Privacy Policy

Last updated: January 1, 2024

1. Introduction

Xogvalenquazl ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website xogvalenquazl.world and purchase our products.

We process personal data in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Irish Data Protection Act 2018, and other applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

Xogvalenquazl
Dunnes Shopping Centre, Humbert St
Ballina, Co. Mayo, F26 T8KW
Ireland
Email: hello@xogvalenquazl.world

3. Personal Data We Collect

We collect personal data that you voluntarily provide to us when you:

  • Place an order through our website
  • Create an account
  • Subscribe to our newsletter
  • Contact us with inquiries
  • Participate in surveys or promotions

3.1 Information You Provide

  • Identity Data: First name, last name
  • Contact Data: Email address, telephone number, delivery address
  • Transaction Data: Details about orders and payments
  • Communication Data: Your correspondence with us

3.2 Information Collected Automatically

  • Technical Data: IP address, browser type and version, time zone setting, operating system
  • Usage Data: Information about how you use our website
  • Cookie Data: Please see our Cookie Policy for details

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contract Performance: Processing necessary to fulfill your orders and provide our services
  • Legitimate Interests: Processing for our business purposes, such as improving our services and preventing fraud
  • Legal Obligation: Processing required to comply with legal requirements
  • Consent: Where you have given explicit consent for specific processing activities (e.g., marketing communications)

5. How We Use Your Data

We use your personal data for the following purposes:

  • Processing and fulfilling your orders
  • Communicating with you about your orders and inquiries
  • Sending marketing communications (with your consent)
  • Improving our website and services
  • Complying with legal obligations
  • Preventing fraud and ensuring security

6. Data Sharing and Processors

We may share your personal data with:

  • Service Providers (Processors): Third parties who process personal data on our instructions, such as payment service providers, delivery and logistics partners, hosting and IT support providers, email and customer communication tools, and analytics or advertising technology providers where you have consented to those cookies or similar technologies
  • Legal Authorities: When required by law or to protect our rights
  • Business Transfers: In connection with any merger, sale, or acquisition

We use written agreements with processors that require them to protect personal data and process it only as we direct, in line with Article 28 GDPR. We do not sell your personal data to third parties.

6.1 Special Categories of Data

We do not ask you to provide “special category” data (such as health information) unless you voluntarily include it in a message to us. If you do, we will only process it where necessary to respond to your enquiry or as otherwise permitted by law.

7. International Data Transfers

Your personal data may be transferred to, and processed in, countries outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses approved by the European Commission
  • Transfers to countries deemed to provide adequate protection by the European Commission

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • Transaction Data: 7 years for tax and accounting purposes
  • Marketing Preferences: Until you withdraw consent
  • Account Information: As long as your account is active, plus a reasonable period thereafter
  • Communication Records: 3 years from the date of communication

9. Your Rights Under GDPR

Under the GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

  • Right of Access (Article 15): Request confirmation of whether we process your data and obtain a copy
  • Right to Rectification (Article 16): Request correction of inaccurate or incomplete data
  • Right to Erasure (Article 17): Request deletion of your data in certain circumstances
  • Right to Restrict Processing (Article 18): Request that we limit how we use your data in certain circumstances
  • Right to Data Portability (Article 20): Where processing is based on contract or consent and carried out by automated means, request a structured, commonly used, machine-readable copy
  • Right to Object (Article 21): Object to processing based on legitimate interests (including profiling) and to processing for direct marketing, including any related profiling
  • Right to Withdraw Consent: Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal
  • Right to Lodge a Complaint (Article 77): Lodge a complaint with a supervisory authority (see Section 12)

To exercise any of these rights, please contact us at hello@xogvalenquazl.world. We will respond without undue delay and in any event within one month of receiving your request (this may be extended by two further months in complex cases, in which case we will inform you).

9.1 Direct Marketing

Where we send electronic direct marketing (for example, by email), we will only do so with your prior consent or as otherwise permitted under the ePrivacy rules and Irish law. You may opt out of marketing communications at any time using the unsubscribe link in our emails or by contacting us at the email address above.

9.2 Automated Decision-Making

We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • SSL/TLS encryption for data transmission
  • Secure storage systems
  • Access controls and authentication
  • Regular security assessments
  • Staff training on data protection

11. Children's Privacy

Our website and products are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information.

12. Complaints and Supervisory Authority

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Data Protection Commission (DPC), the Irish supervisory authority for data protection:

Data Protection Commission
21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
Website: https://www.dataprotection.ie

You may also contact the DPC in the Member State where you live or work if you are an EU/EEA resident and applicable law allows.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: hello@xogvalenquazl.world
Address: Dunnes Shopping Centre, Humbert St, Ballina, Co. Mayo, F26 T8KW, Ireland