Privacy Policy

1. Introduction

This Privacy Policy explains how Sharvexxaz ("we," "us," or "our") collects, uses, and protects your personal information. We comply with the EU General Data Protection Regulation (GDPR) and Finnish Data Protection Act.

2. Data Controller

3. Information We Collect

3.1 Information You Provide

• Name and contact details (email, phone, address)
• Order and delivery information
• Payment details (processed by secure third-party providers)
• Communication preferences

3.2 Automatically Collected Data

• IP address and device information
• Browser type and language settings
• Pages visited and interaction data
• Cookie data (see Cookie Policy)

4. Legal Basis for Processing

We process your data based on:

• Consent: When you explicitly agree to data processing
• Contract: To fulfill orders and provide services
• Legal Obligation: To comply with Finnish and EU law
• Legitimate Interest: For business operations and fraud prevention

5. How We Use Your Data

• Processing and delivering your orders
• Customer service and support
• Marketing communications (with consent)
• Website improvement and analytics
• Legal compliance and fraud prevention

6. Data Sharing

We may share your data with:

• Service Providers: Payment processors, shipping companies, email services
• Legal Authorities: When required by Finnish or EU law
• Business Partners: Only with your explicit consent

We never sell your personal data.

7. International Transfers

If data is transferred outside the EU/EEA, we ensure adequate protection through Standard Contractual Clauses or other approved mechanisms.

8. Data Retention

• Order data: 7 years (Finnish accounting law)
• Marketing consent: Until withdrawal or 3 years of inactivity
• Analytics data: 26 months
• Support inquiries: 3 years

9. Your Rights Under GDPR

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate information
• Erasure: Request deletion of your data
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured format
• Object: Oppose processing for direct marketing
• Withdraw Consent: At any time without affecting prior processing
• Complaint: Lodge a complaint with the Finnish Data Protection Ombudsman

To exercise your rights, contact us at chat@sharvexxaz.world

10. Security Measures

• SSL/TLS encryption for all data transmission
• Secure server infrastructure in EU data centers
• Access controls and authentication
• Regular security audits
• Staff training on data protection

11. Children's Privacy

Our services are not intended for persons under 18 years. We do not knowingly collect data from minors.

12. Cookies

We use cookies to improve your experience. For detailed information, see our Cookie Policy.

13. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via email or website notice.

14. Contact & Supervisory Authority