Privacy Policy

Last updated:

1. Introduction

Welcome to Xunrovarwykhex. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website xunrovarwykhex.world and purchase our products.

This policy is compliant with the General Data Protection Regulation (GDPR) (EU) 2016/679 and other applicable data protection laws.

2. Data Controller Information

The data controller responsible for your personal data is:

We have not appointed a Data Protection Officer (DPO). If you have questions about this policy or our processing of your personal data, you can contact us using the details above.

3. Personal Data We Collect

We collect personal data that you voluntarily provide to us when you:

• Place an order through our website
• Contact us via email or contact forms
• Subscribe to our communications
• Browse our website (through cookies and similar technologies)

3.1 Information You Provide

• Identity Data: Full name
• Contact Data: Email address, phone number (optional), delivery address
• Transaction Data: Order details, payment information, purchase history
• Communication Data: Messages and correspondence with us

3.2 Automatically Collected Information

• Technical Data: IP address, browser type and version, time zone setting, operating system
• Usage Data: Pages visited, time spent on pages, navigation paths
• Cookie Data: Information collected through cookies and similar technologies

3.3 Sources of Personal Data

We collect personal data from the following sources:

• Directly from you: When you complete forms, place an order, or contact us.
• Automatically: When you interact with our website and browser (for example, technical data). Certain preference data may be stored on your device (see the Cookies section).
• Service providers: Where relevant, we may receive limited information from payment or delivery service providers (for example, payment status or delivery confirmation) to perform a contract with you.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to fulfill orders and provide our services
• Consent: Where you have given explicit consent for specific processing activities
• Legitimate Interests: Where processing is necessary for our legitimate business interests
• Legal Obligation: Where processing is required to comply with legal requirements

5. Purpose of Data Processing

We use your personal data for the following purposes:

• Processing and fulfilling your orders
• Communicating with you about your orders and inquiries
• Sending order confirmations and shipping updates
• Improving our website and services
• Analyzing website usage and performance
• Complying with legal obligations
• Marketing communications (only with your consent)

Where required by law (including ePrivacy rules for cookies), we will request your consent before using non-essential cookies or similar technologies.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Order Data: 7 years from the date of purchase (for tax and legal compliance)
• Contact Form Data: 2 years from the date of submission
• Analytics/Preference Data: Up to 26 months (where applicable)
• Marketing Consent Records: Until consent is withdrawn, plus 2 years

After the retention period, your data will be securely deleted or anonymized.

7. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for marketing
• Right to Withdraw Consent: Withdraw consent at any time for consent-based processing

To exercise any of these rights, please contact us at managers@xunrovarwykhex.world.

We will respond to your request without undue delay and in any event within one month. This period may be extended by two further months where necessary, taking into account the complexity and number of requests. We may need to verify your identity before fulfilling certain requests.

8. Data Security

We implement appropriate technical and organizational measures designed to protect your personal data:

• Encryption in transit where supported (for example, TLS)
• Access controls and authentication
• Measures to help maintain the confidentiality and integrity of systems
• Periodic reviews of security practices
• Training and awareness measures related to data protection

9. Data Sharing and Transfers

We may share your personal data with:

• Service Providers: Payment processors, shipping companies, email service providers
• Professional advisors: Lawyers, auditors, and insurers where necessary
• Legal Requirements: When required by law or to protect our legal rights

We do not sell your personal data to third parties. Any data transfers outside the European Economic Area (EEA) are conducted with appropriate safeguards such as Standard Contractual Clauses.

Where we use service providers to process personal data on our behalf, we require them to process it only on our instructions and to apply appropriate security measures.

10. Cookies

We use cookies and similar technologies (and may store certain preferences on your device) to ensure the website works properly and to remember your cookie choices. For detailed information about what we use and how to manage your preferences, please see our Cookie Policy.

11. Automated Decision-Making

We do not use your personal data for automated decision-making (including profiling) that produces legal effects concerning you or similarly significantly affects you.

12. Children's Privacy

Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

14. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Data Protection Commission (DPC), the supervisory authority in Ireland:

Data Protection Commission
21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
Website: www.dataprotection.ie

15. Contact Us

For any questions or requests regarding this Privacy Policy or your personal data, please contact us: