Privacy Policy

1. Introduction

Ghiphareexal ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website ghiphareexal.world and make purchases from us.

We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws. By using our website, you consent to the data practices described in this policy.

2. Data Controller

The data controller responsible for your personal data is:

Ghiphareexal
Sophus Lies vei 2
1523 Moss
Norway
Email: partnership@ghiphareexal.world

3. Information We Collect

3.1 Personal Data You Provide

We collect information that you voluntarily provide when you:

• Place an order through our website
• Contact us via email or contact forms
• Subscribe to our communications

This information may include:

• Full name
• Email address
• Phone number (if provided)
• Shipping and billing address
• Payment information
• Order history
• Communications with us

3.2 Automatically Collected Data

When you visit our website, we may automatically collect:

• IP address
• Browser type and version
• Operating system
• Referring website
• Pages visited and time spent
• Date and time of visits
• Device information

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to fulfill your orders and provide our services
• Consent: When you have given explicit consent for specific processing activities
• Legitimate Interests: For business operations, security, and improvement of our services
• Legal Obligation: When required to comply with applicable laws

For users in Norway, processing is carried out in accordance with the GDPR as implemented through the Norwegian Personal Data Act (personopplysningsloven).

5. How We Use Your Information

We use the collected information for the following purposes:

• Processing and fulfilling your orders
• Communicating with you about your orders and inquiries
• Providing customer support
• Sending order confirmations and shipping updates
• Improving our website and services
• Analyzing website usage and trends
• Preventing fraud and ensuring security
• Complying with legal obligations
• Marketing communications (with your consent)

We do not use your personal data for automated decision-making that produces legal or similarly significant effects.

6. Data Sharing and Disclosure

We may share your personal data with:

• Service Providers: Third parties who assist in order fulfillment, payment processing, shipping, and website hosting
• Legal Authorities: When required by law or to protect our legal rights
• Business Transfers: In connection with any merger, sale, or transfer of business assets

We do not sell your personal data to third parties. All service providers are contractually obligated to protect your data and use it only for specified purposes.

Where we engage data processors, we enter into data processing agreements in line with Article 28 GDPR.

7. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When such transfers occur, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other legally approved transfer mechanisms

8. Data Retention

We retain your personal data for as long as necessary to:

• Fulfill the purposes outlined in this policy
• Comply with legal obligations
• Resolve disputes and enforce agreements

Specific retention periods:

• Order data: 7 years (for accounting and tax purposes)
• Marketing preferences: Until consent is withdrawn
• Website analytics: 26 months
• Customer support communications: 3 years

Where litigation, fraud prevention, or regulatory investigations require longer storage, data may be retained for the duration required to establish, exercise, or defend legal claims.

9. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to certain processing activities
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Lodge a Complaint: File a complaint with a supervisory authority

To exercise your rights, contact us at partnership@ghiphareexal.world. We will respond within 30 days.

If we have reasonable doubts about your identity, we may request additional information to verify the request before processing it.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• SSL/TLS encryption for data transmission
• Secure server infrastructure
• Access controls and authentication
• Regular security assessments
• Employee training on data protection

While we strive to protect your data, no method of transmission over the Internet is completely secure. We cannot guarantee absolute security.

11. Cookies

Our website uses cookies and similar technologies. Non-essential cookies are used only after your consent. For details, including how to withdraw consent, please see our Cookie Policy.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

13. Children's Privacy

Our website is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a minor, please contact us immediately.

14. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy regularly.

Where required by law, we will notify users of material changes through appropriate channels before changes take effect.