Privacy Policy

1. Introduction

This Privacy Policy describes how Lyxtherosloxaron ("we," "us," or "our") collects, uses, stores, and protects your personal information when you visit our website at lyxtherosloxaron.world (the "Website") or use our services. We are committed to protecting your privacy and ensuring that your personal data is handled in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

By using our Website or services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.

2. Data Controller Information

The data controller responsible for your personal information is:

Company Name: Lyxtherosloxaron
Registered Address: Sandakerveien 138, 0484 Oslo, Norway
Contact Email: reply@lyxtherosloxaron.world
Contact Phone: +47 22 89 50 00

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us using the information provided above.

3. Personal Information We Collect

We collect various types of personal information depending on how you interact with our Website and services. The categories of personal data we may collect include:

3.1 Information You Provide Directly

When you place an order, contact us, or interact with our Website, you may provide us with the following information:

• Contact Information: Name, email address, phone number, postal address
• Order Information: Product selections, order details, delivery preferences
• Communication Data: Messages, inquiries, feedback, and correspondence with our customer service team
• Payment Information: Billing address and payment method details (note: we do not store complete credit card numbers; payment processing is handled by secure third-party payment processors)
• Account Information: If you create an account, username, password, and account preferences

3.2 Information Collected Automatically

When you visit our Website, we automatically collect certain technical information through cookies and similar technologies:

• Device Information: IP address, browser type and version, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, links clicked, referring website, date and time of visits
• Location Data: General geographic location based on IP address
• Cookie Data: Information stored in cookies and similar tracking technologies (see our Cookies Policy for more details)

3.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment processors and financial institutions
• Delivery and logistics partners
• Marketing and analytics service providers
• Social media platforms (if you interact with us through social media)

4. Legal Basis for Processing Personal Data

Under GDPR, we must have a legal basis for processing your personal data. We process your personal information based on the following legal grounds:

4.1 Contractual Necessity

We process your personal data to fulfill our contractual obligations when you place an order or use our services. This includes processing orders, delivering products, providing customer support, and managing your account.

4.2 Legitimate Interests

We may process your data based on our legitimate business interests, such as:

• Improving our products and services
• Conducting market research and analytics
• Preventing fraud and ensuring security
• Managing our business operations
• Enforcing our legal rights and obligations

4.3 Legal Compliance

We process personal data to comply with legal obligations, including tax laws, accounting requirements, and regulatory compliance.

4.4 Consent

Where required by law, we obtain your explicit consent before processing your personal data, particularly for marketing communications and certain types of cookies. You have the right to withdraw your consent at any time.

5. How We Use Your Personal Information

We use your personal information for the following purposes:

5.1 Order Processing and Fulfillment

• Processing and fulfilling your orders
• Communicating with you about your orders
• Arranging delivery and shipping
• Processing payments and preventing fraud
• Handling returns, refunds, and exchanges

5.2 Customer Service and Support

• Responding to your inquiries and requests
• Providing customer support and assistance
• Resolving complaints and disputes
• Conducting customer satisfaction surveys

5.3 Marketing and Communications

• Sending promotional emails and newsletters (with your consent)
• Informing you about new products, special offers, and updates
• Conducting marketing campaigns and promotions
• Personalizing your experience on our Website

5.4 Website Improvement and Analytics

• Analyzing website usage and user behavior
• Improving website functionality and user experience
• Conducting research and development
• Testing new features and services

5.5 Legal and Security Purposes

• Complying with legal obligations and regulations
• Protecting against fraud, abuse, and security threats
• Enforcing our terms and conditions
• Defending legal claims and protecting our rights

6. Data Sharing and Disclosure

We do not sell your personal information to third parties. However, we may share your data with the following categories of recipients for the purposes described in this Privacy Policy:

6.1 Service Providers

We work with trusted third-party service providers who assist us in operating our business, including:

• Payment processors and financial institutions
• Shipping and delivery companies
• Web hosting and IT service providers
• Email and communication service providers
• Marketing and advertising platforms
• Analytics and data analysis services
• Customer relationship management (CRM) systems

These service providers are contractually obligated to protect your data and use it only for the specific purposes we authorize.

6.2 Legal Requirements

We may disclose your personal information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to:

• Comply with legal processes and obligations
• Protect our rights, property, or safety
• Protect the rights, property, or safety of our customers or others
• Prevent or investigate fraud, security issues, or illegal activities

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity or acquiring party, subject to the same privacy protections described in this Privacy Policy.

6.4 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

7. International Data Transfers

Your personal information may be transferred to and processed in countries outside the European Economic Area (EEA) where our service providers are located. When we transfer your data internationally, we ensure appropriate safeguards are in place to protect your information, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions recognizing that certain countries provide adequate data protection
• Binding Corporate Rules for transfers within multinational organizations
• Other legally approved transfer mechanisms

We take all reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy and applicable data protection laws.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal, accounting, or reporting requirements. The retention periods vary depending on the type of data and the purpose for which it is processed:

8.1 Order and Transaction Data

We retain order information, including contact details, order history, and payment records, for a minimum of 7 years to comply with tax and accounting regulations.

8.2 Marketing Communications

We retain marketing consent records and communication preferences until you withdraw your consent or request deletion, plus an additional period to maintain suppression lists to honor your opt-out preferences.

8.3 Website Usage Data

Analytics and usage data are typically retained for 26 months, after which they are anonymized or deleted.

8.4 Customer Service Records

Customer service correspondence and support tickets are retained for 3 years to maintain service quality and resolve potential disputes.

8.5 Account Information

If you create an account, we retain your account information until you request account deletion, after which we delete or anonymize your data within 30 days, except where retention is required by law.

When personal data is no longer needed, we securely delete or anonymize it in accordance with our data retention and deletion policies.

9. Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

9.1 Right of Access

You have the right to request access to the personal information we hold about you and receive a copy of your data in a commonly used electronic format.

9.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information we hold about you.

9.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or when you withdraw consent.

9.4 Right to Restriction of Processing

You have the right to request that we restrict the processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to processing.

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

9.6 Right to Object

You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we have compelling legitimate grounds that override your interests.

9.7 Right to Withdraw Consent

Where we process your data based on consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

9.8 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your habitual residence, place of work, or place of alleged infringement if you believe our processing of your personal data violates data protection laws.

Norwegian Data Protection Authority (Datatilsynet):
Website: www.datatilsynet.no
Email: postkasse@datatilsynet.no
Phone: +47 22 39 69 00

9.9 Exercising Your Rights

To exercise any of these rights, please contact us at reply@lyxtherosloxaron.world or write to us at Sandakerveien 138, 0484 Oslo, Norway. We will respond to your request within one month, although this period may be extended by two additional months in complex cases. We may request additional information to verify your identity before processing your request.

10. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

10.1 Technical Safeguards

• Encryption of data in transit using SSL/TLS protocols (HTTPS)
• Encryption of sensitive data at rest
• Secure authentication and access controls
• Regular security updates and patches
• Firewall protection and intrusion detection systems
• Regular security audits and vulnerability assessments

10.2 Organizational Safeguards

• Access to personal data is restricted to authorized personnel only
• Employee training on data protection and security practices
• Confidentiality agreements with employees and service providers
• Data protection impact assessments for high-risk processing activities
• Incident response and data breach notification procedures

10.3 Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach poses a high risk to your rights and freedoms, we will also notify you directly without undue delay and provide information about the nature of the breach and the measures taken to address it.

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we continuously work to improve our security measures and protect your data.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activities and preferences. Cookies are small text files stored on your device that help us improve your experience on our Website.

For detailed information about the cookies we use, how we use them, and how you can manage your cookie preferences, please refer to our separate Cookies Policy available at lyxtherosloxaron.world/cookies-policy.html.

12. Third-Party Links

Our Website may contain links to third-party websites, services, or applications that are not operated or controlled by us. This Privacy Policy applies only to our Website and services. We are not responsible for the privacy practices or content of third-party websites.

We encourage you to review the privacy policies of any third-party websites you visit. Clicking on third-party links or enabling third-party connections may allow those parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

13. Children's Privacy

Our Website and services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately.

If we become aware that we have collected personal information from a child under 16 without parental consent, we will take steps to delete that information from our systems as quickly as possible.

14. Marketing Communications

With your consent, we may send you marketing communications about our products, services, promotions, and news. You can opt out of receiving marketing emails at any time by:

• Clicking the "unsubscribe" link in any marketing email we send you
• Contacting us at reply@lyxtherosloxaron.world with your opt-out request
• Updating your communication preferences in your account settings (if applicable)

Please note that even if you opt out of marketing communications, we will still send you transactional and service-related messages, such as order confirmations, shipping notifications, and important account updates.

15. Automated Decision-Making and Profiling

We may use automated decision-making and profiling techniques to personalize your experience, improve our services, and detect fraud. This may include:

• Analyzing your browsing behavior to recommend relevant products
• Assessing transaction patterns to prevent fraudulent activities
• Segmenting customers for targeted marketing campaigns

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. If you wish to exercise this right or have concerns about automated decision-making, please contact us.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this page
• Notify you by email (if you have provided your email address)
• Display a prominent notice on our Website
• Obtain your consent if required by applicable law

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your personal information. Your continued use of our Website and services after changes to this Privacy Policy constitutes your acceptance of the updated policy.

17. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

Lyxtherosloxaron
Sandakerveien 138
0484 Oslo, Norway
Email: reply@lyxtherosloxaron.world
Phone: +47 22 89 50 00

We are committed to resolving any privacy concerns you may have and will respond to your inquiries as promptly as possible.