order or contact form, we collect:

• Full name
• Email address
• Phone number (optional)
• Message content
• Consent record and timestamp

2.2 Data collected automatically

When you visit our website, we may automatically collect:

• IP address and approximate geolocation
• Browser type and version
• Operating system
• Pages visited and time spent on the site
• Referring URL

3. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6 GDPR:

• Performance of a contract (Art. 6(1)(b)): to process your order request and respond to your enquiries.
• Consent (Art. 6(1)(a)): for analytical and marketing cookies, which you may withdraw at any time.
• Legitimate interests (Art. 6(1)(f)): to protect the security and proper functioning of our website.
• Legal obligation (Art. 6(1)(c)): to comply with applicable Dutch and EU law.

4. Purposes of Processing

We process your personal data for the following purposes:

• Processing and responding to your order or enquiry
• Communicating with you about your request
• Improving our website and services (analytics, with consent)
• Displaying relevant content (marketing, with consent)
• Complying with legal and regulatory obligations

5. Data Retention

We retain your personal data for no longer than necessary for the purposes described:

• Order and contact data: 7 years (Dutch tax and commerce law requirements)
• Analytics data: up to 26 months from collection
• Marketing data: until you withdraw consent or 2 years of inactivity
• Server logs: up to 12 months

6. Recipients and Third-Party Sharing

We do not sell your personal data to third parties. We may share data with:

• Payment processors (where applicable), subject to their own privacy policies
• Hosting and IT service providers acting as data processors under GDPR-compliant agreements
• Competent authorities, if required by law

All processors are bound by data processing agreements in accordance with Article 28 GDPR.

7. International Transfers

We primarily process data within the European Economic Area (EEA). If any transfers outside the EEA occur, they are safeguarded by Standard Contractual Clauses (SCCs) approved by the European Commission or another appropriate mechanism under Chapter V GDPR.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Access (Art. 15): Request a copy of the personal data we hold about you.
• Rectification (Art. 16): Request correction of inaccurate or incomplete data.
• Erasure (Art. 17): Request deletion of your data ("right to be forgotten") where applicable.
• Restriction (Art. 18): Request restriction of processing in certain circumstances.
• Portability (Art. 20): Receive your data in a structured, machine-readable format.
• Objection (Art. 21): Object to processing based on legitimate interests or direct marketing.
• Withdraw consent (Art. 7(3)): Withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise these rights, contact us at: write-to-us-@zorvexalzar.world. We will respond within one month of receipt of your request.

9. Right to Lodge a Complaint

If you believe we have not handled your data lawfully, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): www.autoriteitpersoonsgegevens.nl, or with the supervisory authority in your EU country of residence.

10. Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration, including HTTPS encryption, access controls and regular security reviews.

11. Cookies

Our website uses cookies. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The current version with the date of last update is always published on this page. If changes materially affect your rights, we will notify you by a prominent notice on our website.