Privacy Policy

1. Introduction

Khexylonclox ("we," "us," or "our") operates the website khexylonclox.world and is committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, how we use and store it, and what rights you have.

By using our website and placing orders, you acknowledge that you have read and understood this Privacy Policy.

2. Data We Collect

2.1 Information You Provide Directly

• Full name and contact details (email address, phone number)
• Delivery address and order-related information
• Communications you send us via email or contact forms
• Consent records (date, method, content of consent)

2.2 Information Collected Automatically

• IP address, browser type, and device information
• Pages visited, time on site, and referral source
• Cookie identifiers (see our Cookie Policy)

3. Legal Bases for Processing (GDPR)

We process your personal data on the following legal grounds:

• Contractual necessity — processing your order and providing customer support
• Consent — sending marketing communications; analytics and non-essential cookies
• Legitimate interests — fraud prevention, website security, service improvement
• Legal obligation — compliance with US and applicable law

4. How We Use Your Data

• Processing and fulfilling orders
• Communicating about your order and responding to inquiries
• Sending transactional emails (order confirmation, shipping updates)
• Sending promotional communications where you have opted in
• Improving our website and product offerings through analytics
• Complying with legal obligations including tax and consumer protection law

5. Data Sharing and Third Parties

We do not sell your personal data. We may share your information with:

• Shipping carriers (UPS, USPS, FedEx) — to deliver your order
• Payment processors — secure payment handling; we do not store card data
• Email service providers — for transactional and marketing emails
• Analytics providers — anonymized or pseudonymized data only
• Legal authorities — when required by law or to protect our rights

All third-party processors are bound by data processing agreements and required to implement appropriate security measures.

6. Data Retention

We retain personal data only for as long as necessary:

• Order and transaction records: 7 years (US tax and accounting requirements)
• Customer communications: 3 years from last contact
• Consent records: duration of consent plus 2 years
• Analytics data: 26 months (aggregated and anonymized after 14 months)
• Account data: until deletion is requested

7. Your Rights

Depending on your location, you may have the following rights:

• Right to access — request a copy of your personal data
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data where no legal basis exists
• Right to restrict processing — request we limit how we use your data
• Right to data portability — receive your data in a structured format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw consent at any time without affecting prior processing
• CCPA rights (California residents) — right to know, delete, and opt-out of sale

To exercise any of these rights, contact us at callusask-@khexylonclox.world. We will respond within 30 days.

8. Security

We implement appropriate technical and organizational measures to protect your personal data, including TLS/SSL encryption for all data in transit, access controls, and secure server infrastructure. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.

9. International Transfers

Your data is primarily stored and processed in the United States. If data is transferred outside the US, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses for transfers to the European Economic Area.

10. Children's Privacy

Our website and products are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be notified via email or prominent notice on our website. The date at the top of this page indicates when the policy was last revised.

12. Contact and Complaints

For privacy questions or to exercise your rights:

If you believe we have not adequately addressed your concerns, you have the right to file a complaint with the relevant data protection authority in your jurisdiction.