Last Updated:
1. Introduction
Vorlumenvit ("we," "our," or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website vorlumenvit.ddd.
This policy is designed to comply with applicable United States federal and state privacy laws (including the California Consumer Privacy Act as amended by the California Privacy Rights Act, and similar comprehensive state privacy statutes where they apply), the General Data Protection Regulation (GDPR) where applicable, and other applicable data protection laws.
2. Data Controller Information
The data controller responsible for your personal data is:
- Company Name: Vorlumenvit
- Address: 3500 Bill Gray Rd, Sedona, AZ 86336, United States
- Phone: +1 928 204 3391
- Email: clients@vorlumenvit.world
3. Information We Collect
We may collect and process the following categories of personal data:
Information You Provide Directly:
- Contact information (name, email address) when you submit our contact form
- Communication content when you send us messages or inquiries
- Any other information you choose to provide to us
Information Collected Automatically:
- Device information (browser type, operating system)
- IP address and approximate geographic location
- Pages visited and time spent on our website
- Referring website addresses
- Cookie data (see our Cookie Policy for details)
4. Purpose and Legal Basis for Processing
We process your personal data for the following purposes and legal bases:
- Contract Performance: To respond to your inquiries and provide requested information
- Legitimate Interests: To improve our website, analyze usage patterns, and enhance user experience
- Consent: For marketing communications (where applicable) and non-essential cookies
- Legal Obligation: To comply with applicable laws and regulations
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Contact form submissions: Retained for 2 years after the last interaction
- Analytics data: Retained for 14 months
- Cookie consent preferences: Retained for 12 months
After the retention period expires, we securely delete or anonymize your personal data.
6. Your Rights
Under GDPR and other applicable data protection laws, you have the following rights:
- Right of Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data ("right to be forgotten")
- Right to Restrict Processing: Request limitation of how we process your data
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us using the information provided in Section 13. We will respond to your request within the timeframes required by applicable law (typically within 30 days for GDPR requests, and as described below for U.S. state requests).
7. U.S. State Privacy Rights (California, Colorado, Virginia, Connecticut, Utah, and similar laws)
This section supplements the rest of this Privacy Policy for consumers who reside in U.S. states that provide comprehensive privacy rights. Depending on where you live and subject to legal exceptions, you may have some or all of the following rights regarding personal information we hold about you.
Categories of personal information we collect are described in Section 3. The business or commercial purposes for collection and use are described in Section 4. We retain personal information as described in Section 5. Information about third-party services is described in Section 9.
Sale or sharing of personal information: We do not sell your personal information for monetary consideration. We do not knowingly share personal information for cross-context behavioral advertising in a manner that would trigger a mandatory “opt-out of sale/sharing” under the CCPA/CPRA as currently implemented on this website. If we begin using advertising or analytics technologies that constitute “sharing” or “targeted advertising” under applicable state law, we will update this Privacy Policy and provide any required notice and choice mechanisms.
Your rights may include:
- Right to know and access: You may request the categories and specific pieces of personal information we have collected about you.
- Right to delete: You may request deletion of personal information we collected from you, subject to certain exceptions (for example, where we must retain information to complete a transaction or comply with law).
- Right to correct: You may request correction of inaccurate personal information.
- Right to portability: Where applicable, you may request a copy of certain personal information in a portable format.
- Right to opt out of certain processing: Where required by law, you may have the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects, or of automated decision-making, if we engage in such processing in the future.
- Right to limit use of sensitive personal information: We do not collect sensitive personal information as defined by the CPRA for the purpose of inferring characteristics about consumers. If you voluntarily include health-related or other sensitive details in a free-text message to us, we use that information only to respond to your inquiry and do not use it for marketing or profiling.
- Right to non-discrimination: We will not deny goods or services, charge different prices, or provide a different level of service solely because you exercised a privacy right, unless permitted by law (for example, a reasonable loyalty program).
How to submit a request: Use the contact details in Section 13. We will verify your request in accordance with applicable law, which may require confirming information you have previously provided to us. You may designate an authorized agent to make a request on your behalf where state law allows; we may require proof of your written permission and identity verification.
Response timing: We will respond to verifiable consumer requests within 45 days unless a longer period (up to an additional 45 days) is permitted by law, in which case we will notify you of the extension and reason.
Appeals: If your privacy request is denied and your state law provides a right to appeal, you may appeal by contacting us again with “Privacy Request Appeal” clearly referenced in your message and describing the original request.
Nevada residents: Although we do not currently sell covered information as defined under Nevada Revised Statutes Chapter 603A, Nevada residents may submit a verified request to opt out of any future sale of covered information using the contact information in Section 13.
California “Shine the Light” (Civil Code § 1798.83): California residents may request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes as defined by that statute; if our practices change, we will provide the legally required opt-out or disclosure.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- SSL/TLS encryption for data transmission
- Secure server infrastructure
- Access controls and authentication procedures
- Regular security assessments and updates
9. Third-Party Services
We may use third-party services that collect, monitor, and analyze data to help us improve our website. These may include:
- Font and icon delivery services (for example, Google Fonts and Font Awesome CDN), which may process technical data such as IP address when your browser loads resources
- Content delivery networks used to serve static assets
- Analytics or advertising tools only if we implement them in the future and, where required, after you provide consent through our cookie preference tools
These third parties have their own privacy policies governing the use of your information.
10. International Data Transfers
Your information may be transferred to and processed in countries outside your country of residence. When we transfer data internationally, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions by relevant authorities
- Your explicit consent where required
11. Children's Privacy
Our website is a general audience site and is not directed to children under 13 years of age in the United States. We do not knowingly collect, sell, or share personal information from children under 13 consistent with the Children’s Online Privacy Protection Act (COPPA). If you are a parent or guardian and believe we have collected information from a child under 13, please contact us using Section 13 and we will take reasonable steps to delete such information.
For residents of the European Economic Area, United Kingdom, or Switzerland, we do not knowingly collect personal data from children under 16 without appropriate consent where required by applicable law. If you believe we have collected such information, please contact us.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on this page with a new "Last Updated" date.
13. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about our data practices, please contact us:
- Address: 3500 Bill Gray Rd, Sedona, AZ 86336, United States
- Phone: +1 928 204 3391
- Email: clients@vorlumenvit.world
If you are located in the European Economic Area, United Kingdom, or Switzerland, you also have the right to lodge a complaint with a supervisory authority in your country of residence regarding our processing of your personal data.