GDPR & CCPA

GDPR & CCPA — Your Data Rights

This page explains your data protection rights under the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). Rynvor is committed to protecting your privacy and giving you control over your personal data. By shopping with us, you have specific rights depending on where you live.

1. Who We Are

Rynvor operates www.rynvor.com and is responsible for the personal data collected through this Site. For any data protection questions or requests, contact us:

2. GDPR — Your Rights (EU / EEA / UK Residents)

If you are located in the European Economic Area (EEA) or the United Kingdom, the GDPR grants you the following rights:

2.1 Right of Access (Article 15)

You have the right to obtain confirmation that we are processing your personal data and to request a copy of that data. This includes information about:

  • The purposes of processing
  • The categories of personal data involved
  • The recipients to whom the data has been or will be disclosed
  • The expected retention period

2.2 Right to Rectification (Article 16)

You can request correction of inaccurate or incomplete personal data we hold about you. For example, if your shipping address or email has changed, we will update it.

2.3 Right to Erasure — "Right to be Forgotten" (Article 17)

You may request that we delete your personal data, provided there is no legal obligation or legitimate reason for us to continue processing it. This applies to data that:

  • Is no longer necessary for the purposes for which it was collected
  • You withdraw consent (where processing was based on consent)
  • You object to processing (and there is no overriding legitimate interest)
  • Has been unlawfully processed

2.4 Right to Restriction of Processing (Article 18)

You can request that we limit how we use your data in certain circumstances, such as when you contest the accuracy of the data or when processing is unlawful.

2.5 Right to Data Portability (Article 20)

You may request your personal data in a structured, commonly used, machine-readable format (e.g., CSV or JSON) and transmit it to another service provider, where technically feasible.

2.6 Right to Object (Article 21)

You can object to processing of your personal data based on our legitimate interests or for direct marketing. We will stop processing your data unless we demonstrate compelling legitimate grounds that override your rights.

2.7 Right to Withdraw Consent (Article 7)

Where processing is based on your consent, you may withdraw consent at any time. This does not affect the lawfulness of processing carried out before withdrawal. You can unsubscribe from marketing emails at any time.

2.8 Right to Lodge a Complaint

If you believe we have not handled your data in accordance with data protection law, you have the right to lodge a complaint with your local data protection authority (DPA). You can find the contact details of your national DPA here.

3. CCPA — Your Rights (California Residents)

If you are a California resident, the CCPA grants you the following rights:

3.1 Right to Know

You have the right to request that we disclose:

  • The categories of personal information we collect
  • The categories of sources from which the information is collected
  • The business or commercial purpose for collecting the information
  • The categories of third parties with whom we share the information
  • The specific pieces of personal information we have collected about you

3.2 Right to Delete

You may request deletion of your personal information, subject to certain exceptions (e.g., completing a transaction, providing a service, security, or legal compliance).

3.3 Right to Opt-Out of "Sale" or "Sharing"

You have the right to opt out of the "sale" or "sharing" of your personal information. Rynvor does not sell your personal data in the traditional sense. However, advertising and analytics tools may involve data sharing for targeted advertising. To opt out, you can:

3.4 Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. We will not deny you goods, charge different prices, or provide a different level of service because you exercised your privacy rights.

3.5 "Do Not Sell or Share My Personal Information" Link

You can exercise your opt-out right by clicking the "Do Not Sell or Share My Personal Information" link in the footer of our Site, or by using our cookie preference center.

4. What Personal Data We Collect

We collect the following categories of personal data:

  • Identifiers: Name, email, shipping/billing address, phone number, IP address.
  • Commercial information: Order history, products purchased, returns.
  • Online activity: Browsing behavior, pages visited, referring website, device information.
  • Geolocation data: Approximate location derived from IP address.

For a full description of what we collect and how we use it, see our Privacy Policy.

5. How to Exercise Your Rights

To make a data protection request:

  1. Email us at support@rynvor.com with the subject line "Data Protection Request".
  2. Specify which right you want to exercise (e.g., "Request access," "Delete my data").
  3. Include your full name and the email address associated with your account.
  4. We may need to verify your identity before processing your request. We will only use the information provided to verify your identity.

We will respond to your request within:

  • GDPR: Within 1 month (extendable by 2 further months for complex requests, with notice to you).
  • CCPA: Within 45 days (extendable by an additional 45 days, with notice to you).

6. Authorized Agents

You may designate an authorized agent to make a request on your behalf. To do so, the agent must provide written permission and proof of identity. We may still need to verify your identity directly.

7. Data Retention & Security

We retain personal data only as long as necessary to fulfill the purposes described in our Privacy Policy, including legal, accounting, and reporting requirements. We use appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse.

8. Changes to This Page

We may update this GDPR & CCPA page from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised "Last Updated" date.

9. Contact Us

For any data protection questions or requests:

We take your privacy seriously and are committed to handling your data transparently and securely.