Privacy Policy

Last updated:

1. Introduction

Thythronshit ("we," "us," or "our") operates the website https://thythronshit.world. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website or place an order. We are committed to protecting your privacy and handling your personal information in accordance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

  • Company: Thythronshit
  • Address: 881 Broadway, New York, NY 10003, USA
  • Email: managers@thythronshit.world
  • Website: https://thythronshit.world

3. Personal Data We Collect

3.1 Data You Provide Directly

When you use our order form or contact us, we may collect:

  • Full name
  • Email address
  • Phone number (if voluntarily provided)
  • Message content
  • Consent preferences

3.2 Data Collected Automatically

When you visit our website, we may automatically collect:

  • IP address
  • Browser type and version
  • Operating system
  • Referring URL
  • Pages visited, date and time of access
  • Device identifiers
  • Cookie data (see our Cookie Policy)

4. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

  • Consent (Art. 6(1)(a) GDPR): When you submit our order form and check the consent box, you provide explicit consent for us to process your data for the stated purpose.
  • Contractual Necessity (Art. 6(1)(b) GDPR): Processing is necessary to fulfill your order or take pre-contractual steps at your request.
  • Legitimate Interest (Art. 6(1)(f) GDPR): We may process data for our legitimate interests, such as improving our website, preventing fraud, and ensuring security, provided these interests do not override your rights.
  • Legal Obligation (Art. 6(1)(c) GDPR): We may process data to comply with applicable laws and regulations.

5. Purpose of Data Processing

We use your personal data for the following purposes:

  • Processing and fulfilling your orders
  • Communicating with you regarding your order or inquiries
  • Sending order confirmations and shipping updates
  • Improving our website and user experience
  • Analyzing website traffic and usage patterns (with consent)
  • Complying with legal obligations
  • Preventing fraud and ensuring the security of our services

6. Data Sharing and Third Parties

We do not sell your personal data. We may share your data with:

  • Service providers: Payment processors, shipping companies, email service providers, and hosting providers who assist us in operating our business, bound by contractual obligations to protect your data.
  • Legal authorities: When required by law, court order, or governmental regulation.
  • Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate safeguards for your data.

7. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or we rely on adequacy decisions.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Order data: Retained for up to 6 years after the order is completed, as required for tax and accounting purposes.
  • Contact inquiries: Retained for up to 2 years after the last communication.
  • Cookie data: Retained according to the durations specified in our Cookie Policy.
  • Marketing data: Retained until you withdraw consent or unsubscribe.

After the retention period expires, your data will be securely deleted or anonymized.

9. Your Rights

Under the GDPR and other applicable laws, you have the following rights regarding your personal data:

  • Right of Access (Art. 15 GDPR): You may request a copy of the personal data we hold about you.
  • Right to Rectification (Art. 16 GDPR): You may request correction of inaccurate or incomplete data.
  • Right to Erasure (Art. 17 GDPR): You may request deletion of your personal data under certain conditions.
  • Right to Restrict Processing (Art. 18 GDPR): You may request that we limit the processing of your data.
  • Right to Data Portability (Art. 20 GDPR): You may request to receive your data in a structured, commonly used, machine-readable format.
  • Right to Object (Art. 21 GDPR): You may object to processing based on legitimate interests or direct marketing.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

To exercise any of these rights, please contact us at managers@thythronshit.world. We will respond to your request within 30 days.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • HTTPS encryption for all data transmitted through our website
  • Secure storage of personal data with access controls
  • Regular security assessments and updates
  • Employee training on data protection practices
  • Incident response procedures for potential data breaches

11. Children's Privacy

Our website and products are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the CCPA, including:

  • The right to know what personal information we collect and how it is used.
  • The right to request deletion of your personal information.
  • The right to opt out of the sale of your personal information (we do not sell personal data).
  • The right to non-discrimination for exercising your CCPA rights.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: