Privacy Policy

Last Updated: January 2025

1. Data Controller

Glyxthorsvryxell
200 Bay Street, Toronto, ON M5J 2J5, Canada
Phone: +1 800-769-2511
Email: online@glyxthorsvryxell.world
Data Protection Officer: Sarah Mitchell

2. Information We Collect

We collect and process the following types of personal data:

• Contact Information: Name, email address, phone number when you submit our contact form or communicate with us
• Technical Data: IP address, browser type, device information, operating system, and referring URLs collected automatically through cookies and similar technologies
• Usage Data: Information about how you interact with our website, including pages visited, time spent on pages, and navigation patterns
• Cookie Data: Information stored through cookies as detailed in our Cookie Policy

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

• Consent: When you provide explicit consent for specific processing activities, such as accepting cookies or submitting contact forms
• Legitimate Interest: For website analytics, security, and improvement of our services
• Legal Obligation: When required to comply with applicable laws and regulations

4. Purpose of Data Processing

We use your personal data for the following purposes:

• Responding to your inquiries and providing customer support
• Improving our website functionality and user experience
• Analyzing website traffic and usage patterns
• Ensuring website security and preventing fraud
• Complying with legal obligations and enforcing our terms
• Sending relevant information when you have provided consent

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service Providers: Third-party vendors who assist with website hosting, analytics, and email services, bound by confidentiality agreements
• Legal Authorities: When required by law, court order, or to protect our legal rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice provided to affected users

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Contact Form Data: Retained for 3 years from the date of submission or until you request deletion
• Cookie Data: Retained according to the duration specified in our Cookie Policy, typically up to 12 months
• Analytics Data: Anonymized and retained for up to 26 months for statistical purposes
• Legal Records: Retained as required by applicable laws and regulations

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restriction: Request limitation of processing of your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise any of these rights, contact Sarah Mitchell, Data Protection Officer, at online@glyxthorsvryxell.world. We will respond within 30 days.

8. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, to protect your data in accordance with GDPR requirements.

9. Security Measures

We implement appropriate technical and organizational measures to protect your personal data:

• SSL/TLS encryption for data transmission
• Secure server infrastructure with regular security updates
• Access controls limiting data access to authorized personnel only
• Regular security assessments and vulnerability testing
• Employee training on data protection and privacy practices

10. Children's Privacy

Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately for deletion.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised "Last Updated" date. We encourage you to review this policy regularly.

12. Contact Information

For questions, concerns, or to exercise your rights regarding your personal data, contact us at:

Glyxthorsvryxell
200 Bay Street, Toronto, ON M5J 2J5, Canada
Email: online@glyxthorsvryxell.world
Phone: +1 800-769-2511