Privacy Policy

1. Introduction

Khakryonfrax ("we", "our", or "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect information about you when you visit our website at https://khakryonfrax.world or when you place an order for our products.

This policy is written in compliance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG), and other applicable data protection laws.

2. Personal Data We Collect

We collect personal data that you voluntarily provide to us, as well as data collected automatically when you use our website.

2.1 Data You Provide Directly

• Full name
• Email address
• Phone number (optional)
• Delivery address
• Order details and notes
• Communication records (e.g. support emails)

2.2 Data Collected Automatically

• IP address and approximate geographic location
• Browser type and version
• Operating system
• Pages visited and time spent on the website
• Referring URLs
• Cookie identifiers (see our Cookie Policy)

2.3 Special Categories of Data

We do not intentionally collect special categories of personal data (such as health data, religious beliefs, or biometric data). Please do not share such information with us through our contact forms.

3. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6 GDPR:

• Performance of a contract (Art. 6(1)(b) GDPR): To process and fulfil your order, manage delivery, and handle returns.
• Compliance with a legal obligation (Art. 6(1)(c) GDPR): To comply with tax, accounting, and other statutory requirements.
• Legitimate interests (Art. 6(1)(f) GDPR): To protect against fraud, maintain website security, improve our services, and conduct basic analytics.
• Consent (Art. 6(1)(a) GDPR): For analytics and marketing cookies, where you have provided explicit consent via our cookie banner.

4. How We Use Your Data

We use your personal data for the following specific purposes:

• To process and fulfil your order for FiveForce Vitality
• To send order confirmation and shipping notifications to your email address
• To respond to your enquiries and provide customer support
• To arrange and administer product returns and refunds
• To comply with legal and regulatory obligations (e.g. tax records)
• To detect and prevent fraud or abuse of our website
• To improve the performance and usability of our website (analytics, where consent is given)

5. Data Sharing and Third Parties

We do not sell your personal data to third parties. We may share your data with carefully selected service providers who assist us in operating our business:

• Payment processors: To securely handle online payments. These providers operate under their own privacy policies and comply with PCI-DSS standards.
• Shipping and logistics partners: To arrange delivery of your order to your address.
• Email service providers: To send transactional emails (order confirmations, shipping updates).
• IT and hosting providers: For website hosting, maintenance, and security.

All third-party processors are bound by contractual obligations to process your data only as instructed, in accordance with GDPR and applicable law.

We may disclose your personal data to competent authorities where required by applicable law, a court order, or to protect our legal rights.

6. International Data Transfers

We are based in Germany and primarily process data within the European Economic Area (EEA). If any data is transferred outside the EEA, we ensure such transfers are protected by appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission (Art. 46 GDPR).

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law:

• Order and transaction records: 10 years (in accordance with German tax law – § 147 AO)
• Customer support communications: 3 years from the date of last contact
• Website analytics data: Up to 14 months
• Cookie consent records: 12 months from the date of consent

After the applicable retention period, data is securely deleted or anonymised.

8. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

• Right of access (Art. 15 GDPR): You may request a copy of the personal data we hold about you.
• Right to rectification (Art. 16 GDPR): You have the right to request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17 GDPR): You may request that we delete your data ("right to be forgotten"), subject to legal retention obligations.
• Right to restriction of processing (Art. 18 GDPR): You may request that we limit how we use your data under certain circumstances.
• Right to data portability (Art. 20 GDPR): Where processing is based on consent or contract, you may request your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR): You have the right to object to processing based on legitimate interests.
• Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at: community@khakryonfrax.world. We will respond within 30 days.

9. Right to Lodge a Complaint

If you believe that your personal data has been processed in violation of GDPR, you have the right to lodge a complaint with the competent supervisory authority. In Germany, this is:

10. Cookies

Our website uses cookies to improve your experience. For full details of the cookies we use and how to manage your preferences, please read our Cookie Policy.

11. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website uses HTTPS (TLS encryption) for all data transmissions. Access to personal data is restricted to authorised personnel only, and all processing is governed by internal data handling procedures.

12. Children's Privacy

Our website and products are intended for adults only. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected personal data from a minor, we will take steps to delete it promptly.

13. Links to Third-Party Websites

Our website may contain links to external websites operated by third parties. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policy of any third-party site you visit.

14. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. The "Last updated" date at the top of this page will reflect the most recent changes. We encourage you to review this policy periodically.

15. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us: