1. Introduction
Welcome to Vorthralwhral ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website vorthralwhral.world and use our services.
This policy is designed to comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.
2. Data Controller Information
The data controller responsible for your personal data is:
- Company Name: Vorthralwhral
- Address: 217 1st Ave N, Greybull, WY 82426, United States
- Email: talk@vorthralwhral.world
- Website: https://vorthralwhral.world
3. Information We Collect
3.1 Personal Data You Provide
We may collect personal information that you voluntarily provide when you:
- Place an order through our website
- Subscribe to our newsletter
- Contact us with inquiries
- Create an account on our platform
This information may include:
- Full name
- Email address
- Phone number (optional)
- Billing and shipping address
- Payment information (processed securely by third-party payment processors)
- Any messages or communications you send to us
3.2 Automatically Collected Data
When you visit our website, we may automatically collect certain information, including:
- IP address
- Browser type and version
- Operating system
- Referring website
- Pages visited and time spent on pages
- Date and time of visit
- Device information
4. Legal Basis for Processing (GDPR)
We process your personal data based on the following legal grounds:
- Consent: When you have given explicit consent for processing for specific purposes
- Contract Performance: When processing is necessary to fulfill a contract with you (e.g., processing your order)
- Legal Obligation: When we need to comply with a legal requirement
- Legitimate Interests: When processing is in our legitimate business interests and does not override your rights
5. How We Use Your Information
We use the collected information for the following purposes:
- Processing and fulfilling your orders
- Communicating with you about your orders, inquiries, and requests
- Sending marketing communications (with your consent)
- Improving our website and services
- Analyzing website usage and trends
- Preventing fraud and ensuring security
- Complying with legal obligations
- Enforcing our terms and policies
6. Data Sharing and Disclosure
We may share your personal data with:
- Service Providers: Third parties that assist us with payment processing, shipping, analytics, and marketing services
- Legal Requirements: When required by law, court order, or governmental authority
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- Protection of Rights: To protect our rights, privacy, safety, or property
We do not sell your personal information for money. We may share certain personal information with third parties that help us operate our website and provide services. We may also allow advertising or analytics partners to collect information in connection with cookies and similar technologies, which may be considered "sharing" for cross-context behavioral advertising under the CCPA/CPRA. If this applies, you can opt out as described in the "California Privacy Rights (CCPA/CPRA)" section below.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
- Order Data: Retained for 7 years to comply with tax and accounting requirements
- Marketing Data: Retained until you withdraw consent or unsubscribe
- Website Analytics: Retained for up to 26 months
- Communication Records: Retained for 3 years after the last interaction
8. Your Rights Under GDPR
If you are located in the European Economic Area (EEA), you have the following rights:
- Right of Access: Request a copy of your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your personal data ("right to be forgotten")
- Right to Restriction: Request limitation of processing of your data
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests or direct marketing
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us using the information provided below.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- SSL/TLS encryption for all data transmissions
- Secure storage with access controls
- Regular security assessments and updates
- Employee training on data protection
- Incident response procedures
10. International Data Transfers
Your personal data may be transferred to and processed in countries outside your country of residence. When we transfer data internationally, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions
- Other legally recognized transfer mechanisms
11. Children's Privacy
Our website and services are not intended for children under 13. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information.
We also do not knowingly target our marketing or use of personal information at individuals under 18.
12. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have certain rights regarding your personal information under the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, "CCPA/CPRA").
These rights apply only in circumstances where the CCPA/CPRA is applicable to our business and to the personal information we collect.
12.1 Categories of Personal Information
Depending on how you interact with our website, we may collect the following categories of personal information:
- Identifiers: such as your name and email address
- Customer records / commercial information: such as order information and purchase history
- Internet or other electronic network activity: such as IP address, browser type, device information, and pages visited
- Contact information: such as phone number (if provided) and messages you send to us
- Payment information: payment details processed by third-party payment processors
- Inferences: inferences we make based on your interactions with our website
12.2 Purposes for Collecting and Using Personal Information
We collect and use personal information to:
- Provide and fulfill orders, subscriptions, and customer support
- Process payments and secure transactions
- Send service-related communications and respond to inquiries
- Operate, maintain, and improve our website and services
- Prevent fraud and ensure security
- Analyze usage and trends
- Communicate with you about marketing offers when permitted by applicable law
12.3 Disclosures for Business Purposes
We may disclose the categories of personal information described above to service providers and other parties for business purposes, including payment processing, shipping, analytics, and security.
12.4 Sale or Sharing of Personal Information
We do not sell your personal information for money. However, we may share personal information with advertising or analytics partners that may use cookies and similar technologies to deliver advertisements or measure performance. To the extent this is considered "sale" or "sharing" under the CCPA/CPRA, you can opt out by using the cookie consent tool on our website (for example, rejecting marketing cookies and adjusting marketing/analytics preferences), or by contacting us using the information in the "Contact Us" section below.
12.5 Your Rights
Subject to applicable conditions and limitations, you may have the right to:
- Know and Access: request details about the personal information we collect and how it is used
- Delete: request deletion of your personal information
- Correct: request correction of inaccurate personal information
- Opt out: opt out of "selling" or "sharing" of personal information for targeted advertising (where applicable)
- Limit Use of Sensitive Personal Information: request limitations on certain sensitive personal information (if applicable)
- Non-discrimination: receive a similar level of service and price, subject to lawful differences
- Appeal: appeal certain denials of requests
12.6 How to Exercise Your Rights
To submit a CCPA/CPRA request, please contact us at:
- Email: talk@vorthralwhral.world
You may also use your cookie preferences to opt out of certain marketing or tracking activities, as described in our Cookie Policy.
12.7 Verification and Response Timing
We may need to verify your identity before fulfilling certain requests. We will respond within the timeframes required by the CCPA/CPRA, generally within 45 days. We may charge a reasonable fee in certain limited circumstances, as permitted by law.
13. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date. We encourage you to review this policy periodically to stay informed about how we protect your information.
14. Complaints
If you believe that our handling of your personal information violates applicable law, you may have the right to file a complaint with the relevant regulatory authority. If you are a California resident, you may also have rights under the CCPA/CPRA to appeal certain responses to your requests.