Privacy Policy

Last updated:

1. Introduction

Quivranxiph ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at https://quivranxiph.world (the "Website") and use our services.

This policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679, the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and other applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

Company: Quivranxiph
Address: 7660 Beverly Blvd, Los Angeles, CA 90036, USA
Email: online@quivranxiph.world
Website: https://quivranxiph.world

3. Personal Data We Collect

We may collect the following categories of personal data:

3.1 Data You Provide Directly

Contact Information: name, email address, telephone number (when voluntarily provided through our order form)
Messages: any message content you submit via our forms
Consent Records: records of consent you have given (e.g., consent to our Privacy Policy and Terms of Use)

3.2 Data Collected Automatically

Technical Data: IP address, browser type and version, operating system, device type, screen resolution
Usage Data: pages visited, time spent on pages, referring website, click patterns
Cookie Data: information collected through cookies and similar technologies (see our Cookie Policy for details)

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6(1):

Purpose	Legal Basis
Processing your orders and inquiries	Performance of a contract (Art. 6(1)(b))
Responding to your messages	Legitimate interest (Art. 6(1)(f))
Analytics and website improvement	Consent (Art. 6(1)(a))
Marketing communications	Consent (Art. 6(1)(a))
Legal compliance	Legal obligation (Art. 6(1)(c))
Website security and fraud prevention	Legitimate interest (Art. 6(1)(f))

5. How We Use Your Data

We use the personal data we collect for the following purposes:

To process and fulfill your orders and service requests
To respond to your inquiries and provide customer support
To send you order confirmations and updates
To improve our website, products, and services
To analyze website usage patterns and optimize user experience
To comply with legal obligations and enforce our terms
To protect our website against fraud, unauthorized access, and other security threats
To send marketing communications (only with your explicit consent)

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your data with the following categories of recipients:

Service Providers: trusted third-party companies that help us operate our website, process payments, or deliver services, bound by contractual data protection obligations
Legal Authorities: when required by law, regulation, legal process, or enforceable governmental request
Business Transfers: in connection with a merger, acquisition, or sale of assets, with appropriate notice to affected users

All third-party service providers are contractually obligated to process your data only for specified purposes and in accordance with applicable data protection laws.

7. International Data Transfers

Your data is primarily processed in the United States. If we transfer data to countries outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

Standard Contractual Clauses (SCCs) approved by the European Commission
Adequacy decisions by the European Commission
Other legally approved transfer mechanisms

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

Order data: retained for 5 years after the last transaction for legal and accounting requirements
Contact form submissions: retained for 2 years to handle follow-up inquiries
Consent records: retained for the duration of the consent plus 3 years afterward
Analytics data: retained for up to 26 months, then anonymized or deleted
Cookie data: retention periods vary by cookie type (see our Cookie Policy)

When data is no longer needed, it is securely deleted or anonymized.

9. Your Rights

Under GDPR and applicable data protection laws, you have the following rights:

Right of Access (Art. 15): request a copy of your personal data we hold
Right to Rectification (Art. 16): request correction of inaccurate or incomplete data
Right to Erasure (Art. 17): request deletion of your personal data ("right to be forgotten")
Right to Restriction (Art. 18): request restriction of processing in certain circumstances
Right to Data Portability (Art. 20): receive your data in a structured, commonly used, machine-readable format
Right to Object (Art. 21): object to processing based on legitimate interests or for direct marketing
Right to Withdraw Consent (Art. 7(3)): withdraw your consent at any time without affecting the lawfulness of prior processing
Right to Lodge a Complaint: file a complaint with a supervisory authority if you believe your rights have been violated

To exercise any of these rights, please contact us at online@quivranxiph.world. We will respond to your request within 30 days.

9.1 Rights for California Residents (CCPA/CPRA)

California residents have additional rights under the CCPA and CPRA:

Right to know what personal information is collected, used, shared, or sold
Right to delete personal information held by businesses
Right to opt-out of the sale or sharing of personal information
Right to non-discrimination for exercising your privacy rights
Right to correct inaccurate personal information
Right to limit the use and disclosure of sensitive personal information

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

HTTPS encryption for all data transmitted between your browser and our servers
Secure storage systems with restricted access controls
Regular security assessments and updates
Employee training on data protection and privacy practices
Data minimization — collecting only what is necessary

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.

11. Children's Privacy

Our Website and products are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will take steps to delete such data promptly. If you believe we may have collected data from a child, please contact us immediately.

12. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will post the updated policy on this page with a revised "Last updated" date. We encourage you to review this policy periodically. Continued use of our Website after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Company: Quivranxiph
Address: 7660 Beverly Blvd, Los Angeles, CA 90036, USA
Email: online@quivranxiph.world
Website: https://quivranxiph.world

We aim to respond to all legitimate inquiries within 30 days. If you feel your concerns have not been adequately addressed, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.