Privacy Policy
1. Introduction
At Cenviro, we are deeply committed to protecting your privacy and ensuring the security of your personal information. This comprehensive Privacy Policy has been carefully crafted to provide you with complete transparency regarding how we collect, use, disclose, and safeguard your personal data when you visit our website or interact with our services.
This policy is designed to comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws and regulations. We encourage you to read this document thoroughly to understand our practices and your rights.
2. Data Controller
The data controller responsible for your personal data is Cenviro, operating under the domain Chivrealsrkhul.ddd. Our physical address is 585 Hudson St, New York, NY 10014, USA. For any privacy-related inquiries, concerns, or to exercise your data protection rights, you may contact us directly at question@chivrealsrkhul.world. We are committed to responding to all legitimate requests within the timeframe required by applicable law.
3. Data We Collect
We may collect the following categories of personal data to provide and improve our services:
- Identity data: Your full name, title, and any other identifiers you provide when placing orders or contacting us.
- Contact data: Email address, telephone number, and physical address for order fulfillment and communication purposes.
- Communication data: Messages, inquiries, feedback, and correspondence you send to us through our contact forms or email.
- Technical data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system, device information, and unique device identifiers.
- Usage data: Information about how you use our website, including pages visited, time spent on pages, navigation paths, and interaction with our content.
- Cookie data: As described in detail in our separate Cookie Policy, which forms an integral part of this Privacy Policy.
4. Purposes of Processing
We process your personal data for the following legitimate purposes:
- To process, fulfill, and deliver your orders and respond to your inquiries in an efficient manner.
- To communicate with you regarding order confirmations, shipping updates, and customer support.
- To improve our website, products, and services based on user feedback and analytics.
- To comply with legal obligations, including tax reporting and regulatory requirements.
- To analyze website usage patterns and optimize user experience (with your explicit consent where required).
- To send marketing communications about our products and promotions (only with your consent).
- To prevent fraud, ensure security, and protect the rights and safety of our users.
5. Legal Basis for Processing (GDPR)
For users within the European Economic Area, we process your data based on the following legal grounds:
- Contract: Processing necessary to perform our contract with you, including order fulfillment and customer service.
- Consent: For analytics cookies, marketing communications, and other non-essential processing where we have obtained your explicit consent.
- Legitimate interests: Website security, fraud prevention, improving our services, and communicating important service updates.
- Legal obligation: Compliance with applicable laws, regulations, and legal processes.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Order data: 7 years from the date of transaction, as required for business and tax records.
- Inquiry and communication data: 2 years from the date of last contact.
- Marketing consent records: Until you withdraw consent, after which we will cease processing within 30 days.
- Analytics data: Up to 26 months, or as configured in our analytics tools.
- Server and security logs: 90 days for operational and security purposes.
7. Your Rights
Under GDPR, CCPA, and other applicable laws, you have the following rights:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data in certain circumstances.
- Right to Restriction: Request that we limit how we process your data.
- Right to Data Portability: Receive your data in a structured, commonly used format.
- Right to Object: Object to processing based on legitimate interests or for direct marketing.
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
- Right to Complain: Lodge a complaint with a supervisory authority in your country of residence.
To exercise any of these rights, please contact us at question@chivrealsrkhul.world. We will respond to your request within 30 days as required by law.
8. Data Security
We implement robust technical and organizational measures to protect your personal data:
- HTTPS encryption (TLS/SSL) for all data transmitted between your browser and our servers.
- Secure storage with encryption at rest and strict access controls.
- Regular security assessments and vulnerability testing.
- Comprehensive staff training on data protection and privacy best practices.
- Principle of least privilege: access to personal data is restricted to personnel who need it for their job functions.
9. Data Sharing
We may share your data with trusted third parties only when necessary:
- Payment processors to complete secure transactions.
- Shipping and logistics providers to deliver your orders.
- Service providers who assist our operations under strict data processing agreements.
- Legal authorities when required by law or to protect our rights.
We do not sell, rent, or trade your personal data to third parties for their marketing purposes.
10. International Transfers
If we transfer your data outside the European Economic Area, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, or we rely on adequacy decisions where the destination country provides an adequate level of data protection.
11. Contact
For privacy-related inquiries: question@chivrealsrkhul.world
Address: 585 Hudson St, New York, NY 10014, USA