Data Controller
Trizelonzak.world, operating from 350 Parnassus Ave, Ste 100, San Francisco, CA 94117, USA, serves as the data controller responsible for the collection, processing, and protection of your personal data. We are committed to transparency and compliance with applicable data protection regulations including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant frameworks.
For any inquiries regarding your personal data or this policy, please contact us at question@trizelonzak.world or write to our physical address. We aim to respond to all data-related requests within thirty (30) days.
Data We Collect
We collect personal data that you voluntarily provide and data that is automatically generated when you interact with our website. The categories of personal data we process include:
- Identity data: Your full name, title, and any identifiers you choose to provide when placing orders or contacting us.
- Contact data: Email address, telephone number, postal address, and other contact details necessary for order fulfillment and communication.
- Technical data: IP address, browser type and version, operating system, device type, unique device identifiers, and approximate geographic location derived from your IP.
- Usage data: Pages visited, time spent on each page, navigation paths, click patterns, and interaction with our content and features.
- Communication data: Messages, inquiries, feedback, and correspondence you send via our contact forms, email, or other channels.
- Transaction data: Order history, payment information (processed securely by third-party payment providers), and shipping details.
Purposes of Processing
We process your personal data for the following lawful and clearly defined purposes:
- To process, fulfill, and deliver your orders and provide related customer service.
- To respond to your inquiries, support requests, and feedback in a timely manner.
- To send transactional communications such as order confirmations, shipping updates, and receipts.
- To improve our website, products, and services through analysis of usage patterns and feedback.
- To comply with legal obligations, including tax, accounting, and regulatory requirements.
- To protect our rights, prevent fraud, and ensure the security of our systems and users.
- To send marketing communications only where you have given explicit consent.
Legal Basis (GDPR)
Under the General Data Protection Regulation, we process your data based on one or more of the following legal grounds:
- Consent: Where you have given clear, specific, and informed consent for particular processing activities.
- Contract performance: Where processing is necessary to fulfill our contractual obligations to you.
- Legitimate interests: Where we have legitimate business interests that are not overridden by your rights, such as improving our services, preventing fraud, and ensuring security.
- Legal obligation: Where we are required to process data to comply with applicable laws.
Data Retention
We retain personal data only for as long as necessary to achieve the purposes for which it was collected or as required by law. Our retention periods are as follows:
- Order data: Seven (7) years for legal, tax, and accounting compliance.
- Contact form and inquiry data: Two (2) years from the date of last contact, or until you request deletion.
- Technical and usage logs: Twelve (12) months unless a longer retention is required for security or legal purposes.
- Marketing consent records: Until you withdraw consent or for three (3) years from last interaction.
You may request deletion of your data at any time, subject to our legal obligations to retain certain information.
Your Rights
Under GDPR and applicable data protection laws, you have the following rights:
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure: Request deletion of your data where applicable.
- Right to restrict processing: Request that we limit how we use your data in certain circumstances.
- Right to data portability: Receive your data in a structured, machine-readable format.
- Right to object: Object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent: Withdraw consent at any time where processing is based on consent.
- Right to lodge a complaint: Lodge a complaint with a supervisory authority in your jurisdiction.
To exercise these rights, contact us at question@trizelonzak.world or 350 Parnassus Ave, Ste 100, San Francisco, CA 94117, USA. We will respond within thirty (30) days.
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes:
- Encryption of data in transit using TLS/HTTPS.
- Secure storage with access controls and encryption at rest where applicable.
- Regular security assessments and updates to our systems.
- Limited access to personal data on a need-to-know basis.
- Training of personnel on data protection best practices.
Data Sharing
We may share your data with trusted third parties who assist our operations, including payment processors, shipping providers, and service providers who assist with website hosting and analytics. We do not sell your personal data. Any transfers outside the European Economic Area are protected by appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
Contact
For privacy-related inquiries: question@trizelonzak.world. Address: 350 Parnassus Ave, Ste 100, San Francisco, CA 94117, USA.