Privacy Policy

1. Introduction

Sraxylonglexiron ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website at https://sraxylonglexiron.world ("the Website") or place an order for our products.

This Policy is written in compliance with the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR) to the extent applicable, and other relevant US federal and state privacy laws.

Please read this Policy carefully. By using our Website, you acknowledge that you have read and understood this Policy. If you do not agree with its terms, please discontinue use of our Website.

2. Information We Collect

We may collect the following categories of personal data:

2.1 Information You Provide Directly

• Contact and Order Information: name, email address, phone number (if provided), and message content submitted through our contact or order form.
• Communication Records: records of any correspondence you send to us by email or through the Website.

2.2 Information Collected Automatically

• Usage Data: information about how you use our Website, including your IP address (anonymised where possible), browser type and version, operating system, referring URL, pages visited, and time and date of your visit.
• Device Information: device identifiers and technical metadata about the device used to access the Website.
• Cookie Data: data collected through cookies and similar tracking technologies, as described in our Cookie Policy.

2.3 Information We Do Not Collect

We do not collect payment card details directly. Any payment processing is handled by third-party payment processors who maintain their own security and privacy standards. We do not knowingly collect personal data from individuals under the age of 18.

3. Legal Basis and Purposes of Processing

We process your personal data only where we have a lawful basis to do so. The table below describes our processing purposes, the legal basis relied upon, and the data categories involved.

4. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law.

• Order and contact records: retained for up to 3 years from the date of the transaction or last interaction, after which they are securely deleted or anonymised.
• Marketing consent records: retained until you withdraw consent, after which we delete your data within 30 days of receiving your withdrawal request, subject to any overriding legal retention requirements.
• Website analytics data: typically retained for no more than 26 months in anonymised or aggregated form.
• Financial and accounting records: retained for a minimum of 7 years as required by US federal and state tax law.

5. Sharing and Disclosure of Personal Data

We do not sell, rent, or trade your personal data to third parties. We may share your data with trusted service providers in the following circumstances:

• Fulfilment and logistics partners: to process and deliver your order.
• Email service providers: to send transactional and service-related communications.
• Analytics providers: to help us understand Website usage (subject to your cookie consent preferences).
• Payment processors: to facilitate secure payment transactions.
• Legal and regulatory bodies: where required to comply with applicable law, court orders, or regulatory requests.

All third-party processors are required to process your data only in accordance with our instructions and applicable data protection law, and to maintain appropriate technical and organisational security measures.

6. International Data Transfers

Our business is based in the United States. If you access our Website from outside the US, your data may be transferred to and processed within the United States. Where we transfer data internationally from the European Economic Area or the UK, we ensure appropriate safeguards are in place in accordance with applicable data protection law, including Standard Contractual Clauses where required.

7. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Right of Access: to request a copy of the personal data we hold about you.
• Right to Rectification: to request correction of inaccurate or incomplete data.
• Right to Erasure: to request deletion of your personal data, subject to applicable legal retention requirements.
• Right to Restrict Processing: to request that we limit the processing of your data in certain circumstances.
• Right to Data Portability: to receive a copy of your data in a structured, machine-readable format where technically feasible.
• Right to Object: to object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
• California Rights (CCPA): California residents have additional rights including the right to know, the right to delete, the right to opt-out of sale (we do not sell personal data), and the right to non-discrimination for exercising these rights.

To exercise any of these rights, please contact us at response@sraxylonglexiron.world. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

If you are located in the EEA and believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

8. Security Measures

We implement appropriate technical and organisational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:

• HTTPS encryption for all data transmitted between your browser and our Website.
• Access controls limiting data access to authorised personnel only.
• Secure data storage with industry-standard protections.
• Regular review and update of security practices.

While we take reasonable precautions, no method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify relevant authorities and affected individuals as required by law.

9. Cookies and Tracking Technologies

Our Website uses cookies and similar tracking technologies. Please refer to our Cookie Policy for full details about the types of cookies we use, their purposes, and how to manage your preferences.

10. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party site you visit.

11. Children's Privacy

Our Website and products are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us immediately so we can delete it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational procedures. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Policy periodically to stay informed about how we protect your data.

13. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us: