Privacy Policy

Last updated:

1. Introduction

Welcome to Ghexoranphel. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website ghexoranphel.world and purchase our products, including Tonarevia.

This policy is compliant with the General Data Protection Regulation (GDPR) (EU) 2016/679 and other applicable data protection laws.

2. Data Controller Information

The data controller responsible for your personal data is:

  • Company Name: Ghexoranphel
  • Address: Galway Rd, Farrannamartin, Tuam, Co. Galway, H54 F799, Ireland
  • Email: serviceteam@ghexoranphel.world
  • Country: Ireland

3. Personal Data We Collect

We may collect the following categories of personal data:

3.1 Information You Provide

  • Identity Data: Full name
  • Contact Data: Email address, phone number (optional), delivery address
  • Transaction Data: Order details, payment information
  • Communication Data: Messages and correspondence with us

3.2 Information Collected Automatically

  • Technical Data: IP address, browser type and version, time zone setting, operating system
  • Usage Data: Information about how you use our website
  • Cookie Data: As described in our Cookie Policy

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contract Performance: To fulfill orders and provide services you have requested
  • Consent: When you have given explicit consent for specific processing activities
  • Legitimate Interests: For business operations, fraud prevention, and improving our services
  • Legal Obligation: To comply with applicable laws and regulations

5. Purposes of Data Processing

We use your personal data for the following purposes:

  • Processing and fulfilling your orders
  • Communicating with you about your orders and inquiries
  • Providing customer support
  • Sending order confirmations and shipping updates
  • Improving our website and services
  • Complying with legal obligations
  • Preventing fraud and ensuring security
  • Marketing communications (only with your consent)

6. Where We Get Your Personal Data

We collect personal data from:

  • You: When you place an order, contact us, or submit information via our forms
  • Your device/browser: When you browse our website (e.g., IP address, browser details)
  • Service providers: Limited data from payment processors and delivery partners (e.g., payment status or delivery updates)

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Order Data: Retained for 7 years to comply with tax and accounting requirements
  • Communication Data: Retained for 3 years after the last interaction
  • Marketing Consent: Until you withdraw your consent
  • Technical Data: Retained for up to 26 months for analytics purposes

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right of Access: Request a copy of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your personal data
  • Right to Restriction: Request limitation of processing
  • Right to Data Portability: Receive your data in a portable format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time
  • Right to Lodge a Complaint: File a complaint with a supervisory authority

To exercise any of these rights, please contact us at serviceteam@ghexoranphel.world. We will respond to your request without undue delay and within the time limits required by applicable law.

9. Direct Marketing

Where we send marketing communications, we do so only where we have a valid legal basis (for example, your consent). You can withdraw your consent or object to direct marketing at any time by contacting us at serviceteam@ghexoranphel.world.

10. Data Sharing and Disclosure

We may share your personal data with:

  • Service Providers: Payment processors, shipping companies, and web hosting providers who assist in our operations
  • Legal Requirements: When required by law, court order, or governmental authority
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal data to third parties.

11. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When this occurs, we use appropriate safeguards required by law, such as Standard Contractual Clauses approved by the European Commission, and apply additional measures where appropriate.

12. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encryption of data in transit using SSL/TLS
  • Secure storage systems with access controls
  • Regular security assessments and updates
  • Staff training on data protection

13. Automated Decision-Making

We do not use your personal data to make decisions based solely on automated processing (including profiling) that produce legal effects concerning you or similarly significantly affect you.

14. Children's Privacy

Our website and products are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

15. Updates to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

16. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

  • Email: serviceteam@ghexoranphel.world
  • Address: Galway Rd, Farrannamartin, Tuam, Co. Galway, H54 F799, Ireland

17. Supervisory Authority

If you are not satisfied with our response or believe we are processing your data unlawfully, you have the right to lodge a complaint with the Data Protection Commission (Ireland) or your local supervisory authority.

You can find contact details for the Data Protection Commission (Ireland) on its website: https://www.dataprotection.ie/