Privacy Policy

Information We Collect

When you visit our website, make a purchase, or register an account, we collect the following personal data:

• Name
• Email address
• Shipping address
• Billing address
• Password (encrypted)
• Location information
• Payment details

This data is collected when you voluntarily provide it to us, such as during the registration process, making a purchase, or updating your account settings.

How We Use Your Information

Your personal information is used for the following purposes:

• To process and fulfill your orders
• To manage your account and provide customer support
• To improve our website and services
• To comply with legal obligations
• To send promotional materials and updates if you have opted in to receive them

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• To perform a contract (e.g., when processing your order)
• Your consent (e.g., for marketing communications)
• Compliance with legal obligations
• Legitimate interests (e.g., improving our services)

Sharing of Information

We do not share your personal information with third parties except in the following circumstances:

• With shipping companies to fulfill your orders
• With payment processors to process payments
• When required by law or to protect our legal rights

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Once the data is no longer needed, it will be securely deleted or anonymized.

Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Request the correction of inaccurate data
• Request the deletion of your personal data (right to be forgotten)
• Restrict or object to the processing of your data
• Request data portability
• Withdraw your consent at any time (for marketing communications)

To exercise any of these rights, please contact us at gt@infinitha.com.

Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include data encryption, access control, and regular security audits.