Privacy Policy

Data Controller

Zephyroxghit (Cardevion)
Rajatorpantie 5, 01600 Vantaa, Finland
Email: chat@zephyroxghit.world

Data We Collect

We collect the following categories of personal data:

• Contact data: Name, email address, and message content when you submit the order form
• Technical data: IP address, browser type, device information (when cookies are accepted)
• Usage data: Pages visited, time spent on site (analytics, when consented)

Purposes of Data Use

• To process and fulfill your orders
• To communicate with you regarding your orders
• To improve our website and services
• To comply with legal obligations
• To analyze site usage (with your consent)

Legal Basis for Processing

We process your data based on:

• Contract: Processing necessary to fulfill your order
• Consent: For analytics and marketing (where applicable)
• Legitimate interest: To improve our services and prevent fraud

Data Retention

We retain your data only as long as necessary:

• Order data: 7 years (for legal and accounting purposes)
• Marketing data: Until you withdraw consent
• Analytics data: Up to 26 months

Your Rights (GDPR)

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data (right to be forgotten)
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority (in Finland: Tietosuojavaltuutetun toimisto)

Security Measures

We implement appropriate technical and organizational measures:

• HTTPS encryption for all data transmission
• Secure storage of personal data
• Access controls and authentication
• Regular security assessments

Data Sharing

We do not sell your data. We may share data with:

• Payment processors (for order fulfillment)
• Shipping providers
• Legal authorities when required by law

International Transfers

Data is primarily processed within the EU/EEA. Any transfers outside this area comply with GDPR adequacy decisions or standard contractual clauses.