Privacy Policy

Last updated: March 7, 2026

Ghalmarevord ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website ghalmarevord.world and use our services.

1. Data Controller Information

The data controller responsible for your personal data is:

2. Information We Collect

2.1 Personal Data You Provide

We collect information that you voluntarily provide to us when you:

• Place an order through our website
• Contact us via email or contact forms
• Subscribe to our newsletter (if applicable)
• Create an account (if applicable)

This information may include:

• Name
• Email address
• Phone number (optional)
• Shipping and billing address
• Payment information (processed securely by third-party payment processors)
• Any messages or communications you send us

2.2 Automatically Collected Data

When you visit our website, we may automatically collect certain information, including:

• IP address
• Browser type and version
• Operating system
• Referring website
• Pages viewed and time spent on pages
• Date and time of access
• Device information

3. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to fulfill orders and provide requested services
• Consent: When you have given explicit consent for specific processing activities (e.g., marketing communications)
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services and website security
• Legal Obligations: Processing required to comply with applicable laws and regulations

4. Purpose of Data Processing

We use your personal data for the following purposes:

• Processing and fulfilling your orders
• Communicating with you about your orders, inquiries, and requests
• Providing customer support
• Improving our website, products, and services
• Sending marketing communications (with your consent)
• Complying with legal obligations
• Protecting against fraudulent or illegal activity
• Analyzing website usage and performance

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Order Information: Retained for 7 years after the last transaction for tax and accounting purposes
• Customer Communications: Retained for 3 years after the last interaction
• Marketing Consent Records: Retained for the duration of consent plus 3 years
• Website Analytics Data: Retained for up to 26 months

After the retention period expires, your data will be securely deleted or anonymized.

6. Data Sharing and Disclosure

We may share your personal data with:

• Service Providers: Third-party companies that perform services on our behalf (payment processors, shipping carriers, email service providers)
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with any merger, sale, or acquisition of our business

We do not sell your personal data to third parties.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside of your residence, including countries that may not provide the same level of data protection. When we transfer data internationally, we implement appropriate safeguards such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other legally approved transfer mechanisms

8. Your Rights Under CCPA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with the following rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, purposes for collection, and categories of third parties with whom we share your information
• Right to Delete: Request deletion of your personal information, subject to certain exceptions
• Right to Correct: Request correction of inaccurate personal information we maintain about you
• Right to Opt-Out of Sale or Sharing: We do not sell personal information. We do not share personal information for cross-context behavioral advertising
• Right to Limit Use of Sensitive Personal Information: Request that we limit our use of your sensitive personal information to certain purposes
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights

To exercise your CCPA rights, please contact us using the information in Section 1. We will verify your identity before processing your request. You may designate an authorized agent to make a request on your behalf. California residents may appeal our response to a request by contacting us.

9. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restriction: Request limitation of processing your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: File a complaint with a supervisory authority

To exercise any of these rights, please contact us using the information provided in Section 1.

10. Your Rights Under Other U.S. State Laws

Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws may have similar rights (e.g., access, correction, deletion, opt-out of targeted advertising). Contact us to exercise these rights. We will respond in accordance with applicable law.

11. Data Security

We implement appropriate technical and organizational security measures to protect your personal data, including:

• SSL/TLS encryption for data transmission
• Secure storage with access controls
• Regular security assessments and updates
• Employee training on data protection
• Limited access to personal data on a need-to-know basis

Despite our efforts, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

12. Cookies

Our website uses cookies and similar tracking technologies. For detailed information about the cookies we use and your choices regarding cookies, please see our Cookie Policy.

13. Children's Privacy

Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information.

14. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policies of any third-party websites you visit.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

16. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: