1. Introduction
Welcome to Graxylonchep ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website graxylonchep.world and purchase our products, including Serenlix.
This policy complies with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.
2. Data Controller Information
The data controller responsible for your personal data is:
- Company Name: Graxylonchep
- Address: 10 E 31st St, Kearney, NE 68847, United States
- Email: business@graxylonchep.world
- Country: United States
3. Information We Collect
3.1 Personal Data You Provide
We collect information that you voluntarily provide to us, including:
- Contact Information: Name, email address, phone number (optional), shipping address
- Order Information: Products purchased, order history, payment information
- Communication Data: Messages, feedback, and correspondence with us
- Account Information: If you create an account, your username and password
3.2 Automatically Collected Data
When you visit our website, we may automatically collect:
- Device Information: IP address, browser type, operating system
- Usage Data: Pages visited, time spent on pages, click patterns
- Cookies and Similar Technologies: See our Cookie Policy for details
4. Legal Basis for Processing (GDPR)
We process your personal data based on the following legal grounds:
- Consent: When you have given explicit consent for specific purposes
- Contract Performance: To fulfill orders and provide services you requested
- Legal Obligation: To comply with applicable laws and regulations
- Legitimate Interests: For business operations, fraud prevention, and improving our services
5. How We Use Your Information
We use your personal data for the following purposes:
- Processing and fulfilling your orders
- Sending order confirmations and shipping updates
- Responding to your inquiries and providing customer support
- Improving our website, products, and services
- Sending marketing communications (with your consent)
- Preventing fraud and ensuring website security
- Complying with legal obligations
6. Advertising and Third-Party Advertising
We may use online advertising to promote our products and reach potential customers. This may include:
- Advertising platforms: We may work with advertising partners (such as Google) to show relevant ads to users who have visited our website or who match certain interests. These partners may use cookies and similar technologies to measure ad performance and deliver ads on other websites.
- Your choices: You can control interest-based advertising through your cookie preferences on our site (see our Cookie Policy). You can also use industry tools such as the Digital Advertising Alliance’s opt-out page or your browser’s settings to limit ad tracking.
We do not sell your personal data to third parties for their marketing. Data shared with advertising partners is used in accordance with this policy and our Cookie Policy.
7. Data Sharing and Disclosure
We may share your personal data with:
- Service Providers: Payment processors, shipping companies, email service providers
- Legal Authorities: When required by law or to protect our rights
- Business Transfers: In connection with mergers, acquisitions, or asset sales
We do not sell your personal data to third parties for marketing purposes.
8. International Data Transfers
Your data may be transferred to and processed in countries outside your residence. When transferring data internationally, we implement appropriate safeguards such as Standard Contractual Clauses to ensure your data remains protected.
9. Data Retention
We retain your personal data for as long as necessary to:
- Fulfill the purposes outlined in this policy
- Comply with legal and regulatory requirements
- Resolve disputes and enforce our agreements
Typically, we retain order data for 7 years for tax and legal purposes. Marketing data is retained until you withdraw consent.
10. Your Rights
Under GDPR and applicable laws, you have the following rights:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restriction: Limit how we process your data
- Portability: Receive your data in a structured, machine-readable format
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent at any time for consent-based processing
To exercise these rights, contact us at business@graxylonchep.world. We will respond within 30 days.
10. Your California and State Privacy Rights (United States)
If you are a resident of California or certain other U.S. states, you may have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and under similar state laws (such as Virginia VCDPA, Colorado CPA, Connecticut CTDPA, and Utah UCPA).
10.1 We Do Not Sell Personal Information
We do not sell your personal information to third parties for monetary or other valuable consideration. We do not sell the personal information of consumers we know to be under 16 years of age.
10.2 Sale or Sharing for Cross-Context Behavioral Advertising
We may allow third-party cookies (e.g., analytics or advertising) that could be considered "sharing" or "selling" under California law. You may opt out of such use by using our Cookie Settings to disable analytics and marketing cookies, or by contacting us at business@graxylonchep.world.
10.3 Your State Law Rights
Depending on your state of residence, you may have the right to: know what personal information we collect, use, and disclose; request deletion of your personal information; correct inaccuracies; opt out of the sale or sharing of your personal information; limit the use of sensitive personal information; and not receive discriminatory treatment for exercising these rights. To submit a request, contact us at business@graxylonchep.world with "Privacy Request" in the subject line and specify your state of residence. We will verify your identity and respond within 45 days (or as required by applicable state law). You may also designate an authorized agent to make a request on your behalf; we may require proof of authorization.
11. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- SSL/TLS encryption for data transmission
- Secure payment processing through certified providers
- Regular security assessments and updates
- Access controls and authentication measures
- Employee training on data protection
12. Children's Privacy
Our website and products are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. In accordance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13 years of age. If we learn that we have collected data from a child under 13 (or under 16 where applicable), we will delete it promptly. If you believe we have collected information from a child, please contact us at business@graxylonchep.world.
13. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.
14. Data Breach Notification
In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable federal and state laws in the United States (including state breach notification statutes).
15. Updates to This Policy
We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy regularly.
16. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
- Email: business@graxylonchep.world
- Address: 10 E 31st St, Kearney, NE 68847, United States
You also have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.