At Opryza LLC, located at 2300 Sir Barton Way, Lexington, Kentucky 40509, US, we are deeply committed to protecting the privacy and security of your personal data. While our operations are based in the United States, we believe in upholding the highest standards of data protection for all our customers, including the principles outlined in the General Data Protection Regulation (GDPR) for individuals residing in the European Economic Area (EEA).

This statement outlines our commitment to GDPR principles regarding the collection, use, and protection of your personal information.

Our Commitment to Data Protection Principles

We strive to process your personal data according to the following GDPR principles:

  1. Lawfulness, Fairness, and Transparency: We process personal data lawfully, fairly, and in a transparent manner.
  2. Purpose Limitation: We collect your data for specified, explicit, and legitimate purposes (such as processing your orders, providing customer support, or sending marketing communications with your consent) and do not process it further in a manner incompatible with those purposes.
  3. Data Minimization: We collect only the personal data that is necessary for the purposes for which it is processed.
  4. Accuracy: We aim to keep your personal data accurate and up-to-date.
  5. Storage Limitation: We retain personal data only for as long as necessary for the purposes for which it was collected or as required by law.
  6. Integrity and Confidentiality: We implement appropriate technical and organizational measures to ensure the security and protection of your personal data from unauthorized or unlawful processing and from accidental loss, destruction, or damage.

Legal Basis for Processing Your Data

We process your personal data based on several legal grounds:

  • Contractual Necessity: When processing is necessary for the performance of a contract to which you are a party (e.g., fulfilling your order, processing payments via Stripe or PayPal, and shipping products).
  • Legitimate Interests: For our legitimate business interests, provided these do not override your fundamental rights and freedoms (e.g., improving our website https://opryza.com, preventing fraud, and enhancing customer service).
  • Consent: When you provide explicit consent for specific processing activities, such as subscribing to our marketing emails. You have the right to withdraw your consent at any time.

Your Data Protection Rights

Under GDPR principles, individuals may have the following rights regarding their personal data. Opryza LLC respects these rights for all our customers:

  • Right to Access: You can request confirmation of whether we are processing your personal data and to receive a copy of that data.
  • Right to Rectification: You can request that we correct any inaccurate or incomplete personal data we hold about you.
  • Right to Erasure ('Right to be Forgotten'): You can request that we delete your personal data under certain circumstances.
  • Right to Restriction of Processing: You can request that we limit how we use your personal data under certain conditions.
  • Right to Object to Processing: You can object to certain types of processing, particularly for direct marketing purposes.
  • Right to Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format, and have the right to transmit that data to another controller.

To exercise any of these rights, please contact us using the details provided below.

Data Security

Opryza LLC utilizes robust security measures, including encryption and secure server environments, to protect your personal data. Our e-commerce platform (WooCommerce) and accepted payment methods (Credit/Debit Cards via Visa, Mastercard, Amex, Stripe, PayPal) also maintain high security standards to safeguard your financial and personal information.

Third-Party Data Sharing

We may share your personal data with trusted third parties who assist us in operating our website, conducting our business, or serving our customers (e.g., payment processors, shipping carriers). These third parties are obligated to keep your information confidential and use it only for the purposes for which we disclose it to them. We do not sell your personal data to third parties.

International Data Transfers

As Opryza LLC is based in the United States, your data is primarily processed and stored within the US. If, in any instance, personal data of individuals covered by GDPR were to be transferred outside the EEA, we would ensure that appropriate safeguards are in place (such as Standard Contractual Clauses or other legally approved mechanisms) to protect your data.

Contact Us

If you have any questions about this GDPR Compliance Statement, our data processing practices, or wish to exercise your data protection rights, please do not hesitate to contact us:

Updates to this Statement

We may update this GDPR Compliance Statement periodically to reflect changes in our data processing practices or legal requirements. We encourage you to review this statement regularly for any updates. The most current version will always be available on our website.