Privacy Policy

1. Introduction

Ghodexarchondroz ("we," "us," or "our"), located at 85 Broad St, New York, NY 10004, USA, is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website ghodexarchondroz.world (the "Website") and use our services.

This policy is designed to comply with the General Data Protection Regulation (GDPR — EU Regulation 2016/679), the California Consumer Privacy Act (CCPA), and other applicable data protection laws. By accessing or using our Website, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy.

2. Data Controller

The data controller responsible for your personal data is:

Ghodexarchondroz
85 Broad St, New York, NY 10004, USA
Email: help-desk@ghodexarchondroz.world

If you have any questions or concerns about how we process your personal data, you may contact us at the email address above.

3. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity Data: Full name as provided in the order form.
Contact Data: Email address and, optionally, phone number.
Communication Data: Messages and correspondence submitted through the order form.
Technical Data: IP address, browser type and version, operating system, time zone setting, browser plug-in types and versions, device information, and pages visited on our Website.
Usage Data: Information about how you use our Website, including pages viewed, time spent on pages, referring URLs, and navigation paths.
Consent Data: Records of the consent you have given, including cookie preferences and GDPR consent timestamps.

4. How We Collect Your Data

We collect data through the following methods:

Direct interactions: When you fill out and submit the order form on our Website, including your name, email, optional phone number, and message.
Automated technologies: As you navigate our Website, we may automatically collect Technical Data and Usage Data through cookies, server logs, and similar technologies.
Cookie consent: Through our cookie consent mechanism, which records your preferences regarding non-essential cookies.

5. Purposes and Legal Basis for Processing

We process your personal data for the following purposes and legal bases:

Order Processing (Contract Performance): To process and fulfill your order requests, communicate with you about your order, and provide customer support.
Website Operation (Legitimate Interest): To administer, maintain, and improve our Website, ensure security, and prevent fraud.
Analytics (Consent): To analyze how our Website is used and improve user experience, using analytics cookies that are only activated when you provide explicit consent.
Marketing (Consent): To deliver relevant information about our products, only when you have opted in through our cookie preferences.
Legal Compliance (Legal Obligation): To comply with applicable laws, regulations, and legal processes.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

Order data: Retained for up to 3 years after the last interaction to comply with legal, accounting, and regulatory requirements.
Technical/Usage data: Retained for up to 26 months for analytics purposes.
Cookie consent records: Retained for up to 12 months, after which you will be asked to renew your preferences.
Communication records: Retained for up to 2 years after the last exchange.

After the retention period expires, your data will be securely deleted or anonymized so that it can no longer be associated with you.

7. Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your data with:

Service providers: Trusted third-party providers who assist us with website hosting, email delivery, analytics, and payment processing, bound by data processing agreements.
Legal authorities: When required by applicable law, court order, or government regulation.
Business transfers: In connection with any merger, acquisition, or sale of assets, provided the receiving party agrees to protect your data in a manner consistent with this policy.

All third-party processors are carefully vetted and contractually obligated to process your data only on our instructions and in compliance with applicable data protection laws.

8. International Data Transfers

If your data is transferred to processors outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or the recipient's participation in recognized data protection frameworks.

9. Your Rights

Under applicable data protection legislation (including GDPR and CCPA), you have the following rights:

Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of your personal data, subject to legal obligations that may require us to retain certain records.
Right to Restrict Processing: Request that we limit the processing of your data in certain circumstances.
Right to Data Portability: Request your data in a structured, commonly used, machine-readable format.
Right to Object: Object to the processing of your data based on our legitimate interests.
Right to Withdraw Consent: Withdraw any consent you have given at any time, without affecting the lawfulness of prior processing.
Right to Lodge a Complaint: File a complaint with a supervisory authority if you believe your data protection rights have been violated.

To exercise any of these rights, please contact us at help-desk@ghodexarchondroz.world. We will respond to your request within 30 days.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

HTTPS encryption for all data transmitted between your browser and our servers.
Secure storage systems with access controls and authentication.
Regular security assessments and updates.
Employee training on data protection and security practices.
Incident response procedures in the event of a data breach.

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

11. Cookies

Our Website uses cookies and similar tracking technologies. For detailed information about the cookies we use, their purposes, and how to manage your preferences, please see our Cookie Policy.

12. Children's Privacy

Our Website and products are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without verified parental consent, we will take steps to delete that information promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Continued use of our Website after any modifications constitutes your acceptance of the updated policy.