Privacy Policy

Data controller

Squozrelzex operates the website at the domain referenced in our public materials (hereinafter, the “Site”).

For GDPR purposes, we act as the controller for personal data we determine the purposes and means of processing for, unless stated otherwise in a separate agreement.

Scope

This policy applies to personal data collected through the Site, email correspondence, and related channels we operate for customer enquiries and order-related communication.

Geographic scope and audience

The Site is operated from Norway. Our documentation is written with the European Economic Area and Norwegian rules in mind. If you access the Site from another country, additional local laws may apply to you. The Site and our communications are intended for adults; we do not knowingly direct marketing at children.

Food supplements and marketing

We offer Zelix as a food supplement. We do not use personal data to make or target claims about treating, curing, or preventing disease, or to profile individuals for sensitive health conditions. Where we run online advertising, we configure data use and messaging to align with applicable platform policies and food-supplement rules in the regions where ads are shown.

Categories of personal data

Depending on your interaction, we may process identifiers (name), contact data (email address, phone number if provided), message content, technical data (IP address, browser type, device information), and cookie-related data as described in our Cookie Policy.

Purposes and legal bases

• Responding to enquiries and handling orders: performance of a contract or steps prior to entering a contract; legitimate interests in operating customer service.
• Website security and fraud prevention: legitimate interests; legal obligations where applicable.
• Analytics and marketing cookies: consent, where required, as described in the cookie banner and Cookie Policy.
• Compliance and legal claims: legal obligation or legitimate interests, as applicable.

Retention

We retain personal data only as long as necessary for the purposes described, including statutory retention periods for accounting and tax records where relevant. Enquiry records are typically kept for a limited period unless a longer period is required to resolve a dispute or meet legal duties.

Recipients and transfers

We may use service providers (for example hosting, email delivery, analytics if consented) under data processing agreements. Where personal data is transferred outside the European Economic Area, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions under GDPR Chapter V.

Security measures

We apply technical and organisational measures appropriate to the risk, including access controls, encryption where suitable, and staff instructions on confidentiality. No online transmission is completely secure; you should also protect your devices and credentials.

Your rights

Under GDPR and applicable Norwegian law, you may request access, rectification, erasure, restriction of processing, data portability, and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing.

You may lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) or another competent supervisory authority in the EEA.

Children

The Site is not directed at children. We do not knowingly collect personal data from children without parental authority as required by law.

Changes

We may update this policy to reflect legal or operational changes. The “Last updated” date at the top will be revised accordingly.