Privacy Policy
Last Updated: January 2024
1. Introduction and Data Controller Information
This Privacy Policy describes how Lyxtherohrizis ("we," "us," or "our") collects, uses, discloses, and protects personal information when you visit our website at lyxtherohrizis.world or use our services. We are committed to protecting your privacy and ensuring transparency in our data processing activities in accordance with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable data protection laws.
Data Controller:
Lyxtherohrizis
601 North Caroline Street
Baltimore, Maryland 21287
United States
Phone: +1 (410) 955-5000
Email: reply@lyxtherohrizis.world
For any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us using the information provided above.
2. Information We Collect
2.1 Personal Information You Provide
We collect personal information that you voluntarily provide to us when you:
- Place an order through our website
- Fill out contact forms or inquiry forms
- Subscribe to our newsletter or marketing communications
- Create an account on our website
- Contact our customer service team
- Participate in surveys, promotions, or contests
The types of personal information we may collect include:
- Full name
- Email address
- Phone number
- Mailing address and shipping address
- Billing information and payment details
- Order history and purchase information
- Communication preferences
- Any other information you choose to provide in messages or forms
2.2 Information Automatically Collected
When you visit our website, we automatically collect certain information about your device and browsing behavior, including:
- IP address and geolocation data
- Browser type and version
- Operating system
- Device identifiers
- Pages visited and time spent on pages
- Referring website or source
- Click patterns and navigation paths
- Date and time of visits
This information is collected through cookies, web beacons, log files, and similar tracking technologies. For more information about our use of cookies, please refer to our Cookies Policy.
2.3 Information from Third Parties
We may receive information about you from third-party sources, including:
- Payment processors and financial institutions
- Shipping and delivery service providers
- Marketing and analytics service providers
- Social media platforms (if you interact with us through social media)
- Publicly available sources and data aggregators
3. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process your personal data based on the following legal grounds:
- Consent: You have given explicit consent for us to process your personal data for specific purposes, such as marketing communications.
- Contract Performance: Processing is necessary to fulfill our contractual obligations to you, such as processing and delivering your orders.
- Legal Obligation: Processing is required to comply with legal obligations, such as tax and accounting requirements.
- Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, network security, and business analytics, provided these interests do not override your fundamental rights and freedoms.
4. How We Use Your Information
We use the collected information for the following purposes:
4.1 Order Processing and Fulfillment
- Processing and completing your orders
- Arranging shipping and delivery
- Processing payments and preventing fraud
- Sending order confirmations and updates
- Managing returns, refunds, and exchanges
4.2 Customer Service and Communication
- Responding to your inquiries and requests
- Providing customer support
- Sending important notices about our services
- Notifying you about changes to our policies or terms
4.3 Marketing and Promotional Activities
- Sending promotional emails and newsletters (with your consent)
- Personalizing marketing content based on your interests
- Conducting market research and surveys
- Running contests, promotions, and special offers
4.4 Website Improvement and Analytics
- Analyzing website usage and user behavior
- Improving website functionality and user experience
- Testing new features and services
- Conducting data analytics and statistical analysis
4.5 Legal and Security Purposes
- Complying with legal obligations and regulations
- Protecting against fraud, unauthorized access, and security threats
- Enforcing our terms and conditions
- Resolving disputes and legal claims
- Maintaining records for accounting and tax purposes
5. Data Sharing and Disclosure
We do not sell your personal information to third parties. However, we may share your information with the following categories of recipients:
5.1 Service Providers
We engage trusted third-party service providers to perform functions on our behalf, including:
- Payment processing companies
- Shipping and logistics providers
- Email service providers and marketing platforms
- Web hosting and cloud storage providers
- Customer relationship management (CRM) systems
- Analytics and data analysis services
These service providers have access to personal information only as necessary to perform their functions and are contractually obligated to protect your data and use it only for the purposes we specify.
5.2 Business Transfers
In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal information may be transferred to the acquiring entity or successor organization. We will notify you of any such change and provide information about your choices regarding your personal data.
5.3 Legal Requirements
We may disclose your personal information when required by law or in response to:
- Court orders, subpoenas, or legal processes
- Requests from government authorities or law enforcement agencies
- Protection of our legal rights and property
- Prevention of fraud or illegal activities
- Protection of the safety and security of our users and the public
5.4 With Your Consent
We may share your information with third parties when you have given us explicit consent to do so.
6. International Data Transfers
Your personal information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from those in your jurisdiction.
When we transfer personal data from the EEA, UK, or Switzerland to countries that do not provide an adequate level of data protection, we implement appropriate safeguards, including:
- Standard Contractual Clauses approved by the European Commission
- Binding Corporate Rules
- Privacy Shield certification (where applicable)
- Other legally recognized transfer mechanisms
You may request a copy of the safeguards we have implemented by contacting us using the information provided in this Privacy Policy.
7. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
Specific retention periods include:
- Order and Transaction Data: Retained for 7 years to comply with tax, accounting, and legal requirements.
- Marketing Communications: Retained until you unsubscribe or withdraw consent, after which data is deleted within 30 days.
- Account Information: Retained for the duration of your account's active status and for 2 years after account closure.
- Customer Service Records: Retained for 3 years to maintain service quality and resolve disputes.
- Website Analytics Data: Aggregated and anonymized data may be retained indefinitely for statistical purposes.
When personal information is no longer needed, we securely delete or anonymize it in accordance with our data retention and deletion policies.
8. Your Rights and Choices
Depending on your location and applicable laws, you may have the following rights regarding your personal information:
8.1 Right to Access
You have the right to request access to the personal information we hold about you and receive a copy of that information.
8.2 Right to Rectification
You have the right to request correction of inaccurate or incomplete personal information.
8.3 Right to Erasure (Right to be Forgotten)
You have the right to request deletion of your personal information under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
8.4 Right to Restriction of Processing
You have the right to request that we restrict the processing of your personal information under certain conditions.
8.5 Right to Data Portability
You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
8.6 Right to Object
You have the right to object to the processing of your personal information for direct marketing purposes or when processing is based on legitimate interests.
8.7 Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
8.8 Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your residence, workplace, or where an alleged infringement occurred.
8.9 How to Exercise Your Rights
To exercise any of these rights, please contact us at:
Email: reply@lyxtherohrizis.world
Phone: +1 (410) 955-5000
Mail: 601 North Caroline Street, Baltimore, Maryland 21287, United States
We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.
9. Security Measures
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using SSL/TLS protocols (HTTPS)
- Encryption of sensitive data at rest
- Regular security assessments and vulnerability testing
- Access controls and authentication mechanisms
- Employee training on data protection and security practices
- Secure data backup and disaster recovery procedures
- Firewall protection and intrusion detection systems
- Regular software updates and security patches
While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, and you provide information at your own risk.
10. Children's Privacy
Our website and services are not directed to children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information promptly.
11. Third-Party Links and Services
Our website may contain links to third-party websites, services, or applications that are not operated or controlled by us. This Privacy Policy does not apply to those third-party sites. We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.
12. California Privacy Rights (CCPA)
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):
- Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collection, and the categories of third parties with whom we share information.
- Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
- Right to Opt-Out: You have the right to opt-out of the sale of your personal information. We do not sell personal information.
- Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your CCPA rights.
To exercise these rights, please contact us using the information provided in Section 8.9. We will verify your identity before processing your request and respond within 45 days.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by:
- Posting the updated Privacy Policy on our website with a new "Last Updated" date
- Sending an email notification to the email address associated with your account
- Displaying a prominent notice on our website
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website and services after changes are posted constitutes your acceptance of the updated Privacy Policy.
14. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:
Lyxtherohrizis
601 North Caroline Street
Baltimore, Maryland 21287
United States
Phone: +1 (410) 955-5000
Email: reply@lyxtherohrizis.world
We are committed to resolving any privacy concerns you may have and will respond to your inquiries in a timely manner.