Privacy Policy

Wlaxyronhlix.world ("we", "us", "our") is committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy explains in detail how we collect, use, store, disclose, and protect your personal data when you visit our website, place orders, or interact with our services, in full compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable international data protection frameworks.

Data Controller

Scope and Applicability

This policy applies to all personal data processed by us, whether collected through our website, email, telephone, or any other channel. It covers data relating to customers, prospective customers, newsletter subscribers, and website visitors. By using our services, you acknowledge that you have read and understood this policy.

Data We Collect

We may collect the following categories of personal data, depending on your interaction with us:

• Identity data: Full name, title, date of birth (where relevant for product suitability)
• Contact data: Email address, telephone number, postal address, billing and delivery addresses
• Transaction data: Order history, payment details (processed securely by payment providers), purchase preferences
• Technical data: IP address, browser type and version, device type, operating system, unique device identifiers, time zone setting
• Usage data: Pages visited, time spent on pages, navigation paths, click patterns, page response times
• Communication data: Messages, enquiries, feedback, and correspondence you send to us
• Marketing data: Your preferences regarding marketing communications, opt-in consent records

How We Collect Your Data

We collect data through various means: directly when you fill out forms on our website (e.g. order form, contact form), when you correspond with us by email or post, when you browse our website (cookies and similar technologies), when you interact with our social media presence, and from third parties such as analytics providers or payment processors where we have lawful grounds to do so.

Legal Basis and Purposes

We process your data only where we have a lawful basis. The table below summarises our processing activities:

• Order fulfillment and customer service: Contract performance – necessary to process orders, deliver products, respond to enquiries, and provide after-sales support
• Legal and regulatory compliance: Legal obligation – to comply with tax, consumer protection, and other applicable laws
• Website security and fraud prevention: Legitimate interests – to protect our business and users from fraud, abuse, and security threats
• Website analytics and improvement: Legitimate interests or consent – to understand how our site is used and improve user experience
• Marketing communications: Consent – only where you have given explicit opt-in consent; you may withdraw at any time

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Our retention periods include:

• Order and transaction data: 7 years for tax and legal compliance (UK requirement)
• Customer account and contact data: Until you request deletion or for 7 years after last transaction, whichever is later
• Customer service correspondence: 3 years from last contact
• Marketing consent records: Until consent is withdrawn, then deleted promptly
• Cookies and analytics data: As specified in our Cookie Policy
• Technical and usage data: Typically up to 26 months for analytics purposes

Your Rights Under UK GDPR

Under the UK GDPR and Data Protection Act 2018, you have the following rights in relation to your personal data:

• Right of access: Request a copy of your personal data we hold (subject access request)
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your data ("right to be forgotten") in certain circumstances
• Right to restriction: Request that we restrict processing in certain situations
• Right to data portability: Receive your data in a structured, commonly used, machine-readable format
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, please contact us using the details in the Data Controller section. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection (ico.org.uk).

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption in transit (HTTPS/TLS), access controls and authentication, secure storage, regular security assessments, and staff training on data protection. We do not sell your personal data to third parties. In the event of a data breach that poses a risk to your rights and freedoms, we will notify the ICO and you as required by law.

International Transfers

Where we transfer your data outside the UK or European Economic Area (EEA), we ensure that appropriate safeguards are in place. This may include adequacy decisions by the UK government or European Commission, standard contractual clauses approved by the ICO, or other recognised transfer mechanisms. We will provide further information on request.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the nature of our services. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically. Continued use of our services after changes constitutes acceptance of the updated policy.