Privacy Policy

1. Introduction

Ghalmarexli ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit ghalmarexli.world or place an order with us.

This policy is drafted in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Dutch Implementation Act (Uitvoeringswet AVG), and applicable Dutch privacy legislation.

2. Data Controller

The data controller responsible for your personal data is:

3. What Personal Data We Collect

We collect and process the following categories of personal data:

• Contact information: Full name, email address, telephone number, delivery address
• Order information: Products ordered, order date, price, payment method (processed via secure third-party payment provider)
• Communication data: Messages you send us via the order form or email
• Technical data: IP address, browser type, device information, pages visited (via cookies, subject to your consent)

4. Purposes and Legal Bases for Processing

We process your personal data for the following purposes:

• Order fulfilment: Legal basis — performance of a contract (GDPR Art. 6(1)(b))
• Customer service: Legal basis — legitimate interests (GDPR Art. 6(1)(f)) / contractual necessity
• Legal obligations: e.g. tax and accounting records — Legal basis — legal obligation (GDPR Art. 6(1)(c))
• Website analytics: Understanding website usage — Legal basis — consent (GDPR Art. 6(1)(a))
• Marketing communications: Sending product updates where consented — Legal basis — consent (GDPR Art. 6(1)(a))

5. Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected, or as required by applicable law:

• Order and transaction records: 7 years (Dutch fiscal retention obligation)
• Customer service correspondence: 2 years from last contact
• Analytics data: 26 months (standard anonymised analytics cycle)
• Marketing consent records: until consent is withdrawn

6. Sharing of Personal Data

We do not sell your personal data to third parties. We may share your data with:

• Delivery partners: For shipment of your order within the Netherlands
• Payment processors: Securely via PCI-DSS compliant third parties
• IT service providers: Hosting and website infrastructure providers under data processing agreements
• Competent authorities: Where legally required

All third-party processors are bound by GDPR-compliant data processing agreements (DPA).

7. International Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including standard contractual clauses approved by the European Commission.

8. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — to obtain a copy of your personal data
• Right to rectification — to correct inaccurate data
• Right to erasure — to request deletion of your data ("right to be forgotten")
• Right to restriction of processing — to limit how we use your data
• Right to data portability — to receive your data in a structured format
• Right to object — to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent

To exercise any of these rights, please contact us at info-ask@ghalmarexli.world. We will respond within 30 days.

9. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

10. Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration or disclosure. These include SSL/TLS encryption, access controls, and regular security reviews.

11. Cookies

We use cookies and similar technologies on our website. For detailed information, please see our Cookie Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates the most recent revision. Continued use of our website after changes constitutes acceptance of the updated policy.

13. Contact

For any privacy-related questions, please contact us: