Privacy Policy

1. Introduction

Klaxyrondhorath ("we," "us," or "our") operates the website at klaxyrondhorath.world (the "Site"). We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679, the California Consumer Privacy Act (CCPA), and other applicable data protection legislation.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, how long we retain it, and what rights you have in relation to your data.

By using this Site or submitting your information via our order form, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

The data controller responsible for your personal data is:

3. Data We Collect

We collect personal data that you provide to us directly through the Site, including:

• Identification data: full name
• Contact data: email address, phone number
• Communication data: messages or inquiries you submit via the order form
• Consent records: records of your GDPR consent and cookie preferences

We also automatically collect certain technical data when you visit the Site:

• IP address and approximate geolocation
• Browser type and version
• Operating system
• Pages visited and time spent on the Site
• Referral source (how you arrived at the Site)
• Device type and screen resolution

4. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6 of the GDPR:

• Consent (Art. 6(1)(a)): When you submit the order form and check the GDPR consent checkbox, you consent to the processing of your data for order fulfillment and communication purposes. You may withdraw this consent at any time.
• Legitimate interests (Art. 6(1)(f)): We process technical data (such as IP address and usage data) to maintain the security and functionality of our Site and to improve the user experience.
• Legal obligation (Art. 6(1)(c)): We may retain certain records as required by applicable law, including tax and accounting regulations.

5. Purposes of Processing

We use your personal data for the following purposes:

• Processing and fulfilling your order requests
• Communicating with you regarding your order, queries, or requests
• Responding to customer service inquiries
• Ensuring the security and proper functioning of the Site
• Improving the Site based on usage analytics (where analytics cookies are accepted)
• Complying with legal obligations
• Sending relevant marketing communications (only where you have provided explicit consent)

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law.

• Order-related data: retained for up to 5 years after the last transaction for legal and accounting purposes
• Communication records: retained for up to 3 years from the date of the last communication
• Marketing consent records: retained until you withdraw consent, plus an additional 12 months for audit purposes
• Technical/log data: retained for up to 12 months

After the applicable retention period, your data will be securely deleted or anonymized.

7. Sharing of Personal Data

We do not sell, rent, or trade your personal data to third parties. We may share your data with trusted third-party service providers who assist us in operating the Site and fulfilling orders, including:

• Logistics and shipping service providers
• Payment processing services
• Email communication and CRM platforms
• Website hosting and security providers
• Analytics service providers (where you have consented to analytics cookies)

All third-party service providers are required to handle your data in accordance with applicable data protection laws and to implement appropriate security measures. We enter into data processing agreements with all processors as required by GDPR.

We may also disclose your data where required to do so by law, by a court order, or by a government authority.

8. International Data Transfers

Our business is based in the United States. If you are located outside the United States, your data may be transferred to and processed in the US. We ensure that any such transfer is carried out in accordance with applicable law and with appropriate safeguards in place, including standard contractual clauses approved by the European Commission where applicable.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of access: You have the right to request a copy of the personal data we hold about you.
• Right to rectification: You may request that we correct any inaccurate or incomplete personal data.
• Right to erasure ("right to be forgotten"): You may request that we delete your personal data, subject to certain legal exceptions.
• Right to restriction of processing: You may request that we restrict the processing of your data in certain circumstances.
• Right to data portability: You may request to receive your data in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your data on grounds of legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the details in Section 2. We will respond to your request within 30 days. If you believe we have not handled your data correctly, you have the right to lodge a complaint with your local data protection supervisory authority.

10. Cookies

We use cookies and similar tracking technologies on our Site. For detailed information about the cookies we use, the purposes for which we use them, and how to manage your cookie preferences, please see our Cookie Policy.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• HTTPS encryption for all data transmitted via the Site
• Access controls limiting data access to authorized personnel only
• Regular security assessments and system reviews
• Data minimization — we collect only the data necessary for stated purposes

While we take all reasonable steps to protect your data, no transmission over the internet is 100% secure, and we cannot guarantee absolute security.

12. Children's Privacy

Our Site and products are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us immediately and we will take steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us: