Privacy Policy

1. Introduction

Thraxelluaquezla.world ("we", "us", "our") is committed to protecting your privacy and maintaining the security of your personal data. This comprehensive Privacy Policy explains in detail how we collect, use, store, disclose, and protect your personal information when you visit our website, use our services, or interact with us in any capacity.

We comply fully with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU General Data Protection Regulation (GDPR) where applicable. We are committed to processing your data lawfully, fairly, and transparently. By using our website and services, you acknowledge that you have read and understood this policy.

This policy may be updated periodically to reflect changes in our practices, legal requirements, or the nature of our services. We encourage you to review this page regularly. The date of the most recent update is displayed at the top of this document.

2. Data Controller

The data controller responsible for your personal data is Thraxelluaquezla.ddd. As the data controller, we determine the purposes and means of processing your personal data. We are accountable for ensuring that your data is processed in accordance with applicable data protection legislation.

For any questions relating to this Privacy Policy or our data processing practices, please contact us using the details above. We aim to respond to all enquiries within 30 days.

3. Data We Collect

We may collect and process the following categories of personal data:

Identity data: Your name, title, and any other identifiers you provide when creating an account or placing an order. This information is essential for order fulfilment and communication.

Contact data: Your email address, postal address, telephone number, and other contact details. We use this data to communicate with you about your orders, respond to enquiries, and send important service-related notifications.

Communication data: Messages, enquiries, and feedback you send to us via our contact form, email, or other channels. We retain these communications to improve our services and maintain a record of our correspondence.

Technical data: Your IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system, device information, and other technology on the devices you use to access our website. This data helps us to ensure our website functions correctly and to diagnose technical issues.

Usage data: Information about how you use our website, including pages visited, time spent on pages, click paths, and navigation patterns. This data is collected with your consent where required and helps us understand how to improve our user experience.

Marketing and communications data: Your preferences in receiving marketing from us and our third parties, and your communication preferences. We only use this data with your explicit consent.

4. Purposes of Processing

We process your personal data for the following purposes:

• To respond to your enquiries, provide customer support, and process orders and transactions
• To provide, maintain, and improve our website and services
• To send you order confirmations, shipping updates, and important service communications
• To comply with legal obligations, including tax, accounting, and regulatory requirements
• To protect our rights, property, and safety, and that of our users and others
• To analyse and improve our services, website performance, and user experience (with your consent for analytics)
• To send marketing communications about our products and offers (only with your explicit consent)

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason that is compatible with the original purpose. If we need to use your data for an unrelated purpose, we will notify you and explain the legal basis which allows us to do so.

5. Legal Basis for Processing

Under GDPR, we rely on the following legal bases to process your personal data:

Consent: Where you have given clear consent for us to process your personal data for a specific purpose, such as marketing communications or non-essential cookies. You may withdraw consent at any time.

Contract: Where processing is necessary for the performance of a contract with you, such as processing your order and delivering products to you.

Legal obligation: Where we need to comply with a legal or regulatory obligation, such as retaining records for tax and accounting purposes.

Legitimate interests: Where processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. This includes website operation, security, fraud prevention, and improving our services.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting requirements. Our retention periods are as follows:

Contact form submissions and order-related data: up to 6 years from the date of the transaction for legal and accounting purposes, in accordance with UK tax and company law requirements.

Technical and access logs: up to 12 months for security monitoring and troubleshooting. After this period, logs are securely deleted or anonymised.

Marketing preferences: until you withdraw your consent or opt out of marketing. We will honour your request promptly and stop sending marketing communications.

Customer support communications: up to 3 years from the date of the last communication for quality assurance and dispute resolution.

When data is no longer required, we securely delete or anonymise it so that it can no longer be associated with you. In some cases, we may retain anonymised data for statistical or analytical purposes.

7. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights in relation to your personal data:

Right of access: You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month, unless your request is manifestly unfounded or excessive.

Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

Right to erasure (right to be forgotten): You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary, you withdraw consent, or the data has been processed unlawfully.

Right to restriction of processing: You have the right to request that we restrict the processing of your data in certain situations, for example while we verify the accuracy of data or where you have objected to processing.

Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another data controller where technically feasible.

Right to object: You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we have compelling legitimate grounds.

Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk. We would, however, appreciate the opportunity to address your concerns before you approach the ICO.

To exercise any of these rights, please contact us at admin@thraxelluaquezla.world. We will respond to your request within 30 days.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit using TLS/HTTPS
• Access controls limiting who can access personal data and on what basis
• Regular security assessments and reviews of our systems
• Staff training on data protection and security best practices
• Secure destruction of data when it is no longer needed

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to handling your data with care and in accordance with legal requirements.

9. Data Transfers

Your personal data is primarily processed within the United Kingdom and the European Economic Area (EEA). When we transfer data outside the UK or EEA, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the relevant supervisory authority, or transfers to countries that have been deemed to provide an adequate level of data protection.

If you would like more information about the safeguards we use when transferring data internationally, please contact us.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read the privacy policy of every site you visit. This Privacy Policy applies only to our own website and services.

11. Contact Us

For any privacy-related enquiries, to exercise your rights, or if you have concerns about how we handle your personal data, please contact us: