Legal · Data protection

Privacy Policy

This document is current as of , based on your device calendar.

This Privacy Policy explains how Ghelroxxsvyx.world (“we,” “us,” or “our”) processes personal data when you visit https://ghelroxxsvyx.world (the “Site”), inquire about Novara, or interact with our communications. We align with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) where it applies, and with Canada’s Personal Information Protection and Electronic Documents Act (“PIPEDA”) and substantially similar provincial statutes where they apply.

Summary in plain language. We collect only what we need to respond to you, run the Site securely, and meet legal duties. You can ask for access, correction, or deletion where the law allows, and you can withdraw optional cookie consent at any time.

Controller identity and full contact

The data controller for this Site is the business operating under the name below. Use this address for formal notices, privacy requests, and regulatory correspondence.

Ghelroxxsvyx.world
5230 Dundas Street W
Etobicoke, ON M9B 1A8
Canada
Email: talk@ghelroxxsvyx.world

If you reside in the EEA or UK, you may contact us at the same email for GDPR requests. You also have the right to lodge a complaint with your local supervisory authority.

Scope and material scope

This policy covers the Site, order inquiry forms, email correspondence, and optional analytics or marketing tools activated only after consent. It does not govern third-party services that you reach through links leaving our domain; those services have their own policies.

Categories of personal data

Identity and contact Name, email address, and any identifiers you include in free-text fields when you request information about Novara or place an inquiry.

Transaction and communication Order references, timestamps, confirmation messages, and support tickets that you or our systems generate.

Technical and usage IP address (often truncated), user agent, device type, approximate region, referrer, and pages viewed on the Site.

Consent and preferences Cookie choices stored locally, marketing preference flags, and unsubscribe records when you opt out.

Purposes and legal bases (GDPR)

Contract and pre-contract steps: processing inquiries and orders you initiate.
Legitimate interests: network security, fraud prevention, abuse detection, and product improvement based on aggregated analytics where permitted.
Consent: optional analytics and marketing cookies, and certain marketing emails where required.
Legal obligation: accounting, tax, and regulatory record-keeping where applicable.

Recipients and subprocessors

We may share data with hosting providers, transactional email services, customer support tooling, and payment processors where you complete a purchase. Each subprocessor is bound by written terms that require confidentiality and security measures consistent with this policy.

Advertising and measurement partners

When you consent to optional marketing cookies, we or our vendors may use advertising and measurement tools (for example Google Ads, Google Analytics where configured for advertising features, or similar platforms). These tools may process pseudonymous identifiers, IP-derived region, device characteristics, and interaction events to attribute visits, measure campaign performance, build aggregated audiences, or show more relevant ads. Processing is subject to your consent for non-essential technologies and to each vendor’s terms. You can withdraw consent via our cookie banner, use browser or device controls to limit tracking, and consult platform-specific opt-outs (for example Google’s Ads Settings) where available. This policy does not govern independent platforms; refer to their privacy notices for details.

International transfers

Data may be processed in Canada, the United States, the European Union, or the United Kingdom. Where personal data originating in the EEA or UK is transferred to countries without an adequacy decision, we implement Standard Contractual Clauses or other approved mechanisms as required by law.

Retention schedule

Inquiry and customer care records are retained for up to twenty-four (24) months after the last interaction unless a longer period is required by law. Security and access logs are retained on a rolling ninety (90) day basis unless a longer retention is necessary to investigate an incident. Marketing suppression lists are kept indefinitely in hashed or minimal form to honor unsubscribe requests. Cookie lifetimes are specified in our Cookie Policy.

Security measures

TLS encryption for data in transit.
Role-based access controls and authentication for administrative systems.
Vendor review and configuration monitoring.
Incident response procedures for suspected breaches.

Your rights

Subject to applicable law, you may request access, rectification, erasure, restriction of processing, objection to processing, and data portability. You may withdraw consent for optional processing at any time without affecting prior lawful processing. To exercise rights, email talk@ghelroxxsvyx.world. We typically respond within one month; complex requests may be extended as permitted by law.

Children

The Site is not directed to individuals under sixteen (16). We do not knowingly collect personal data from children. If you believe we have received such data, contact us and we will delete it promptly.

Automated decision-making

We do not make decisions based solely on automated processing that produce legal or similarly significant effects concerning you.

Changes to this policy

We may update this Privacy Policy to reflect legal, technical, or business changes. The dynamic date shown at the top of this page reflects when you loaded it; substantive revisions will be posted on the Site and, where appropriate, communicated by email.