Phivraxnxik.world ("we," "our," or "us") is committed to protecting your personal data with the highest standards of care and transparency. This comprehensive Privacy Policy explains in detail how we collect, use, store, disclose, and protect your information in full compliance with the General Data Protection Regulation (GDPR), the Norwegian Personal Data Act (Personopplysningsloven), and other applicable data protection laws.
Data Controller
The data controller responsible for your personal data is:
Phivraxnxik.world
Operagata 18, 0194 Oslo, Norway
Email: office@phivraxnxik.world
For any questions regarding this policy or your personal data, you may contact us at the above address or email.
Data We Collect
We may collect the following categories of personal data through various channels:
Identity and Contact Data
When you submit an order form, contact form, or create an account, we collect your name, email address, and any message content you provide voluntarily. This information is essential for processing your requests and communicating with you.
Technical and Usage Data
We automatically collect technical data including your IP address, browser type and version, device information, operating system, time zone setting, and pages you visit. This helps us ensure website security, diagnose technical issues, and improve user experience.
Cookie Data
As described in our Cookie Policy, we use cookies and similar technologies. Cookie data may include session identifiers, preferences, and analytics information. You can manage your cookie preferences at any time.
Marketing and Communications Data
If you opt in to receive marketing communications, we may collect your preferences regarding newsletters, promotional offers, and product updates. You may withdraw consent at any time.
Purposes of Processing
We process your data for the following purposes, each supported by a lawful basis:
- To process and fulfill your orders, including payment processing and delivery
- To respond to your inquiries and provide customer support
- To improve our website, products, and services through analytics
- To comply with legal obligations, including tax and accounting requirements
- To send marketing communications (only with your explicit consent)
- To prevent fraud and ensure website security
- To administer and protect our business and website
Legal Basis Under GDPR
We process your personal data based on the following legal grounds:
- Contract performance: Processing necessary to perform our contract with you (e.g., order fulfillment)
- Legitimate interests: Processing necessary for our legitimate interests (e.g., website improvement, security, fraud prevention) where not overridden by your rights
- Consent: Where you have given clear consent for specific processing (e.g., marketing, non-essential cookies)
- Legal obligation: Processing required to comply with applicable laws (e.g., tax records, accounting)
Retention Periods
We retain your data only for as long as necessary to fulfill the purposes for which it was collected:
- Order and transaction data: 7 years (legal requirement for accounting and tax purposes under Norwegian law)
- Contact form submissions: 2 years from last contact
- Marketing consent records: Until you withdraw consent, plus a short period for record-keeping
- Technical and access logs: 12 months
- Cookie data: As specified in our Cookie Policy (typically 12–24 months for persistent cookies)
After the retention period expires, we securely delete or anonymize your data.
Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of access: Request a copy of the personal data we hold about you
- Right to rectification: Request correction of inaccurate or incomplete data
- Right to erasure: Request deletion of your data ("right to be forgotten") where applicable
- Right to restrict processing: Request that we limit how we use your data in certain circumstances
- Right to data portability: Receive your data in a structured, machine-readable format
- Right to object: Object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent: Withdraw consent at any time where processing is based on consent
- Right to lodge a complaint: Lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) or your local supervisory authority
To exercise any of these rights, contact us at office@phivraxnxik.world. We will respond within one month. You may also contact Datatilsynet at www.datatilsynet.no.
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit (HTTPS/TLS)
- Access controls and authentication
- Secure storage and backup procedures
- Regular security assessments
- Staff training on data protection
We do not sell your personal data to third parties. We may share data with trusted service providers who assist us in operating our website and business, subject to strict contractual obligations.
International Transfers
If we transfer your data outside the European Economic Area (EEA), we ensure adequate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or transfers to countries recognized as providing adequate protection. You may request details of these safeguards.
Children
Our website and services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The "Last updated" date in the hero section indicates when the policy was last revised. We encourage you to review this policy periodically. Continued use of our services after changes constitutes acceptance of the updated policy. For material changes, we may notify you by email or through a prominent notice on our website.
Contact
For questions about this Privacy Policy, your personal data, or to exercise your rights, contact us at office@phivraxnxik.world or write to Operagata 18, 0194 Oslo, Norway.