Privacy Policy

1. Introduction

Queblornoezepil.world ("we," "our," or "us") is committed to protecting your privacy and handling your personal data with care and transparency. This comprehensive Privacy Policy explains in detail how we collect, use, disclose, store, and safeguard your information when you visit our website queblornoezepil.world, place orders, subscribe to our communications, or otherwise interact with our services.

Our policy is designed to comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws. We believe that you have the right to understand and control how your personal information is used.

2. Data Controller

The data controller responsible for your personal data is:

For any questions regarding this policy or your personal data, please contact us using the information above.

3. Information We Collect

We may collect the following categories of personal data through various channels:

• Identity data: Your first and last name, title, and date of birth when provided.
• Contact data: Email address, telephone number, postal address, and billing address.
• Technical data: IP address, browser type and version, time zone, operating system, device information, and unique device identifiers.
• Usage data: Information about how you use our website, including pages visited, time spent, click paths, and navigation patterns.
• Communication data: Messages, inquiries, and correspondence you send to us via contact forms, email, or other channels.
• Transaction data: Details of purchases, payment information, and order history.
• Marketing data: Your preferences regarding marketing communications and interests.

4. Purposes of Processing

We process your personal data for the following purposes, each supported by a lawful basis:

• To respond to your inquiries, fulfill your requests, and provide customer support.
• To process and manage orders, payments, and deliveries.
• To send order confirmations, shipping updates, and service-related communications.
• To improve our website, products, and services through analytics and feedback.
• To comply with legal obligations, including tax, regulatory, and law enforcement requirements.
• To send marketing communications, newsletters, and promotional offers (only with your explicit consent).
• To ensure the security of our systems, prevent fraud, and protect against unauthorized access.
• To personalize your experience and provide relevant content and recommendations.

5. Legal Basis

We process your personal data based on one or more of the following legal grounds:

• Consent: Where you have given clear consent for specific processing activities.
• Contract: Where processing is necessary to perform a contract with you or to take pre-contractual steps.
• Legitimate interests: Where we have a legitimate interest that is not overridden by your rights (e.g., improving our services, fraud prevention).
• Legal obligation: Where we must process data to comply with the law.

6. Retention Periods

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

• Contact form submissions: Up to 24 months from the date of your last interaction.
• Order and transaction data: 7 years for tax, accounting, and legal compliance.
• Analytics data: Up to 26 months in aggregated and anonymized form.
• Marketing preferences: Until you withdraw consent or unsubscribe.
• Legal and regulatory records: As required by applicable law.

You may request earlier deletion of your data where we are not legally required to retain it.

7. Your Rights (GDPR and CCPA)

Under applicable data protection laws, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data ("right to be forgotten") in certain circumstances.
• Right to restrict processing: Request that we limit how we use your data in certain situations.
• Right to data portability: Receive your data in a structured, commonly used, machine-readable format.
• Right to object: Object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: Withdraw consent at any time where consent was the legal basis.
• Right to lodge a complaint: Lodge a complaint with a supervisory authority (e.g., your local data protection authority).

To exercise any of these rights, please contact us at admin@queblornoezepil.world. We will respond within 30 days.

8. Data Sharing

We do not sell your personal data. We may share your data with:

• Service providers: Payment processors, hosting providers, email service providers, and analytics providers who assist us in operating our business. All such processors are bound by data processing agreements and strict confidentiality obligations.
• Legal and regulatory bodies: When required by law, court order, or to protect our rights and safety.
• Professional advisers: Lawyers, auditors, and insurers where necessary.

We ensure that any third party receiving your data provides adequate safeguards and uses it only for the purposes we specify.

9. Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (HTTPS/TLS) and at rest where appropriate.
• Access controls and authentication mechanisms to limit access to personal data.
• Secure data storage with regular backups.
• Regular security assessments and vulnerability testing.
• Staff training on data protection and security best practices.
• Incident response procedures in the event of a data breach.

10. International Transfers

If we transfer your data outside the European Economic Area (EEA), we ensure adequate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or equivalent measures under applicable law.

11. Children

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately so we can delete it.

12. Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Your continued use of our services after any changes constitutes acceptance of the updated policy.