LEGAL
SORENZA Privacy Policy
Effective Date: March 26, 2026
This Privacy Policy explains how SORENZA ("we", "us", "our") collects, uses, stores, and protects your personal data. Our operations are aligned with the EU General Data Protection Regulation (GDPR) and applicable US privacy laws (including CCPA/CPRA where relevant).
1. Information We Collect
- Directly Provided Data: Name, email, service interest, and project details submitted via inquiry/contact forms or consultation scheduling.
- Automatically Collected Data: IP address, browser type, time spent, and page interaction data through cookies and similar technologies.
- Business Data: Packaging, branding identifiers, and logistics-related details in B2C fulfillment workflows.
2. Legal Basis and Purpose of Processing
- Contractual Necessity: To provide ready-made product sales and custom manufacturing services.
- Consent: To process inquiry requests sent to inquires@sorenzagroup.com and consultation scheduling.
- Legitimate Interest: To improve website performance, conduct market analysis, and prevent fraud.
3. Rights for EU/EEA Users (GDPR)
- Right of access and rectification.
- Right to erasure ("right to be forgotten") under qualifying conditions.
- Right to data portability in a structured format.
- Cross-border transfers may occur outside the EEA; we apply Standard Contractual Clauses (SCCs) or equivalent safeguards.
4. Rights for US Users (CCPA/CPRA and Other State Laws)
- Right to Know: Categories of personal information collected and disclosure practices.
- Right to Opt-Out: We do not sell personal information. You can request we stop non-essential sharing for targeted advertising where applicable.
- Non-Discrimination: Exercising privacy rights will not result in discriminatory service or pricing.
- Children's Privacy: Our website is not directed to children under 13, and we do not knowingly collect their data.
5. Third-Party Services and Data Sharing
We may share necessary data with selected third parties to deliver services:
- Consultation scheduling systems
- Logistics partners for B2C fulfillment and delivery
- Email service providers to ensure inquiry delivery
6. Data Security and Retention
- Security: We use industry-standard safeguards, including SSL/TLS for data transmission protection.
- Retention: Personal data is retained only as long as necessary for business/legal purposes (e.g., order completion and inquiry handling), unless longer retention is legally required.