Privacy Policy

Last updated: March 28, 2026

1. Introduction

Ghefryonwhthran ("we," "our," or "us") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at https://ghefryonwhthran.world and purchase our products, including Keystone Blend.

This policy applies to all visitors, users, and customers of our website. By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller Information

The data controller responsible for your personal data is:

  • Company Name: Ghefryonwhthran
  • Address: 400 Broad St, Seattle, WA 98109, USA
  • Email: chat@ghefryonwhthran.world
  • Website: https://ghefryonwhthran.world

3. Personal Data We Collect

We may collect the following categories of personal data:

3.1 Information You Provide Directly

  • Full name
  • Email address
  • Phone number (optional)
  • Messages or communications you send to us
  • Consent preferences

3.2 Information Collected Automatically

  • IP address
  • Browser type and version
  • Operating system
  • Referring URLs
  • Pages visited and time spent on those pages
  • Date and time of access
  • Device identifiers

3.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect certain information. Please refer to our Cookie Policy for detailed information about the cookies we use and how to manage them.

4. Purposes of Data Processing

We process your personal data for the following purposes:

  • To process and fulfill your orders
  • To respond to your inquiries and provide customer support
  • To send you order confirmations and updates
  • To improve our website functionality and user experience
  • To analyze website usage and trends
  • To comply with legal obligations
  • To protect against fraudulent or unauthorized activity
  • To send marketing communications (only with your explicit consent)

5. Legal Basis for Processing (GDPR)

Where the General Data Protection Regulation (GDPR) applies, we process your personal data based on one or more of the following legal grounds:

  • Consent: You have given clear consent for us to process your personal data for a specific purpose (e.g., marketing emails).
  • Contract: Processing is necessary for the performance of a contract with you (e.g., order fulfillment).
  • Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject.
  • Legitimate Interests: Processing is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms (e.g., website security, analytics).

6. Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your information with:

  • Service Providers: Trusted third-party companies that help us operate our website and business (e.g., payment processors, shipping companies, hosting providers). These providers are contractually bound to protect your data.
  • Legal Requirements: When required by law, court order, or governmental regulation.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, where your data may be transferred as part of the business assets.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside of your country of residence, including the United States. When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data in accordance with applicable laws.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Order Data: Retained for 7 years after the transaction date for tax and legal compliance purposes.
  • Contact Form Submissions: Retained for 2 years or until the inquiry is resolved, whichever is later.
  • Cookie Data: Retention periods vary by cookie type. See our Cookie Policy for details.
  • Marketing Consent Records: Retained for as long as the consent is active plus 3 years after withdrawal.

When data is no longer needed, it is securely deleted or anonymized.

9. Your Rights

Depending on your location and applicable laws, you may have the following rights regarding your personal data:

  • Right of Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can request that we correct any inaccurate or incomplete data.
  • Right to Erasure: You can request deletion of your personal data, subject to legal obligations.
  • Right to Restrict Processing: You can request that we limit the processing of your data in certain circumstances.
  • Right to Data Portability: You can request your data in a structured, commonly used, machine-readable format.
  • Right to Object: You can object to the processing of your data for direct marketing purposes or processing based on legitimate interests.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

To exercise any of these rights, please contact us at chat@ghefryonwhthran.world. We will respond to your request within 30 days.

10. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • HTTPS encryption for all data transmitted between your browser and our servers
  • Secure storage of personal data with access controls
  • Regular security assessments and updates
  • Limited employee access to personal data on a need-to-know basis
  • Contractual obligations on third-party service providers to maintain data security

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.

11. Children's Privacy

Our website and products are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete such information promptly.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • The right to know what personal information we collect, use, and disclose
  • The right to request deletion of your personal information
  • The right to opt out of the sale of your personal information (we do not sell personal data)
  • The right to non-discrimination for exercising your privacy rights

To exercise your CCPA rights, please contact us at chat@ghefryonwhthran.world.

13. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policies of any third-party sites you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post any changes on this page and update the "Last updated" date. We encourage you to review this Privacy Policy periodically. Continued use of our website after changes constitutes acceptance of the revised policy.

15. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

  • Email: chat@ghefryonwhthran.world
  • Address: 400 Broad St, Seattle, WA 98109, USA