PenvaultCo is a brand operated by HIDMRIKA LIMITED.
Introduction
PenvaultCo. (hereinafter referred to as “we” or “our”) is committed to protecting your personal data privacy. This Privacy Policy aims to explain in a clear and transparent manner how we collect, use, disclose, and protect your personal information when you visit our website [penvaultco.com] or purchase our products.
We comply with applicable data protection laws, including the EU’s General Data Protection Regulation (GDPR) and other relevant regulations.
Data Controller
The data controller responsible for processing your personal data is:
HIDMRIKA LIMITED
Email: organize@penvaultco.com
What Personal Data Do We Collect?
We only collect data necessary to provide you with services, primarily including:
Identity and Contact Information: such as name, billing and delivery address, email address, and phone number.
Order and Transaction Information: details of your purchased products and order history. Please note: All payment transactions are securely processed by our payment processor, Stripe. We do not directly process or store your complete payment card information.
Technical Data: Data automatically collected when you browse the website, such as IP address, browser type, device information, and cookies.
Communication Data: Records of your communications with us via email or customer service systems.
How We Use Your Personal Data? (Processing Purpose and Legal Basis)
We process your data only when we have a valid legal basis, primarily for the following purposes:
Fulfilling Contracts with You: We need to use your identity, contact, and order information to process and deliver your orders, manage your customer accounts, process payments, and send important notifications such as order status via email. This is necessary to fulfill the sales contracts we have entered into with you.
Protecting Our Legitimate Interests: To the extent necessary, we may process data based on our legitimate interests, such as: responding to your customer service inquiries to provide support; using technical data analytics to optimize website performance and user experience; processing certain payment information to implement fraud detection and prevention measures and protect our business from loss.
Complying with Legal Obligations: To comply with tax, accounting, and other legal obligations, we may need to retain and use your order and identity information.
Based on Your Consent: With your explicit consent, we may use your contact information to send you marketing communications and promotional information. For non-essential cookie data analysis, we will only do so with your consent. You can withdraw your consent at any time without affecting the legality of previous processing based on your consent.
Data Sharing and Third Parties
We only share data with contractually bound third parties when necessary in the following situations:
Payment Processing: To complete a transaction, order information is shared with our payment processor, Stripe, whose operations are governed by its privacy policy.
Logistics and Delivery: To deliver products, we provide necessary delivery information (name, address, telephone number) to our logistics partners, such as DSV Panalpina.
Professional Services: We may engage service providers bound by confidentiality agreements to assist with website operations, data analysis, or customer service.
Legal Requirements: We may disclose information when required by law, regulation, or governmental authorities.
International Data Transfer
Because our operations span U.K. and Europe, your data may be transferred to servers outside your country for processing. For example, some service providers may be located outside the European Economic Area (EEA). We commit that during any international transfers, we will take appropriate safeguards, such as signing Standard Contractual Clauses (SCCs), in accordance with GDPR and other legal requirements to ensure the secure and lawful processing of your data.
Your Data Subject Rights
Under applicable law (particularly GDPR), you have several rights, including:
Right to Access and Correction: Request access to or correction of your personal data held by us.
Right to Erasure (Right to Be Forgotten): Request the erasure of your data under specific conditions.
Right to Restrict Processing and Objection: Request restriction of processing of your data or object to data processing based on legitimate interests.
Right to Data Portability: Access to data you provide stored in a structured, universally applicable format, and the right to request its transfer to another controller.
Right to Withdraw Consent: Withdraw your consent at any time.
To exercise any of the above rights, please contact us using the contact information provided in the Contact section below. We may require you to verify your identity. You also have the right to file a complaint with the data protection regulator in your place of residence.
Data Security
We take reasonable technical and organizational measures (such as encryption and access control) to protect your personal data from loss, misuse, and unauthorized access, disclosure, or alteration.
Data Retention
We retain your personal data only for the period necessary to achieve the purposes described in this policy. For example, order information may be retained for several years to fulfill legal obligations. After the retention period, we will securely delete or anonymize your data.
Changes to this Policy
We may update this policy due to business, legal, or technical changes. Any significant changes will be posted on this page with an updated “Last Updated” date; we recommend you check it regularly.
7. Contact
Company: HIDMRIKA LIMITED
Address: 292511 Office, Suite 29a, 3/F 23 Wharf Street, London, England, SE8 3GG
Tel: +44 2033024266
Email: organize@penvaultco.com