Privacy Policy
This Privacy Policy explains how Phefxirenyxarion.world (“we”, “us”, “our”) collects, uses, stores, and shares personal data when you visit https://phefxirenyxarion.world, purchase PureVanta food supplements, or contact our team. We are the data controller for the processing described here unless we state that a partner acts as an independent controller.
Transparency first
We describe purposes, categories of data, and retention in plain language so you can make informed choices.
UK GDPR alignment
We align with the UK General Data Protection Regulation and the Data Protection Act 2018 as they apply to our activities.
Your control
You can access, correct, delete, restrict, object, and port data where the law provides those rights.
Security by design
We apply technical and organisational measures appropriate to the risk, including access limits and encryption in transit where supported by our systems.
Who we are
Controller: Phefxirenyxarion.world
Registered address: 20 New St, Birmingham B2 4RE, United Kingdom
Email: talk@phefxirenyxarion.world
If you have questions about this Policy or wish to exercise your rights, email us using the address above. We may ask you to verify your identity before we disclose information.
Scope
This Policy applies to personal data we process through our website, email correspondence, customer support channels, and order fulfilment workflows. It does not cover third-party sites that we link to; their policies govern their processing.
Categories of personal data
Depending on your interaction, we may process:
- Identity and contact data: name, delivery address, billing address, email address, phone number if you provide it.
- Transaction data: order history, payment references, delivery status. Card payments may be processed by payment providers; we typically receive confirmation tokens rather than full card numbers.
- Communication content: messages you send through forms, email, or chat, including attachments you choose to share.
- Technical and usage data: IP address, browser type, device type, approximate location derived from IP, pages viewed, referring URLs, and timestamps.
- Cookie and similar data: as described in our Cookie Policy, subject to your preferences where consent is required.
- Marketing preferences: opt-in or opt-out records where applicable.
Purposes and lawful bases
We process personal data only where we have a lawful basis under UK GDPR:
- Contract: to take steps at your request before a contract, perform a contract you enter into (for example, delivering products you purchase), and manage related customer service.
- Legitimate interests: to secure our systems, prevent fraud, analyse aggregated usage to improve the Site, and communicate service updates that are relevant to your account, where not overridden by your rights.
- Legal obligation: to meet accounting, tax, and regulatory requirements, and respond to lawful requests from public authorities.
- Consent: where required for non-essential cookies, certain marketing communications, or other processing we expressly flag as consent-based. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
Automated decision-making
We do not use solely automated decision-making, including profiling, which produces legal or similarly significant effects on you, unless we notify you separately and provide required safeguards.
How long we keep data
Retention depends on context:
- Orders and invoices: for the period required by UK tax and company record-keeping rules, typically at least six years from the end of the accounting period unless a longer period applies.
- Enquiries: generally up to twenty-four months after the last message unless we need to retain information longer for disputes, claims, or regulatory investigations.
- Security logs: on a rolling basis, often weeks to months unless an incident requires longer retention.
- Cookie records tied to consent: as described in the Cookie Policy and vendor documentation.
Sharing and processors
We share personal data with service providers who process it on our instructions, such as hosting providers, email delivery services, payment processors, logistics partners, and analytics vendors where you have consented to analytics. We require appropriate contractual clauses and security expectations. We may disclose information if required by law or to protect rights, safety, and property.
International transfers
If personal data is transferred outside the United Kingdom, we rely on adequacy regulations where available or approved transfer tools such as the UK International Data Transfer Agreement or Addendum, supplemented by risk assessments and supplementary measures where appropriate.
Your rights
Subject to conditions in UK GDPR, you may have the right to access, rectify, erase, restrict processing, object to processing based on legitimate interests or for direct marketing, and receive a copy of data you provided in a portable format. You may lodge a complaint with the Information Commissioner’s Office (ICO). We encourage you to contact us first so we can resolve concerns promptly.
Children
Our services are directed at adults. We do not knowingly collect personal data from children without appropriate parental authority.
Changes
We may update this Policy to reflect legal, technical, or business changes. The “as of” date at the top is set dynamically when you view the page; substantive edits may also be described in order emails or on the Site where appropriate.