Privacy Policy

1. Introduction and Data Controller

Wrozelonphod.world ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or interact with our services. We are the data controller responsible for your personal data under applicable data protection laws, including the General Data Protection Regulation (GDPR).

Contact details: Wrozelonphod.world, 315 Yonge St, Toronto, ON M5B 1L4, Canada. Email: admin@wrozelonphod.world. For any privacy-related enquiries, please contact us using these details.

2. Information We Collect

We collect information that you provide directly to us when you:

• Submit an order or enquiry form, including your name, email address, and any message or special requests you include
• Contact us by email, phone, or through our website
• Subscribe to our newsletter or marketing communications (where applicable)
• Participate in surveys, promotions, or other interactive features

We also automatically collect certain technical and usage information when you visit our website, including your IP address, browser type and version, operating system, referring URLs, pages viewed, time and date of visits, and other diagnostic data. This information helps us understand how our site is used and improve your experience.

3. Purpose and Legal Basis of Processing

We process your personal data for the following purposes:

• Order fulfilment and customer service: To process your orders, respond to enquiries, and provide support. Legal basis: contract performance and legitimate interests.
• Communication: To send order confirmations, shipping updates, and respond to your requests. Legal basis: contract performance.
• Marketing (where you have consented): To send newsletters, offers, and product updates. Legal basis: consent. You may withdraw consent at any time.
• Website improvement: To analyse site usage, fix errors, and improve functionality. Legal basis: legitimate interests or consent (for non-essential cookies).
• Legal and regulatory compliance: To comply with applicable laws, respond to legal requests, and protect our rights. Legal basis: legal obligation or legitimate interests.
• Security: To protect against fraud, abuse, and unauthorized access. Legal basis: legitimate interests.

4. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Specifically:

• Order and transaction data: Up to 7 years for accounting, tax, and legal compliance purposes.
• Contact and enquiry data: Until your request has been fully resolved, and for a reasonable period thereafter for record-keeping.
• Marketing preferences: Until you withdraw your consent or object to processing.
• Technical and analytics data: Typically up to 12 months, unless a longer retention period is required by law.
• Cookies: As specified in our Cookie Policy.

After the retention period expires, we securely delete or anonymise your data where possible.

5. Your Rights Under GDPR and Other Laws

Depending on your location, you may have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): Request deletion of your data, subject to legal exceptions.
• Right to restrict processing: Request that we limit how we use your data in certain circumstances.
• Right to data portability: Receive your data in a structured, commonly used format where technically feasible.
• Right to object: Object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.
• Right to lodge a complaint: You may lodge a complaint with a supervisory authority in your country of residence.

To exercise any of these rights, please contact us at admin@wrozelonphod.world. We will respond within the timeframe required by applicable law (typically 30 days under GDPR).

6. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data. We may share your information with:

• Service providers: Third parties who assist us with hosting, payment processing, email delivery, analytics, and other operational services. These providers are contractually bound to protect your data and use it only for the purposes we specify.
• Legal and regulatory authorities: When required by law, court order, or to protect our rights, safety, or property.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity, subject to this policy.

7. Security Measures

We implement appropriate technical and organisational measures to protect your personal data, including:

• HTTPS encryption for all data transmitted between your browser and our servers
• Secure server infrastructure and access controls
• Restricted access to personal data on a need-to-know basis
• Regular security assessments and updates

While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We encourage you to use strong passwords and protect your account credentials.

8. International Transfers

Your data may be processed in countries outside your country of residence, including countries that may not provide the same level of data protection. When we transfer data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission, adequacy decisions, or other legally recognised transfer mechanisms.

9. Children's Privacy

Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will take steps to delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the nature of our services. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically. Material changes may also be communicated via email or a notice on our website where appropriate.