1. Data controller
The controller responsible for this website and related processing is Zorvexalyth, trading under the same name, with a registered contact address at 400 State Route 45, Fitzroy VIC 3065, Australia. You can reach the privacy desk through the identifiers published on this page: info@zorvexalyth.world, contact@zorvexalyth.world, support@zorvexalyth.world, and help@zorvexalyth.world.
2. Categories of personal data
We may process identification and contact data (name, email address, optional phone number), message content submitted through forms, technical identifiers such as IP address and browser signals when strictly necessary for security, and records of cookie choices.
3. Purposes and legal bases
We process data to respond to product enquiries, manage order-related correspondence, comply with consumer regulations, keep financial records where transactions occur, improve website reliability, and document consent for optional analytics or marketing cookies. The legal bases under GDPR include performance of a contract, legitimate interests in operating a secure retail channel, consent where required for cookies or direct marketing, and legal obligations such as tax or consumer dispute documentation.
4. Recipients and transfers
Data may be accessed by appointed staff, hosting providers, messaging services, and payment processors that operate under written instructions. Where processors are located outside the United Kingdom or European Economic Area, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms required at the time of transfer.
5. Storage periods
Order records may be kept for up to seven years where accounting rules apply. Marketing opt-in evidence is stored for three years after the last interaction unless a shorter period is mandated. Security logs may rotate within ninety days unless an incident investigation requires a longer retention window.
6. Security measures
We apply access controls, encrypted transport (HTTPS), separation of duties for administrative accounts, and periodic review of service providers. No method of storage is without risk; we document incidents according to applicable notification deadlines.
7. Your rights
Depending on your jurisdiction, you may request access, correction, deletion, restriction, portability, or objection to processing, and you may withdraw consent where processing relies on it. You may lodge a complaint with your local data protection authority. We respond within the timeframes set by GDPR or Australian privacy rules, whichever offers the shorter deadline where both apply.
8. Automated decisions
We do not use solely automated decision-making that produces legal effects concerning you.
9. Children
Our storefront is directed at adults. We do not knowingly collect data from individuals under sixteen without verifiable parental authority.
10. Regional scope and language
This notice is published in English. The postal address on file is in Fitzroy, Victoria, Australia. Visitors who browse from other countries remain subject to domestic privacy statutes in addition to the rights described here, and may contact us using the identifiers above for jurisdictional questions.
11. Online advertising and audience integrity
We may run online promotions for Velunexa, including placements managed through platforms such as Google Ads. Campaign landing pages are designed to describe a food supplement without promising medical benefits, cures, or results that vary by individual biology. Conversion tags and cookie-based measurement, when enabled after consent, may attribute visits to a campaign or creative ID. We do not upload special-category health lists to advertising partners, and we do not intentionally build segments around sensitive medical conditions. Aggregated performance statistics may be processed to audit spend accuracy.
12. Updates
We adjust this policy when our processing changes. Material updates will be noted with a revised publication date shown at the top of this document.