Scope and legal framework
This Privacy Policy explains how Vorzelyneoxleio collects and processes personal data when you use vorzelyneoxleio.world (the “Site”). Processing follows the EU General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Norwegian Personal Data Act, and related sector guidance where applicable.
Geographic scope
The Site is operated from Oslo, Norway, and is primarily aimed at visitors in the European Economic Area. If you access it from other regions, you acknowledge that statutory rights and remedies may differ and that this Policy describes EU and Norwegian standards unless we state otherwise.
Food supplements and marketing context
The Site presents Veliora as a food supplement. We do not process personal data for the purpose of profiling visitors by health condition, and we do not use optional marketing tools to promote disease-related claims. Where you arrive through third-party advertising, those platforms may process data under their own policies in addition to the choices you make on our cookie banner.
Data controller and contact
The controller responsible for processing is Vorzelyneoxleio, registered address Kirkeveien 65B, 0364 Oslo, Norway. For privacy requests, contact us using the identifiers published in the Site footer: info@vorzelyneoxleio.world, contact@vorzelyneoxleio.world, support@vorzelyneoxleio.world, and help@vorzelyneoxleio.world. Please include enough detail for us to verify your identity before we disclose or change records.
Categories of personal data
Depending on how you use the Site, we may process identifiers (name), contact details (email address, optional telephone number), message content you submit in forms, technical connection data (IP address, browser type, device type), security logs, and cookie-related data described in the Cookie Policy.
Purposes and legal bases
We process data to respond to enquiries and order-related questions (GDPR Art. 6(1)(b) pre-contractual steps and Art. 6(1)(f) legitimate interests in customer communication), to operate and secure the Site (Art. 6(1)(f) security and fraud prevention), to meet accounting and tax obligations where invoices exist (Art. 6(1)(c) legal obligation), and—only where you grant consent through the cookie banner—for analytics and marketing cookies (Art. 6(1)(a)).
Recipients and processors
We share data with hosting providers, email delivery services, and analytics or marketing partners strictly under written agreements that require GDPR-aligned safeguards. We do not sell personal data as a business practice.
International transfers
If a service provider is located outside the European Economic Area, we rely on Standard Contractual Clauses or adequacy decisions approved by the European Commission, supplemented by technical and organisational measures described in our vendor reviews.
Retention
Contact form records are kept for up to twenty-four months unless a longer period is required for disputes, unless law mandates a different timeline. Accounting documents follow statutory retention periods. Security logs rotate according to server configuration, typically not exceeding twelve months unless an incident investigation requires an extension.
Your rights
Under GDPR you may request access, rectification, erasure, restriction of processing, data portability where processing is automated, and object to processing based on legitimate interests. You may withdraw consent for optional cookies at any time without affecting the lawfulness of earlier processing. You may lodge a complaint with Datatilsynet (the Norwegian Data Protection Authority) or another EU supervisory authority where you reside.
Security measures
We apply HTTPS transport encryption, access controls for administrative accounts, least-privilege credentials, routine software maintenance, and monitoring designed to detect unusual traffic. No online transmission is completely risk-free; you should protect your devices and use unique passwords.
Children
The Site markets food supplements for adults. We do not knowingly collect data from anyone under sixteen without parental authority. If you believe we received such data, contact us for deletion.
Updates
We revise this Privacy Policy when practices or laws change. The “Last updated” date at the top reflects the latest substantive revision. Continued use after notice constitutes acknowledgement unless we require fresh consent.