Privacy Policy

Quiphralkhak ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a purchase from us.

This policy complies with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

1. Data Controller Information

The data controller responsible for your personal data is:

Quiphralkhak
1820 St Charles St
Fort Benton, MT 59442
United States
Email: help@quiphralkhak.world

2. Information We Collect

2.1 Personal Data You Provide

When you place an order or contact us, we may collect:

• Full name
• Email address
• Phone number (if provided)
• Shipping and billing address
• Payment information (processed securely by third-party payment processors)
• Order history and preferences
• Communications and correspondence with us

2.2 Automatically Collected Data

When you visit our website, we may automatically collect:

• IP address and approximate location
• Browser type and version
• Operating system
• Pages visited and time spent
• Referring website
• Device information

3. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to fulfill your order and provide our services
• Consent: When you have given explicit consent, such as for marketing communications
• Legitimate Interests: For fraud prevention, security, and improving our services
• Legal Obligation: When required by law, such as tax and accounting requirements

4. How We Use Your Information

We use your personal data for the following purposes:

• Processing and fulfilling your orders
• Sending order confirmations and shipping updates
• Responding to your inquiries and providing customer support
• Improving our website and user experience
• Sending marketing communications (with your consent)
• Complying with legal obligations
• Preventing fraud and maintaining security

5. Data Sharing and Disclosure

We may share your personal data with:

• Service Providers: Third parties who assist us with order fulfillment, payment processing, shipping, and email services
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal data to third parties.

6. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by relevant authorities
• Other legally recognized transfer mechanisms

7. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Specifically:

• Order Data: 7 years for tax and accounting purposes
• Account Data: Until you request deletion
• Marketing Data: Until you withdraw consent
• Website Analytics: 26 months

8. Your Rights

Under GDPR and other applicable laws, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restriction: Request limitation of processing
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us at help@quiphralkhak.world. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• SSL/TLS encryption for data transmission
• Secure storage with access controls
• Regular security assessments
• Employee training on data protection
• Incident response procedures

10. Cookies

We use cookies and similar technologies on our website. For detailed information about our cookie practices, please review our Cookie Policy.

11. Children's Privacy

Our website is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

13. Complaints

If you have concerns about our data processing practices, you have the right to lodge a complaint with a supervisory authority. For EU residents, you may contact your local Data Protection Authority.