Privacy Policy
Last updated:
Geographic Scope and Business Topic
This website is operated by Xunrovarshon, based in Helsinki, Finland. Our primary service area is the European Union (EU) and European Economic Area (EEA). We offer dietary supplements for general wellness. Our products are not medicines and are not intended to diagnose, treat, cure, or prevent any disease. This policy applies to all visitors and customers regardless of location.
1. Data Controller
Xunrovarshon
Hämeentie 28 Lh 3, 00530 Helsinki, Finland
info@xunrovarshon.world, contact@xunrovarshon.world, support@xunrovarshon.world, help@xunrovarshon.world
2. Purpose of Processing
We process personal data to fulfill orders, respond to inquiries, improve our services, and comply with legal obligations. We do not use your data for purposes incompatible with those stated here.
3. Legal Basis (GDPR)
We process data based on: (a) your consent when you contact us or agree to marketing; (b) contract performance when you place an order; (c) our legitimate interests for website operation and security; (d) legal obligations where required by law.
4. Categories of Data
We may collect: name, email address, phone number (if provided), postal address, payment information, and messages you send. We also collect technical data such as IP address and cookie data as described in our Cookie Policy.
5. Data Retention
We retain personal data only as long as necessary: order data for 7 years for accounting; contact form data for 2 years; marketing consent until withdrawn; technical logs for up to 12 months.
6. Your Rights
Under GDPR you have the right to: access your data; rectify inaccuracies; erase your data; restrict processing; data portability; object to processing; withdraw consent; lodge a complaint with a supervisory authority (in Finland: Tietosuojavaltuutetun toimisto).
7. Data Sharing
We share data only with service providers necessary for operation (e.g., hosting, payment processors) under strict agreements. We do not sell your data.
8. Security
We implement appropriate technical and organizational measures including encryption, access controls, and regular reviews to protect your data.
9. Contact
For privacy requests contact us at the address or email above.