Privacy Policy

1. Data Controller

2. Data We Collect

We collect the following categories of personal data:

• Contact data: name, email address, message content when you submit our order form
• Technical data: IP address, browser type, device information, pages visited
• Cookie data: as described in our Cookie Policy

3. Purposes of Data Use

We process your data for the following purposes:

• To process and fulfil your orders
• To communicate with you about your orders
• To improve our website and services
• To comply with legal obligations
• To analyse site usage (with your consent)

4. Legal Basis for Processing

We process your data based on:

• Contract: processing necessary for order fulfilment
• Consent: analytics and marketing cookies
• Legitimate interest: website security and improvement
• Legal obligation: compliance with applicable laws

5. Retention Periods

We retain your data only for as long as necessary:

• Order data: 7 years for accounting and legal compliance
• Contact form submissions: 2 years
• Analytics data: 26 months (with consent)
• Technical logs: 90 days

6. Your Rights (GDPR)

Under GDPR Article 15–22, you have the right to:

• Access: request a copy of your personal data
• Rectification: correct inaccurate data
• Erasure: request deletion of your data
• Restriction: limit processing in certain circumstances
• Portability: receive your data in a structured format
• Object: object to processing based on legitimate interest
• Withdraw consent: at any time for consent-based processing

To exercise these rights, contact us at chat@shomxellryexon.world. You also have the right to lodge a complaint with your local data protection authority.

7. Data Security

We implement appropriate technical and organisational measures to protect your data:

• HTTPS encryption for all data transmission
• Secure storage of personal data
• Access controls and authentication
• Regular security assessments

8. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers who assist with order fulfilment (under strict agreements)
• Legal authorities when required by law

9. International Transfers

If we transfer data outside the EEA, we ensure appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

10. Contact