Privacy Policy

We at Vennzor value your privacy and are committed to protecting your personal data. This Privacy Policy explains how VENNZOR LTD ("we", "us", or "our") collects, processes, stores, and protects your personal data when you visit our website, communicate with us, or purchase nutritional supplements and cosmetic products from our online store.

Our data processing practices are designed to comply with the General Data Protection Regulation (GDPR) (EU) 2016/679, the UK General Data Protection Regulation (UK GDPR), and the national data protection laws of Germany, Austria, and France.

1. Data Controller and Contact Information

The data controller responsible for processing your personal data through this website under Article 4(7) GDPR is:

VENNZOR LTD
128, City Road
London, EC1V 2NX
UNITED KINGDOM

  • Company Registration Number: 17393840 (Registered in England and Wales)
  • VAT Identification Number: In the process of registration 
  • Contact Email: team@vennzor.com

If you have any questions about this Privacy Policy, your rights, or how we handle your data, please contact us directly at our official support email: team@vennzor.com.

2. Categories of Data We Collect & Purposes of Processing

We only collect and process personal data that is technically necessary to operate our store, fulfill your orders, and provide you with a secure, optimized shopping experience.

A. Technical Data and Log Files (Website Visitors)

When you browse our website, your browser automatically transmits technical information to our servers. This includes:

  • Your IP address (truncated or anonymized)
  • Date and time of access
  • Pages visited on our website
  • Browser type, version, and operating system
  • Referrer URL (the page you visited immediately prior to ours)
  • Purpose: To display the website correctly, ensure server stability, and investigate potential security incidents (e.g., unauthorized access attempts).
  • Legal Basis: Art. 6(1)(f) GDPR (Our legitimate interest in the secure and functional operation of our website).

B. Ordering and Customer Account Data

When you purchase products or register a customer account, we collect:

  • First and last name
  • Billing and shipping address
  • Email address and phone number
  • Order details (items purchased, quantity, purchase date)
  • Payment transaction metadata (we do not store actual card details)
  • Purpose: To process and fulfill your order, handle shipping and delivery, manage returns, verify age where legally required for supplements, and provide customer support.
  • Legal Basis: Art. 6(1)(b) GDPR (Performance of a contract to which you are a party).

C. Communication Data

When you contact our customer support team directly at team@vennzor.com or via any contact forms on our website, we collect:

  • Your name, email address, and any personal information you choose to include in your correspondence.
  • Purpose: To respond to your inquiries, solve order issues, and handle complaints.
  • Legal Basis: Art. 6(1)(b) GDPR (Fulfillment of contractual or pre-contractual measures) or Art. 6(1)(f) GDPR (Our legitimate interest in responding to customer communications).

3. Third-Party Service Providers and Data Sharing

We do not sell, rent, or lease your personal data to third parties. We share your data only with trusted service providers (processors) who perform essential business operations for us. All such sharing is governed by strict Data Processing Agreements (DPAs) in accordance with Article 28 GDPR.

Your data is shared with the following categories of recipients:

  1. E-Commerce Platform Host: Shopify International Limited (Ireland) and its parent company Shopify Inc. (Canada) to host, operate, and secure our online store.
  2. Payment Processing: Stripe (and its integrated payment options) to process customer transactions securely and detect fraudulent activities. Stripe processes your financial data directly in an encrypted environment; we do not store your credit card details.
  3. Logistics and Shipping Partners: DHL and other leading European postal/courier services chosen to deliver your nutritional supplements and cosmetics to your specified delivery address in Germany, Austria, and France.
  4. Analytics and Advertising Providers: Google Analytics and Meta Pixel (subject to your active consent).

4. International Data Transfers

As VENNZOR LTD is established in the United Kingdom (UK), your personal data is transferred to and processed in the UK.

  • Adequacy Status: The European Commission adopted an adequacy decision for the United Kingdom on June 28, 2021, confirming that the UK ensures an adequate level of protection for personal data equivalent to that under EU law.

Some of our technical service providers (such as Google LLC, Meta Platforms Inc., and Shopify Inc.) may transfer data to the United States. To ensure a lawful level of data protection, we rely on the EU-US Data Privacy Framework (for certified US entities) or the Standard Contractual Clauses (SCCs) approved by the European Commission, combined with technical safeguards.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to ensure the basic functions of our shop, analyze website performance, and personalize marketing campaigns.

A. Essential Cookies

These cookies are technically strictly necessary for the operation of the shop (e.g., preserving items in your shopping cart, securing user sessions, and storing cookie consent settings).

  • Legal Basis: Art. 6(1)(f) GDPR (Legitimate Interest) or TDDG § 25 Para. 2 No. 2 (for Germany).

B. Analytics and Marketing Tracker (Google Analytics & Meta Pixel)

These technologies help us analyze user behavior on our site and display relevant advertisements to you across third-party websites.

  • Legal Basis: Art. 6(1)(a) GDPR (Explicit Consent).
  • Consent Management: These trackers are blocked by default. They will only be activated if you actively give your consent via our cookie consent banner. You can manage or revoke your consent at any time via the "Manage Cookie Preferences" link in our website footer.

6. Retention Periods

We retain your personal data only for as long as necessary to achieve the purposes described in this policy, or to comply with statutory retention laws:

  • Commercial and Tax Records: Order histories, invoices, and accounting data are retained for up to 10 years to comply with statutory commercial and tax retention requirements in Germany, Austria, and France (Art. 6(1)(c) GDPR).
  • Customer Accounts: Stored until you request the deletion of your account.
  • Support Correspondence: Deleted once the inquiry has been resolved, provided no contractual obligations require further storage.

7. Your Statutory Rights Under the GDPR

As a resident of the European Union or the United Kingdom, you possess the following statutory rights regarding your personal data:

  • Right of Access (Art. 15 GDPR): You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate or incomplete personal data.
  • Right to Erasure (Art. 17 GDPR): You have the right to request the deletion of your data under certain conditions (e.g., if it is no longer needed).
  • Right to Restriction of Processing (Art. 18 GDPR): You have the right to limit how we use your data.
  • Right to Data Portability (Art. 20 GDPR): You have the right to receive your data in a structured, machine-readable format.
  • Right to Object (Art. 21 GDPR): You have the right to object to processing based on our legitimate interests (Art. 6(1)(f) GDPR). If you object to direct marketing, we will stop processing your data immediately.
  • Right to Withdraw Consent (Art. 7(3) GDPR): You may withdraw your consent for future data processing (such as marketing cookies) at any time.

To exercise any of your rights, please submit a clear request to our data support team at team@vennzor.com.

8. Right to Lodge a Complaint with a Supervisory Authority

If you believe that our processing of your personal data infringes data protection regulations, you have the right to lodge a complaint with a competent supervisory authority, such as:

  • Germany: The Federal Commissioner for Data Protection and Freedom of Information (BfDI) or the competent state authority.
  • France: The National Commission on Informatics and Liberty (CNIL).
  • Austria: The Austrian Data Protection Authority (Österreichische Datenschutzbehörde - DSB).

9. Data Security

We employ technical and organizational security measures (TOMs), including Secure Socket Layer (SSL/TLS) encryption, to protect your personal data from accidental loss, destruction, alteration, or unauthorized access.