GDPR Policy (General Data Protection Regulation)

Vulcan Visions (“we”, “us”, or “our”) is committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) when you are in the European Economic Area (EEA) or United Kingdom (UK). This GDPR Policy explains how we collect, use, disclose, and protect your personal data, and outlines your rights under GDPR.

1. Data Controller

For purposes of GDPR, the data controller is:

Vulcan Visions
Phone: (518) 555-0129
Email: contact@virusvault.us

2. Information We Collect

We may collect the following types of personal data:

2.1 Personal Data You Provide

• Name

• Email address

• Phone number

• Shipping address

• Billing address

• Payment information (processed securely through payment gateways)

• Order history

• Customer support inquiries

2.2 Data Collected Automatically

• IP address

• Browser type and version

• Device information

• Pages visited on our website

• Time and date of visits

• Cookies and similar technologies (see our Cookie Policy)

3. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contractual necessity: To fulfill your orders and provide our services

• Legitimate interests: To improve our website, prevent fraud, and analyze usage

• Consent: For marketing communications (where you have explicitly consented)

• Legal obligation: To comply with applicable laws and regulations

4. How We Use Your Personal Data

We use your personal data for the following purposes:

• Processing and fulfilling your orders

• Sending order confirmations and shipping updates

• Providing customer support

• Responding to your inquiries

• Improving our website and services

• Preventing fraud and ensuring security

• Sending marketing communications (with your consent)

• Complying with legal obligations

5. Data Sharing and Disclosure

We may share your personal data with:

5.1 Service Providers

• Payment processors

• Shipping and delivery partners

• Website hosting and IT services

• Customer support tools

• Analytics providers

5.2 Legal Requirements

We may disclose your data if required by law, court order, or government regulation.

5.3 Business Transfers

If Vulcan Visions is involved in a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction.

We do not sell your personal data to third parties.

6. International Data Transfers

Your personal data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including:

• Standard Contractual Clauses approved by the European Commission

• Adequacy decisions by the European Commission

• Other approved mechanisms under GDPR

7. Data Retention

We retain your personal data only for as long as necessary to:

• Fulfill the purposes for which it was collected

• Comply with legal obligations

• Resolve disputes

• Enforce our agreements

Typically, we retain order and customer data for the period required by law (often 5–7 years for tax and accounting purposes).

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of sensitive data during transmission (SSL/TLS)

• Access controls and authentication

• Secure payment processing

• Regular security updates and monitoring

• Employee training on data protection

9. Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

9.1 Right to Access

You may request a copy of the personal data we hold about you.

9.2 Right to Rectification

You may request correction of inaccurate or incomplete personal data.

9.3 Right to Erasure (“Right to be Forgotten”)

You may request deletion of your personal data under certain circumstances.

9.4 Right to Restrict Processing

You may request restriction of processing of your personal data under certain circumstances.

9.5 Right to Data Portability

You may request transfer of your personal data to another organization in a structured, machine-readable format.

9.6 Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing.

9.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time.

9.8 Right to Lodge a Complaint

You have the right to lodge a complaint with your local data protection authority.

10. How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at:

Vulcan Visions
Phone: (518) 555-0129
Email: contact@virusvault.us

We will respond to your request within 30 days as required by GDPR.

11. Children’s Privacy

Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected such data, we will take steps to delete it.

12. Cookies and Tracking

We use cookies and similar technologies as described in our Cookie Policy. You can manage cookie preferences through your browser settings or our cookie consent tool.

13. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. Please review their privacy policies.

14. Changes to This GDPR Policy

We may update this GDPR Policy from time to time to reflect changes in regulations, technology, or our business practices. The updated policy will be posted on this page with a revised “Last Updated” date.