Privacy Policy

1. Introduction

Welcome to Stryxellvyphral. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website or purchase our products.

This policy applies to all personal data processed by Stryxellvyphral in connection with the sale of Enerlavia and related services. We act as the data controller for the personal data we collect.

Processing is carried out in accordance with the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018, which supplements and gives further effect to the GDPR in Ireland.

2. Data Controller Information

The data controller responsible for your personal data is:

• Company Name: Stryxellvyphral
• Address: Cranmore Rd, Abbeyquarter South, Sligo, F91 PTN3, Ireland
• Email: welcome@stryxellvyphral.world
• Website: stryxellvyphral.world

3. Personal Data We Collect

We collect and process the following categories of personal data:

3.1 Information You Provide

• Contact Information: Name, email address, phone number (optional), and delivery address
• Order Information: Products ordered, order history, and transaction details
• Communication Data: Messages, inquiries, and feedback you send us
• Consent Records: Records of consent you have given us

3.2 Information Collected Automatically

• Technical Data: IP address, browser type and version, time zone setting, operating system
• Usage Data: Pages visited, links clicked, navigation paths, time spent on pages
• Cookie and Similar Technologies: Information collected through cookies, local storage (for example, your cookie consent choices stored in your browser), and similar technologies (see our Cookie Policy)

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

• Contract Performance: Processing necessary to fulfill your order and provide our services
• Consent: Processing based on your explicit consent (e.g., marketing communications)
• Legitimate Interests: Processing for our legitimate business interests, such as improving our services, fraud prevention, and website security
• Legal Obligations: Processing necessary to comply with legal requirements

5. Purposes of Data Processing

When you submit our order or contact form, confirming that you have read the Privacy Policy and Terms of Use and agree to processing of personal data as described there covers processing that is necessary to respond to your request, take steps prior to a contract, or perform a contract (such as processing your name, email, and optional phone number for that purpose). Any optional direct marketing (for example, newsletters or promotional emails) will only be sent where we have a valid legal basis, such as your separate consent or applicable soft-opt-in rules where they apply.

We use your personal data for the following purposes:

• Processing and fulfilling your orders
• Sending order confirmations and delivery updates
• Responding to your inquiries and providing customer support
• Improving our website, products, and services
• Preventing fraud and ensuring website security
• Complying with legal and regulatory obligations
• Sending marketing communications where you have opted in or where applicable law allows (and you may opt out at any time)

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Order Data: Retained for 7 years after the order date for tax and accounting purposes
• Marketing Data: Retained until you withdraw consent or unsubscribe
• Technical Data: Retained for up to 12 months for website analytics
• Communication Records: Retained for 3 years after the last communication

After the retention period, data is securely deleted or anonymized.

7. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access: Request a copy of your personal data we hold
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at welcome@stryxellvyphral.world. We will respond to your request without undue delay and in any event within one month of receipt (this may be extended by up to two further months where necessary, in line with GDPR).

If you receive direct marketing from us, you may opt out at any time using the unsubscribe link in marketing emails (where available) or by contacting us at the email address above.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• SSL/TLS encryption for all data transmissions
• Secure storage with access controls
• Regular security assessments and updates
• Staff training on data protection
• Incident response procedures

9. Data Sharing and Transfers

We may share your personal data with:

• Service Providers: Payment processors, delivery services, and hosting providers who help us operate our business
• Legal Authorities: When required by law or to protect our legal rights

We require all third parties to respect your data security and process it in accordance with applicable law. We do not sell your personal data to third parties.

If data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or other mechanisms recognised under GDPR.

Where a processor is established outside the EEA or processes data on our behalf, we assess the transfer and put in place appropriate safeguards as required by law.

10. Automated Decision-Making and Profiling

We do not use solely automated decision-making, including profiling, which produces legal effects concerning you or similarly significantly affects you.

11. Cookies

We use cookies and similar technologies on our website. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

12. Children's Privacy

Our website and services are not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

14. Supervisory Authority and Complaints

If you believe your data protection rights have been infringed, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.

In Ireland, the supervisory authority is the Data Protection Commission (DPC). You can find contact details and guidance on making a complaint on the DPC website: www.dataprotection.ie. The DPC's postal address is: Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland.

Lodging a complaint with the DPC is without prejudice to your right to an effective judicial remedy.