Privacy Policy

Last updated: June 1, 2025

1. Controller Identity and Contact Details

The data controller responsible for your personal data is:

2. Scope of This Policy

This Privacy Policy describes how we collect, use, store, share and protect personal data obtained through the website drexalonhyxrevox.world (the "Site") and through any related communications, in accordance with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) and other applicable privacy laws.

3. Data We Collect

We may collect the following categories of personal data:

• Contact and identification data: full name, email address, telephone number.
• Order information: details of products ordered, delivery address, any message you include.
• Technical data: IP address, browser type and version, operating system, pages visited, time and date of visits, referring URLs.
• Cookie and tracking data: as described in our Cookie Policy.
• Communications: content of emails or messages you send us.

4. Legal Bases for Processing

We process personal data on the following legal bases:

• Performance of a contract: to process and fulfill your order (Art. 6(1)(b) GDPR).
• Legitimate interests: to operate and improve our Site, prevent fraud, and communicate with you about your order (Art. 6(1)(f) GDPR).
• Consent: for analytics and marketing cookies, and for direct marketing, where you have given clear consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time.
• Legal obligation: to comply with applicable laws and regulations (Art. 6(1)(c) GDPR).

5. Purposes of Processing

• Processing and fulfilling your order and communicating its status.
• Responding to your inquiries and providing customer support.
• Sending transactional emails related to your order.
• Improving our Site and user experience through analytics (only with your consent).
• Complying with legal and regulatory obligations.
• Preventing fraud and ensuring site security.

6. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy:

• Order and transaction data: up to 7 years to comply with accounting and tax obligations.
• Customer communications: up to 3 years from the last contact.
• Technical and analytics data: up to 26 months.
• Marketing consent records: until consent is withdrawn, plus up to 3 years thereafter.

7. Data Sharing and Third Parties

We do not sell your personal data. We may share data with:

• Delivery and logistics partners to fulfill your order.
• Payment processors for secure transaction handling.
• IT service providers who host or maintain our systems, under appropriate data processing agreements.
• Legal authorities where required by law.

Any third-party processors are bound by contractual obligations consistent with GDPR requirements.

8. International Transfers

If personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

9. Your Rights

Subject to applicable law, you have the following rights regarding your personal data:

• Right of access: to obtain a copy of the personal data we hold about you.
• Right to rectification: to correct inaccurate or incomplete data.
• Right to erasure: to request deletion of your data where there is no compelling reason for continued processing.
• Right to restriction: to request that we limit processing of your data.
• Right to data portability: to receive your data in a structured, machine-readable format.
• Right to object: to object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: at any time where processing is based on consent.

California residents additionally have rights under the CCPA, including the right to know what personal information is collected, the right to delete, and the right to opt-out of sale (we do not sell personal data).

To exercise your rights, contact us at: support-center-@drexalonhyxrevox.world. We will respond within 30 days (or 45 days for CCPA requests).

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These include encryption of data in transit (HTTPS), access controls and regular security reviews. No transmission over the internet is entirely secure; we cannot guarantee absolute security but we take reasonable steps to protect your data.

11. Cookies

We use cookies and similar technologies. For full details, please see our Cookie Policy.

12. Children

Our Site and products are not directed to persons under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

13. Complaints

If you are located in the EEA and believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the supervisory authority in your country of residence.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Continued use of the Site after changes constitutes acceptance of the updated Policy.