Privacy Policy

1. Introduction

Zefrylonshalmexx ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website zefrylonshalmexx.world and purchase our products.

This policy is designed to align with UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR) where applicable.

2. Data Controller

Zefrylonshalmexx is the data controller responsible for your personal data. Our contact details are:

Zefrylonshalmexx
Morpeth Rd, Ashington NE63 8QG, United Kingdom
Email: reachus@zefrylonshalmexx.world

3. Information We Collect

We collect information that you provide directly to us, including:

• Personal Identification Information: Name, email address, phone number (if provided), delivery address
• Transaction Information: Order details, payment information (processed securely by third-party payment processors)
• Communication Data: Messages and correspondence you send to us
• Technical Data: IP address, browser type, device information, pages visited, time spent on pages
• Cookie Data: Information collected through cookies and similar technologies (see our Cookie Policy)

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contractual Necessity: To fulfill orders and provide requested services
• Consent: When you have given explicit consent for specific processing activities
• Legitimate Interests: To improve our services, prevent fraud, and communicate relevant information
• Legal Obligation: To comply with applicable laws and regulations

5. How We Use Your Information

We use the information we collect for the following purposes:

• Processing and fulfilling your orders
• Sending order confirmations and shipping notifications
• Responding to your inquiries and customer service requests
• Improving our website and products
• Analyzing website usage and trends
• Detecting and preventing fraud or other harmful activities
• Complying with legal obligations

Where we rely on consent (for example, optional marketing communications or non-essential cookies), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

6. Data Sharing and Disclosure

We may share your personal information with:

• Service Providers: Third-party companies that assist with payment processing, shipping, and website hosting
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with any merger, acquisition, or sale of company assets

We do not sell, trade, or rent your personal information to third parties for their marketing purposes.

7. International Data Transfers

Your information may be transferred to and processed in countries outside the UK and European Economic Area. When we transfer data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses approved by relevant authorities.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including:

• Order and transaction data: 7 years (for legal and tax purposes)
• Customer service communications: 3 years after last contact
• Marketing preferences: Until you withdraw consent
• Website analytics data: 26 months

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restriction: Request limitation of processing in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the details provided below. We aim to respond within one calendar month, subject to legal exceptions.

10. Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

• SSL/TLS encryption for data transmission
• Secure server infrastructure
• Regular security assessments
• Access controls and authentication procedures
• Employee training on data protection

11. Children's Privacy

Our website and products are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

13. Marketing Communications

We only send optional promotional emails where we have an appropriate legal basis. You can opt out of marketing at any time by using the unsubscribe link in email communications or by contacting us directly.

14. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk