Privacy Policy

Last updated:

Xytharelplozarin ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website xytharelplozarin.world and use our services.

1. Data Controller

The data controller responsible for your personal data is:

Xytharelplozarin
Drangeid 2C
4405 Flekkefjord
Norway
Email: touch@xytharelplozarin.world

2. Personal Data We Collect

We may collect the following categories of personal data:

2.1 Information You Provide

• Contact Information: Name, email address, phone number (if provided)
• Order Information: Shipping address, billing information, order history
• Communication Data: Messages, inquiries, and feedback you send us

2.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system
• Usage Data: Pages visited, time spent on pages, click patterns
• Cookies: Information collected through cookies and similar technologies (see our Cookie Policy)

3. Purposes and Legal Basis for Processing

We process your personal data for the following purposes and legal bases:

• Contract Performance: To process and fulfill your orders, manage your account, and provide customer support
• Legitimate Interests: To improve our website, analyze usage patterns, and prevent fraud
• Consent: To send marketing communications (only with your explicit consent)
• Legal Obligations: To comply with applicable laws and regulations

4. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Order Data: Retained for 7 years for accounting and tax purposes
• Marketing Data: Retained until you withdraw consent or unsubscribe
• Website Analytics: Retained for up to 26 months
• Customer Inquiries: Retained for 3 years after resolution

5. Your Rights Under GDPR

As a data subject under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of Access: You can request a copy of your personal data
• Right to Rectification: You can request correction of inaccurate data
• Right to Erasure: You can request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: You can limit how we use your data
• Right to Data Portability: You can receive your data in a machine-readable format
• Right to Object: You can object to processing based on legitimate interests
• Right to Withdraw Consent: You can withdraw consent at any time

To exercise any of these rights, please contact us at touch@xytharelplozarin.world. We will respond to your request within 30 days.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• SSL/TLS encryption for data transmission
• Secure server infrastructure
• Access controls and authentication
• Regular security assessments
• Employee training on data protection

7. Data Sharing and Transfers

We may share your personal data with:

• Service Providers: Payment processors, shipping companies, hosting providers
• Legal Requirements: When required by law or to protect our rights

If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

8. Third-Party Services

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read their privacy policies.

9. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

12. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority. In Norway, this is the Norwegian Data Protection Authority (Datatilsynet): www.datatilsynet.no.

13. Applicable Legislation

This Privacy Policy complies with the EU General Data Protection Regulation (GDPR) as incorporated into Norwegian law by the Personal Data Act (Lov om behandling av personopplysninger, personopplysningsloven, LOV-2018-06-15-38). Norway is part of the European Economic Area (EEA), and GDPR applies fully to our processing of personal data.