Privacy Policy
1. Scope
This Policy explains how we process personal data when you visit crizelonkhol.world, submit forms, or purchase Vasqelora food supplements. It aligns with the EU General Data Protection Regulation (GDPR) where applicable and with the Australian Privacy Act 1988 (Cth) where it applies to our activities.
2. Data we collect
- Identity and contact data: name, email address, optional phone number, delivery address when you place an order.
- Transaction data: items ordered, payment status references (card data is handled by the payment processor, not stored on our servers).
- Technical data: IP address, browser type, device identifiers, pages viewed, and timestamps.
- Communication content: text you enter in message fields.
- Cookie-related data as described in the Cookie Policy.
3. Purposes and legal bases (GDPR)
- Contract performance: processing orders, delivery, invoices, and support (Art. 6(1)(b) GDPR).
- Legitimate interests: fraud prevention, website security, aggregated analytics where permitted, and business correspondence (Art. 6(1)(f) GDPR), balanced against your rights.
- Consent: optional marketing messages and non-essential cookies where we ask you to opt in (Art. 6(1)(a) GDPR).
- Legal obligation: tax, accounting, and regulatory record-keeping (Art. 6(1)(c) GDPR).
4. Australian Privacy Principles
We collect personal information only for disclosed purposes, keep it secure, and provide access and correction pathways consistent with the Australian Privacy Principles. Where we disclose information overseas (for example, EU-based hosting), we take reasonable steps to ensure recipients handle data in line with this Policy.
5. Recipients and processors
We may share data with payment service providers, logistics partners, email delivery services, IT hosting providers, and professional advisers. Each processor is bound by written terms requiring confidentiality and security measures.
6. International transfers
If data leaves the European Economic Area, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions, unless an exception applies.
7. Retention
- Order and accounting records: up to seven years after the end of the financial year in which the transaction occurred, unless a longer period is required by law.
- Marketing consents and related logs: until you withdraw consent, then deleted or anonymised within ninety days unless a legal claim requires retention.
- Support tickets: up to three years after closure unless linked to an active contract or dispute.
- Server logs: typically rotated within ninety days unless needed for security investigations.
8. Security measures
We apply HTTPS transport encryption, access controls, least-privilege administration, malware monitoring on endpoints used for business operations, and periodic review of subprocessors. No online system is completely secure; please use strong passwords and protect your devices.
9. Your rights (GDPR)
Depending on your location, you may request access, rectification, erasure, restriction of processing, data portability, and object to processing based on legitimate interests. You may withdraw consent at any time without affecting prior lawful processing. You may lodge a complaint with your local supervisory authority.
10. Australian access and complaints
You may request access to or correction of your personal information. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).
11. Children
Our services are directed at adults. We do not knowingly collect data from children under sixteen without parental authority.
12. Automated decision-making
We do not use solely automated decisions that produce legal or similarly significant effects on you.
13. Contact
Postal address: 510 Payneham Rd, Felixstow SA 5070, Australia. Data protection correspondence identifiers (plain text): info@crizelonkhol.world, contact@crizelonkhol.world, support@crizelonkhol.world, help@crizelonkhol.world.
14. Australian operations and product category
Crizelonkhol is operated from South Australia. Vasqelora is offered only as a food supplement. We do not collect health data for profiling users around diseases or conditions, and we do not use the site to deliver personalised medical guidance. Where Australian law classifies similar goods as listed or registered medicines, only the information printed on the retail pack and the Therapeutic Goods Administration (TGA) entry for that specific article is authoritative.
15. Digital marketing, cookies, and advertising platforms
If we or partners run online advertising, personal data may be processed for measurement when you consent to analytics or marketing cookies. Campaigns for dietary supplements are configured to avoid sensitive health targeting, unverifiable superiority claims, and implications of disease treatment, in line with Google Ads policies for dietary supplements and comparable network rules. Withdrawing marketing consent limits future ad cookies but does not erase lawfully retained transaction records.