Privacy Policy

Last updated: March 11, 2026

This Privacy Policy describes how Quexylanhrax ("we," "us," or "our") collects, uses, stores, and protects your personal data when you use our website https://quexylanhrax.world and related services. We are committed to transparency and compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) where applicable, and United States federal and state privacy laws.

1. Data Controller

The data controller responsible for your personal data is:

Quexylanhrax
1440 Broadway, New York, NY 10018, United States
Email: admin@quexylanhrax.world
Phone: +18447883460

If you have questions about this policy or your data, please contact us using the details above.

2. Legal Basis for Processing (GDPR)

Where the GDPR applies, we process personal data on the following bases:

Contract: Processing necessary to perform our contract with you (e.g., processing orders, delivering products).
Legitimate interests: Processing necessary for our legitimate interests (e.g., improving our website, security, analytics) where not overridden by your rights.
Consent: Where we rely on consent (e.g., marketing, non-essential cookies), you may withdraw it at any time.
Legal obligation: Processing required to comply with applicable law (e.g., tax, consumer protection).

3. Personal Data We Collect

We may collect the following categories of personal data:

Identity and contact data: Name, email address, phone number, shipping and billing address when you place an order or contact us.
Transaction data: Order details, payment-related information (processed by secure payment providers), and communication history related to your orders.
Technical and usage data: IP address, browser type and version, device type, operating system, referring URLs, pages visited, date and time of access, and similar technical data collected automatically when you use our website.
Cookie and similar technologies data: Data collected via cookies and similar technologies as described in our Cookie Policy.
Communication data: Content of messages you send us (e.g., contact form, email) and records of our responses.

We do not knowingly collect sensitive personal data (e.g., health data, racial or ethnic origin) unless you voluntarily provide it in a message and we need it to respond. We encourage you not to include unnecessary sensitive data in communications.

4. Purposes of Processing

We use your personal data for the following purposes:

To process and fulfill your orders, including shipping and customer support.
To communicate with you about your orders, account, or inquiries.
To send transactional emails (e.g., order confirmation, shipping updates) where necessary for the performance of the contract.
To improve our website, products, and services (e.g., analytics, testing, research).
To ensure security and prevent fraud (e.g., monitoring for abusive or illegal activity).
To comply with legal obligations (e.g., tax, consumer rights, responding to lawful requests from authorities).
Where you have consented, to send marketing communications and to use non-essential cookies as described in our Cookie Policy.

5. Retention Periods

We retain your data only as long as necessary for the purposes set out in this policy:

Order and transaction data: Retained for the period required by applicable law (e.g., tax and commercial law, typically at least 6–7 years in the US) and for handling returns, disputes, or claims.
Contact and communication data: Retained for the duration of our business relationship and for a reasonable period thereafter for follow-up and legal purposes (e.g., up to 6 years where relevant).
Technical and access logs: Retained for a limited period necessary for security and diagnostics (e.g., up to 12–24 months unless a longer period is required by law).
Cookie and analytics data: As specified in our Cookie Policy.
Marketing data: Until you withdraw consent or object, or for a short period after our last contact, in line with applicable law.

After the retention period, we delete or anonymize your data so it can no longer identify you.

6. Your Rights

Depending on your location, you may have the following rights:

Access: Request a copy of the personal data we hold about you.
Rectification: Request correction of inaccurate or incomplete data.
Erasure: Request deletion of your data in certain circumstances (e.g., where processing is based on consent and you withdraw it, or where we no longer need the data).
Restriction: Request that we limit how we use your data in certain situations.
Portability: Request a copy of your data in a structured, machine-readable format where the legal basis is contract or consent.
Objection: Object to processing based on legitimate interests or to direct marketing.
Withdraw consent: Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
Complaint: Lodge a complaint with a supervisory authority (e.g., in the EU/EEA, your local data protection authority).

To exercise any of these rights, contact us at admin@quexylanhrax.world or at our postal address above. We will respond within the time frame required by applicable law (e.g., one month under GDPR, subject to extensions where permitted). We may need to verify your identity before processing your request.

If you are in the United States, certain states provide additional rights (e.g., right to know, delete, opt out of sale). We do not sell your personal data. We will honor such rights to the extent required by applicable state law.

7. Data Sharing and Recipients

We may share your data with:

Service providers: Processors that help us operate our website, process payments, ship orders, send emails, or analyze traffic (e.g., hosting, payment gateways, logistics, analytics). We ensure they are bound by contract to use data only as instructed and to protect it appropriately.
Legal and regulatory bodies: Where required by law or to protect our rights (e.g., in response to court orders or lawful requests from authorities).
Professional advisers: Lawyers, accountants, or auditors where necessary for compliance or legal purposes.

We do not sell your personal data to third parties. If our business is sold or merged, your data may be transferred as part of that transaction, subject to the same privacy commitments.

8. International Transfers

Your data may be processed in the United States or other countries where our service providers operate. If you are in the European Economic Area (EEA) or UK, such transfers will be carried out in accordance with applicable law, including use of standard contractual clauses or other approved mechanisms where required.

9. Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

Use of HTTPS and encryption in transit for our website.
Secure handling of payment data through certified payment providers; we do not store full card numbers.
Access controls and confidentiality obligations for staff and processors.
Regular review of our security practices and incident response procedures.

No method of transmission or storage is 100% secure. We cannot guarantee absolute security but we work to reduce risks to your data.

10. Children

Our website and services are not directed at individuals under 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will be revised when we make material changes. We encourage you to review this page periodically. Where required by law, we will notify you of significant changes or obtain your consent.

12. Contact

For any questions about this Privacy Policy or our data practices, contact us at:

Quexylanhrax
1440 Broadway, New York, NY 10018, United States
Email: admin@quexylanhrax.world
Phone: +18447883460