Introduction
This Privacy Policy explains how Zythorinoz.world (“we,” “us,” or “our”) collects, uses, stores, and protects personal information when you use https://zythorinoz.world(the “Site”), interact with the Solara dietary supplement brand, submit forms, receive customer support, or otherwise communicate with us. We aim to be transparent about our practices and to comply with applicable privacy laws, including the General Data Protection Regulation (“GDPR”) where it applies, the UK GDPR where relevant, and Canadian privacy statutes including the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and substantially similar provincial laws.
Where we use advertising or measurement technologies (for example, after you consent in our cookie banner), we use them to understand site reach and campaign performance—not to collect sensitive health data for targeted advertising beyond what you voluntarily submit and what is described here.
By using the Site or submitting information to us, you acknowledge this Policy. If you do not agree, please discontinue use of the Site and avoid submitting personal data.
Who we are
Data controller: Zythorinoz.world, 2280 Dundas Street W, Toronto, ON M6R 1X3, Canada.
Contact email: talk@zythorinoz.world
We determine the purposes and means of processing personal data described here unless we state that a processor or joint controller arrangement applies (for example, a payment provider processing card data on our behalf under strict agreements).
Scope and applicability
This Policy applies to visitors, prospective customers, and customers worldwide. If you are in the EEA, UK, or Switzerland, additional rights may apply as described below. Canadian residents may have rights under PIPEDA or provincial statutes. Nothing in this Policy limits non-waivable consumer rights in your jurisdiction.
Not medical advice. Information you share with us is handled for business, support, and legal purposes. It does not create a clinician–patient relationship.
Categories of personal data we collect
Depending on how you interact with us, we may process the following categories:
Name, email, phone number if provided, billing or shipping address, and similar identifiers.
Order references, product selections, delivery preferences, and communications about transactions.
Content of forms, chat transcripts if used, and attachments you voluntarily send.
IP address, browser type, operating system, device identifiers, referring URLs, and approximate location derived from IP.
Pages viewed, time on page, click paths, and similar analytics where permitted by your cookie choices.
Opt-in or opt-out records for email or similar channels when applicable.
We do not intentionally collect special categories of data (such as health data) beyond what you voluntarily include in free-text messages. Please avoid sending unnecessary sensitive information.
Legal bases for processing (GDPR)
Where GDPR applies, we rely on one or more of the following bases:
- Contract (Art. 6(1)(b)): processing necessary to respond to your requests, process orders, or provide services you request.
- Legitimate interests (Art. 6(1)(f)): operating and securing the Site, preventing fraud, improving user experience, and internal reporting, balanced against your rights.
- Consent (Art. 6(1)(a)): non-essential cookies, certain marketing communications, or other processing where we explicitly ask for consent.
- Legal obligation (Art. 6(1)(c)): tax, accounting, or regulatory requirements.
Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
How we use personal data
We use personal data to: operate and improve the Site; process and fulfill orders placed through linked checkout flows; communicate about orders and service updates; respond to inquiries; analyze aggregate usage where permitted; enforce our terms; protect rights and safety; and comply with law. We do not sell your personal information as a commodity, and we do not use it for automated profiling that produces legal or similarly significant effects without appropriate safeguards and notice where required.
International transfers
Our operations may involve processing in Canada and other countries. If we transfer personal data from the EEA, UK, or Switzerland to countries not deemed adequate, we implement appropriate safeguards such as Standard Contractual Clauses, supplementary measures where appropriate, or other mechanisms recognized under applicable law.
Retention periods
We retain personal data only as long as necessary for the purposes described, unless a longer period is required by law:
- Marketing and analytics (cookies): per cookie lifetimes and your choices, often up to 24 months.
- Customer inquiries: typically up to 36 months after the last interaction unless litigation or claims require longer retention.
- Orders and accounting: often 6–7 years depending on tax and commercial rules in applicable jurisdictions.
When retention ends, we delete or anonymize data where feasible.
Security measures
We implement administrative, technical, and organizational measures including access controls on a need-to-know basis, encryption in transit where supported by our systems, vendor assessments, and staff training on confidentiality. No online transmission is completely secure; we encourage strong passwords and caution when using shared devices.
Your rights
Depending on your location, you may have rights to access, rectify, erase, restrict processing, object to certain processing, data portability, and to lodge a complaint with a supervisory authority. In Canada, you may have rights to access and challenge accuracy of your information. To exercise rights, email talk@zythorinoz.world with sufficient detail for us to verify your request. We respond within applicable statutory timelines (often 30 days for GDPR requests, subject to extension for complex cases).
Automated decision-making
We do not use fully automated decision-making that produces legal or similarly significant effects concerning you without human review, except where required by law and disclosed separately.
Children
The Site is not directed to individuals under 16 (or the age of digital consent in your region). We do not knowingly collect personal information from children. If you believe we have such data, contact us and we will delete it promptly.
Changes to this Policy
We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. The “last updated” date at the top reflects the latest revision. Material changes may be highlighted on the Site or communicated where appropriate.
Contact
For privacy questions or requests: Zythorinoz.world, 2280 Dundas Street W, Toronto, ON M6R 1X3, Canada. Email: talk@zythorinoz.world