Privacy Policy

1. Introduction

Welcome to Tluzarinath ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website tluzarinath.world and purchase our products, including VegaVascular.

This policy is designed to comply with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Danish Data Protection Act (Databeskyttelsesloven), and other applicable data protection laws.

2. Data Controller Information

The data controller responsible for your personal data is:

For any questions regarding this Privacy Policy or our data processing practices, please contact us using the information above.

3. Personal Data We Collect

We collect the following categories of personal data:

3.1 Information You Provide Directly

• Contact Information: Full name, email address, phone number (optional), and delivery address
• Order Information: Products ordered, order history, payment details (processed securely by third-party payment processors)
• Communications: Messages, inquiries, and correspondence you send to us
• Consent Records: Records of consents you have provided

3.2 Information Collected Automatically

• Technical Data: IP address, browser type and version, operating system, device information
• Usage Data: Pages visited, time spent on site, navigation patterns, referral sources
• Cookie Data: Information collected through cookies and similar technologies (see our Cookie Policy)

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under Article 6 of the GDPR:

• Contract Performance (Article 6(1)(b)): Processing necessary to fulfill your order and provide our services
• Consent (Article 6(1)(a)): When you have given explicit consent for specific processing activities, such as marketing communications
• Legitimate Interests (Article 6(1)(f)): For fraud prevention, website security, and improving our services, where these interests do not override your rights
• Legal Obligation (Article 6(1)(c)): When processing is required by law, such as tax and accounting requirements

5. Purposes of Data Processing

We use your personal data for the following purposes:

• Order Processing: To process and fulfill your orders, including shipping and payment processing
• Customer Service: To respond to your inquiries, provide support, and handle complaints
• Communication: To send order confirmations, shipping updates, and important notices about our services
• Marketing: To send promotional content and newsletters (only with your explicit consent)
• Website Improvement: To analyze usage patterns and improve our website functionality and user experience
• Legal Compliance: To comply with legal obligations, including tax and accounting requirements
• Fraud Prevention: To detect and prevent fraudulent transactions and protect our business

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Order Data: Retained for 5 years after the last transaction for accounting and legal purposes, as required by Danish bookkeeping regulations
• Communication Records: Retained for 3 years after the last interaction
• Marketing Preferences: Retained until you withdraw consent or unsubscribe
• Website Analytics: Retained for 26 months
• Cookie Consent Records: Retained for 12 months

After the retention period expires, your data will be securely deleted or anonymized.

7. Data Sharing and Disclosure

We may share your personal data with the following categories of recipients:

7.1 Service Providers

• Payment Processors: To securely process your payments
• Shipping Partners: To deliver your orders
• Web Hosting Providers: To host and maintain our website
• Email Service Providers: To send transactional and marketing emails
• Analytics Providers: To analyze website usage (with your consent)

7.2 Legal Requirements

We may disclose your data when required by law, court order, or governmental authority, or to protect our legal rights.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the business transaction.

We do not sell your personal data to third parties.

8. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place:

• Transfers to countries with an adequacy decision by the European Commission
• Standard Contractual Clauses (SCCs) approved by the European Commission
• Other legally approved transfer mechanisms

You may request a copy of the safeguards in place by contacting us.

9. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access (Article 15): You can request a copy of your personal data we hold
• Right to Rectification (Article 16): You can request correction of inaccurate or incomplete data
• Right to Erasure (Article 17): You can request deletion of your data under certain circumstances ("right to be forgotten")
• Right to Restriction (Article 18): You can request limited processing of your data in certain situations
• Right to Data Portability (Article 20): You can request to receive your data in a structured, machine-readable format
• Right to Object (Article 21): You can object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent (Article 7): Where processing is based on consent, you can withdraw it at any time
• Right Not to Be Subject to Automated Decision-Making (Article 22): You have the right not to be subject to decisions based solely on automated processing

To exercise any of these rights, please contact us at help-center@tluzarinath.world. We will respond to your request within 30 days.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS technology
• Secure storage with access controls and authentication
• Regular security assessments and updates
• Employee training on data protection practices
• Limited access to personal data on a need-to-know basis

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our abilities.

11. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately, and we will take steps to delete such information.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised "Last Updated" date. We encourage you to review this policy periodically. Significant changes will be communicated via email or a prominent notice on our website.

14. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Denmark, the relevant authority is:

We encourage you to contact us first so we can try to resolve your concerns directly.

15. Contact Us

If you have any questions about this Privacy Policy or our data processing practices, please contact us: