Privacy Policy

This Privacy Policy explains how Volkrannzla collects, uses, stores, and protects personal data when users visit this website, submit forms, request information about Herbavivea, or communicate with our support team.

1. Website Owner and Controller Details

Data Controller: Volkrannzla

Registered Address: Smb 1251, 506 S Spring St #13308, Los Angeles, CA 90013, United States

Email: office@volkrannzla.world

Phone: +16578884666

This entity determines the purposes and means of personal data processing performed through this website.

2. Scope of This Policy

This policy applies to personal information collected through website pages under this domain, including contact and order request forms, cookie consent controls, and communication channels referenced on the website. It also describes processing activities that may occur during support, dispute handling, fraud prevention, and legal compliance procedures.

3. Categories of Personal Data Collected

We may collect and process the following categories of data:

  • Identification data such as first and last name.
  • Contact data such as email address and optional phone number.
  • Message content submitted through forms.
  • Consent records, including policy acceptance and cookie choices.
  • Technical and usage data, including IP address, browser type, device information, referring pages, interaction timestamps, and session-level events.
  • Security logs related to suspicious activity detection and abuse prevention.

4. Purposes of Processing

We process personal data for legitimate and transparent business purposes, including:

  • Responding to inquiries and submitted requests.
  • Managing communication related to user support and follow-up.
  • Providing website functionality and user preference storage.
  • Maintaining legal records of consent and policy acceptance.
  • Detecting, preventing, and investigating fraudulent or abusive activity.
  • Meeting legal obligations and responding to lawful authority requests.
  • Improving content, usability, and service quality through aggregated analytics where consent applies.

5. Lawful Bases under GDPR

When GDPR applies, processing is based on one or more lawful grounds:

  • Consent for optional cookies and specific communications where required.
  • Performance of pre-contractual steps when users request product-related contact.
  • Legal obligation where retention or disclosure is required by law.
  • Legitimate interests in securing our services, managing inquiries, and improving the website, balanced against user rights and freedoms.

6. Data Retention Periods

Personal data is kept only for as long as necessary for the purposes described above:

  • Form submissions and support records: up to 24 months from the last meaningful interaction.
  • Cookie consent records: up to 12 months unless renewed or withdrawn earlier.
  • Security and system logs: typically 30 to 180 days depending on risk and incident context.
  • Legal and dispute documentation: retained for the period required under applicable law.

Data may be deleted, anonymized, or archived when retention periods end.

7. Data Sharing and Third Parties

We may share data with limited categories of processors that support our operations, such as hosting, security, communication, and analytics providers. Each processor is required to follow confidentiality, security, and data protection obligations. We may also disclose data when required by law, regulation, legal process, or valid governmental request.

8. International Data Transfers

Where personal data is transferred across borders, we apply suitable legal safeguards, including contractual protections and transfer mechanisms recognized by applicable data protection laws. Users may contact us to request general information about the safeguards used for relevant transfer scenarios.

9. Security Measures

We apply technical and organizational safeguards designed to reduce unauthorized access, loss, misuse, or disclosure risks. Measures include transport encryption, access controls, limited account permissions, system monitoring, backup procedures, and internal handling protocols for personal information. No internet system can guarantee absolute security, but controls are reviewed regularly and updated where appropriate.

10. User Rights

Subject to legal conditions, users may exercise rights including access, rectification, erasure, restriction, objection, data portability, and withdrawal of consent where processing relies on consent. Users may also lodge complaints with relevant supervisory authorities if they believe data protection rights have been violated.

11. How to Submit a Data Request

To exercise privacy rights, contact us by email at office@volkrannzla.world and include enough information to verify your request. We may request additional information to confirm identity before responding. We aim to respond within timelines required by applicable law.

12. Children and Minors

This website is intended for adults. We do not knowingly collect personal data from children in violation of applicable laws. If unauthorized child data is identified, we will take reasonable steps to remove or restrict it.

13. Policy Updates

This policy may be updated to reflect legal, technical, or operational changes. Updated versions will be posted on this page with revised effective dates where applicable.