Khorlynnphex

Privacy Policy

Last updated: March 2026

1. Data Controller

Khorlynnphex, Rijnstraat 79, 6811 EZ Arnhem, Netherlands. Contact: chat-@khorlynnphex.world, +31649997271.

2. Information We Collect

We may collect the following information:

  • Identification and contact: name, email address, phone number, delivery address
  • Order information: order details, payment information (processed by our payment providers), purchase history
  • Technical data: IP address, browser type, device information, approximate location
  • Usage and cookies: data collected via cookies and similar technologies (see our Cookie Policy)
  • Communications: messages you send us via forms or contact channels

3. How We Use Your Information

We use your information to:

  • Process and fulfil your orders and communicate about them
  • Respond to your inquiries and provide customer support
  • Send service-related messages (e.g. order confirmation, delivery updates)
  • Improve our website, products and services
  • Comply with legal and tax obligations
  • With your consent: send marketing communications and personalize content
  • With your consent: use analytics and advertising tools (e.g. Google Analytics, Google Ads)

4. Legal Basis for Processing (GDPR / AVG)

Under the General Data Protection Regulation (GDPR) and the Dutch Algemene verordening gegevensbescherming (AVG), we process personal data on the following bases:

  • Contract (Art. 6(1)(b)): processing necessary for the performance of a contract (e.g. order processing, delivery)
  • Legal obligation (Art. 6(1)(c)): processing required by law (e.g. tax, accounting, consumer law)
  • Legitimate interests (Art. 6(1)(f)): where necessary for our legitimate interests (e.g. fraud prevention, security, improving our services), provided your interests do not override these
  • Consent (Art. 6(1)(a)): where you have given clear consent (e.g. marketing emails, non-essential cookies, analytics). You may withdraw consent at any time

5. Sharing and Disclosure of Information

We may share your information with:

  • Service providers: payment processors, shipping and logistics partners, IT and hosting providers, under data processing agreements where required
  • Third-party tools: where you have consented, with providers such as Google (Analytics, Ads, Maps) as described in our Cookie Policy
  • Authorities: when required by law or to protect our rights and safety

We do not sell your personal data to third parties.

6. Data Protection

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption of data in transit (e.g. HTTPS) and, where applicable, at rest
  • Access controls and limited access to personal data on a need-to-know basis
  • Secure storage and safe disposal of data
  • Regular review of our security practices

While we strive to protect your information, no method of transmission over the internet is 100% secure.

7. Your Rights and Options

Under GDPR/AVG you have the right to:

  • Access: request a copy of your personal data we hold
  • Rectification: request correction of inaccurate or incomplete data
  • Erasure: request deletion of your data in certain circumstances
  • Restriction: request that we limit processing in certain cases
  • Data portability: receive your data in a structured, machine-readable format where applicable
  • Object: object to processing based on legitimate interests or for direct marketing
  • Withdraw consent: where processing is based on consent, withdraw it at any time

To exercise these rights, contact us using the details in the Contact section. You also have the right to lodge a complaint with a supervisory authority. In the Netherlands, the supervisory authority is the Autoriteit Persoonsgegevens (AP) — autoriteitpersoonsgegevens.nl.

8. International Transfers of Data

Your data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA (e.g. to service providers in third countries), we ensure appropriate safeguards are in place, such as:

  • An adequacy decision by the European Commission, or
  • Standard Contractual Clauses (SCCs) approved by the European Commission, or
  • Other mechanisms permitted under GDPR

9. Data Retention

We retain your data only as long as necessary for the purposes set out in this policy or as required by law:

  • Order and contract data: up to 7 years for tax and legal compliance (Dutch law)
  • Customer service and correspondence: as long as needed to resolve matters, then as required by law
  • Marketing data: until you withdraw consent or object, or we no longer use it for marketing
  • Cookie and analytics data: as stated in our Cookie Policy

After the retention period, data is securely deleted or anonymized.

10. Children's Privacy

Our website and services are not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child under 16, please contact us and we will take steps to delete such information.

11. Third-Party Services

We may use the following third-party services that process personal data. Use of analytics and marketing tools is based on your consent (opt-in) where required by law:

  • Google Ads (conversion tracking and remarketing): to measure ad performance and show relevant ads. Data is processed according to Google’s privacy policy. You can manage ad settings at adssettings.google.com.
  • Google Analytics: to understand how visitors use our site (e.g. pages viewed, traffic sources). We may use IP anonymization. Data is processed according to Google’s privacy policy.
  • Google Maps API: to display maps or location features where applicable. Use of Google Maps is subject to Google’s privacy policy and terms.

These services may set cookies. For details and how to manage them, see our Cookie Policy.

12. Use of Cookies

We use cookies and similar technologies to operate the site, analyze usage, and (with your consent) for advertising. Essential cookies are necessary for the website to function; analytics and marketing cookies are only used with your explicit consent (opt-in). For a full description of the cookies we use and how to manage your preferences, see our Cookie Policy.

13. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the updated policy on this page and update the “Last updated” date. For material changes, we may notify you by email or via a notice on our website. We encourage you to review this policy periodically.

14. Contact Information

For privacy-related requests, questions about this policy, or to exercise your rights:

  • Contact: chat-@khorlynnphex.world
  • Phone: +31649997271
  • Address: Rijnstraat 79, 6811 EZ Arnhem, Netherlands