Privacy Policy

Last updated:

1. Introduction

Phogrynyz ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://phogrynyz.world and use our services.

This policy applies to all visitors, users, and others who access or use our website. By using our website, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller Information

The data controller responsible for your personal data is:

  • Company: Phogrynyz
  • Address: 1095 6th Ave, New York, NY 10036, US
  • Email: team@phogrynyz.world
  • Website: https://phogrynyz.world

3. Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide Directly

  • Full name — provided when you submit our order form
  • Email address — provided when you submit our order form
  • Phone number — optionally provided when you submit our order form
  • Message content — any additional information you include in the form
  • Consent records — your agreement to our Privacy Policy and Terms of Use

3.2 Information Collected Automatically

  • IP address
  • Browser type and version
  • Operating system
  • Referring website
  • Pages visited and time spent on pages
  • Date and time of access
  • Device information (screen resolution, device type)
  • Cookie data (see our Cookie Policy)

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under the General Data Protection Regulation (GDPR):

  • Consent (Article 6(1)(a) GDPR): When you submit a form or accept cookies, you provide your explicit consent.
  • Contractual Necessity (Article 6(1)(b) GDPR): Processing is necessary to fulfill your order or pre-contractual requests.
  • Legitimate Interests (Article 6(1)(f) GDPR): We may process data for website security, fraud prevention, and service improvement, provided this does not override your fundamental rights.
  • Legal Obligation (Article 6(1)(c) GDPR): Processing may be necessary to comply with applicable laws and regulations.

5. How We Use Your Data

We use the personal data we collect for the following purposes:

  • To process and fulfill your orders
  • To respond to your inquiries and messages
  • To send order confirmation and shipping notifications
  • To improve our website, content, and services
  • To ensure the security and proper functioning of our website
  • To comply with legal and regulatory obligations
  • To analyze website traffic and usage patterns (with your consent)

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal data to third parties. We may share your information only in the following circumstances:

  • Service Providers: Trusted third-party companies that assist us with website hosting, payment processing, order fulfillment, and email delivery. These providers are contractually obligated to protect your data and use it only as instructed by us.
  • Legal Requirements: When required by law, regulation, legal process, or governmental request.
  • Protection of Rights: When necessary to protect the rights, safety, or property of Phogrynyz, our users, or others.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of the transaction. You will be notified of any such change.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside your country of residence. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions by the European Commission
  • Other legally recognized transfer mechanisms

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

  • Order data: Retained for up to 5 years after the transaction to comply with tax and accounting regulations.
  • Contact form data: Retained for up to 2 years after the last communication.
  • Cookie consent records: Retained for up to 1 year from the date of consent.
  • Website analytics data: Retained for up to 26 months in anonymized form.

When the retention period expires, we will securely delete or anonymize your personal data.

9. Your Rights Under GDPR

As a data subject, you have the following rights under the GDPR:

  • Right of Access (Article 15): You may request a copy of the personal data we hold about you.
  • Right to Rectification (Article 16): You may request correction of inaccurate or incomplete data.
  • Right to Erasure (Article 17): You may request deletion of your personal data, subject to legal retention obligations.
  • Right to Restriction (Article 18): You may request that we restrict processing of your data in certain circumstances.
  • Right to Data Portability (Article 20): You may request your data in a structured, commonly used, machine-readable format.
  • Right to Object (Article 21): You may object to processing based on legitimate interests or for direct marketing.
  • Right to Withdraw Consent (Article 7(3)): You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority, such as the Information Commissioner's Office (ICO) or your local data protection authority.

To exercise any of these rights, please contact us at team@phogrynyz.world. We will respond to your request within 30 days.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • HTTPS encryption for all data transmitted between your browser and our servers
  • Secure server environments with access controls and firewalls
  • Regular security assessments and vulnerability testing
  • Access limited to authorized personnel only on a need-to-know basis
  • Secure data backup and disaster recovery procedures

While we strive to use commercially acceptable means to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

11. Children's Privacy

Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information promptly.

12. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policies of any third-party websites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. We will post the revised policy on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us: