Privacy Policy
Last updated:
1. Introduction
Welcome to Spyxaronmlox ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website spyxaronmlox.world and purchase our products.
This policy applies to all users of our website and services, and is designed to comply with the General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, and other applicable data protection laws.
2. Data Controller Information
The data controller responsible for your personal data is:
Spyxaronmlox
1-4 St Mary St, Cardiff CF10 1GD
United Kingdom
Email: serviceteam@spyxaronmlox.world
For any questions regarding this Privacy Policy or our data practices, please contact us using the details above.
3. Personal Data We Collect
We collect and process the following categories of personal data:
3.1 Information You Provide Directly
- Identity Data: Full name
- Contact Data: Email address, phone number (optional), delivery address
- Transaction Data: Details about orders you have placed
- Communication Data: Messages, inquiries, and correspondence with us
3.2 Information Collected Automatically
- Technical Data: IP address, browser type and version, operating system, device information
- Usage Data: Information about how you use our website, products, and services
- Cookie Data: Information collected through cookies and similar technologies (see our Cookie Policy)
4. Legal Bases for Processing
We process your personal data based on the following legal grounds under GDPR Article 6:
- Contract Performance (Art. 6(1)(b)): Processing necessary to fulfill your order and provide our services
- Legal Obligation (Art. 6(1)(c)): Processing required to comply with legal requirements
- Legitimate Interests (Art. 6(1)(f)): Processing for our legitimate business interests, such as improving our services, provided they do not override your rights
- Consent (Art. 6(1)(a)): Where you have given explicit consent for specific processing activities, such as marketing communications
5. Purposes of Processing
We use your personal data for the following purposes:
- To process and fulfill your orders
- To manage your customer account and relationship
- To communicate with you about your orders and inquiries
- To send marketing communications (with your consent)
- To improve our website, products, and services
- To comply with legal obligations
- To prevent fraud and maintain security
- To analyze website usage and trends
6. Data Sharing and Disclosure
We may share your personal data with the following categories of recipients:
- Service Providers: Third-party companies that help us operate our business, such as payment processors, shipping carriers, and IT service providers
- Legal Authorities: When required by law, court order, or governmental authority
- Business Transfers: In connection with a merger, acquisition, or sale of assets
We require all third parties to maintain the confidentiality of your data and to use it only for the purposes for which we disclose it to them. We do not sell your personal data to third parties.
7. International Data Transfers
Your personal data may be transferred to and processed in countries outside the UK and European Economic Area (EEA). When we transfer your data internationally, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions by the UK government or European Commission
- Binding Corporate Rules where applicable
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Order Data: 7 years from the date of purchase (for tax and legal compliance)
- Marketing Data: Until you withdraw consent or 3 years of inactivity
- Technical/Usage Data: 2 years
- Communication Records: 3 years from the last communication
After the retention period expires, we securely delete or anonymize your personal data.
9. Your Rights Under GDPR
Under the GDPR and UK data protection law, you have the following rights:
- Right of Access (Art. 15): Request a copy of the personal data we hold about you
- Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data
- Right to Erasure (Art. 17): Request deletion of your personal data in certain circumstances
- Right to Restrict Processing (Art. 18): Request limitation of how we process your data
- Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format
- Right to Object (Art. 21): Object to processing based on legitimate interests or for marketing purposes
- Right to Withdraw Consent (Art. 7(3)): Withdraw consent at any time where processing is based on consent
- Right to Lodge a Complaint: File a complaint with a supervisory authority
To exercise any of these rights, please contact us at serviceteam@spyxaronmlox.world. We will respond to your request within one month.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using SSL/TLS (HTTPS)
- Secure storage with access controls
- Regular security assessments and updates
- Staff training on data protection
- Incident response procedures
While we take all reasonable precautions, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.
11. Children's Privacy
Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.
12. Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority. In the UK, this is the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Phone: 0303 123 1113
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. We will notify you of any material changes by posting the new policy on this page with an updated "Last updated" date. We encourage you to review this policy periodically.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Spyxaronmlox
1-4 St Mary St, Cardiff CF10 1GD
United Kingdom