Privacy Policy

1. Data Controller & Contact Information

Korevo / Zibralonkhap.world

200 E Randolph St, Chicago, IL 60601, USA

Email: admin@zibralonkhap.world

As the data controller, we are responsible for determining the purposes and means of processing your personal data. You may contact us at any time regarding your privacy rights or questions about this policy.

2. Categories of Personal Data We Collect

We collect the following types of personal data:

• Identity data: Your full name when you place an order or contact us.
• Contact data: Email address, and optionally your phone number and mailing address for order fulfillment.
• Communications data: Content of messages you send to us via contact forms or email.
• Technical data: IP address, browser type and version, device information, time zone, and operating system.
• Usage data: Information about how you navigate our website, including pages visited and actions taken.
• Marketing and communications data: Your preferences for receiving marketing materials from us.

3. Purposes of Data Processing

We process your personal data for the following purposes:

• To process and fulfill your orders, including shipment and delivery.
• To send order confirmations, shipping updates, and customer support communications.
• To respond to your inquiries and provide customer service.
• To comply with legal obligations, including tax reporting and regulatory requirements.
• To improve our website, products, and services through analytics (where you have consented).
• To send marketing communications about our products and promotions (where you have consented).
• To protect against fraud, unauthorized transactions, and other illegal activities.
• To enforce our terms of service and other policies.

4. Legal Basis for Processing (GDPR)

Where the General Data Protection Regulation (GDPR) applies, we process your data based on:

• Contract performance: Processing necessary to fulfill our contract with you (e.g., order fulfillment).
• Legitimate interests: Processing necessary for our legitimate business interests, such as website security, fraud prevention, and improving our services, provided these interests do not override your rights.
• Consent: Where you have given explicit consent for specific processing, such as analytics or marketing communications.
• Legal obligation: Processing required to comply with applicable laws and regulations.

5. Data Retention Periods

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Order and transaction data: Up to 7 years to comply with tax and accounting regulations.
• Customer support communications: Up to 2 years from the date of last contact.
• Marketing preferences: Until you withdraw consent or request erasure.
• Analytics data: Up to 26 months (where consent has been given).
• Technical and usage data: As required for security and operational purposes, typically up to 24 months.
• Cookie consent records: Up to 2 years to demonstrate compliance.

After the retention period expires, we securely delete or anonymize your data.

6. Your Rights Under GDPR and Other Laws

Depending on your location, you may have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data in certain circumstances.
• Right to restrict processing: Request that we limit how we use your data.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent.
• Right to lodge a complaint: Lodge a complaint with a supervisory authority in your country.

To exercise any of these rights, please contact us at admin@zibralonkhap.world. We will respond within 30 days.

7. Security Measures

We implement industry-standard security measures to protect your personal data:

• Encryption of data in transit using HTTPS/TLS.
• Secure servers with access controls and monitoring.
• Restricted access to personal data on a need-to-know basis.
• Regular security assessments and updates.
• Staff training on data protection and privacy.
• Incident response procedures in case of a data breach.

While we strive to protect your data, no method of transmission over the internet is 100% secure. We encourage you to use strong passwords and keep your account credentials confidential.

8. International Data Transfers

Your data may be processed in the United States or other countries where our service providers operate. When we transfer data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission.
• Adequacy decisions where the destination country is deemed to offer adequate protection.
• Binding Corporate Rules where applicable.

9. Third-Party Sharing

We may share your data with trusted third parties only when necessary:

• Payment processors: To complete transactions securely.
• Shipping and logistics partners: To fulfill and deliver orders.
• Analytics providers: To understand website usage (with your consent).
• Legal and regulatory authorities: When required by law.

We do not sell your personal data to third parties. All third-party processors are bound by contractual obligations to protect your data.

10. Children's Privacy

Our website is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The revised policy will be posted on this page with an updated date. We encourage you to review this policy periodically. For material changes, we may notify you by email or through a prominent notice on our website.