Privacy Policy

Last updated: January 1, 2025

1. Data Controller

The data controller responsible for the processing of your personal data is:

Khomlaxxvor
5999 W 34th St #106, Houston, TX 77092, United States
Phone: +1 (713) 686-9662
Email: write-to-us-ask-@khomlaxxvor.world

2. Scope of This Policy

This Privacy Policy describes how Khomlaxxvor ("we," "us," or "our") collects, uses, discloses, and protects personal information when you visit our website at khomlaxxvor.world, place an order, or otherwise interact with us. It applies to all users of our website, including visitors and customers located in the United States, the European Union, and other jurisdictions.

We are committed to compliance with the General Data Protection Regulation (GDPR) for users in the European Economic Area, and with applicable US federal and state privacy laws.

3. Personal Data We Collect

We may collect the following categories of personal data:

  • Identity data: first name, last name.
  • Contact data: email address, phone number, billing and shipping address.
  • Transaction data: details of products ordered and payment transaction references. We do not store full payment card details.
  • Technical data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our site.
  • Usage data: information about how you use our website, products, and services.
  • Communications data: your preferences in receiving marketing communications from us, and your communication preferences.

We do not collect any Special Categories of personal data (such as data about your health, race, religion, or biometric data).

4. How We Collect Personal Data

We collect personal data through the following means:

  • Direct interactions: when you fill in a form, place an order, contact us by email or phone, or subscribe to communications.
  • Automated technologies: when you interact with our website, we automatically collect technical and usage data using cookies, server logs, and similar technologies. See our Cookie Policy for more information.
  • Third parties: we may receive technical and usage data from analytics providers (such as Google Analytics), payment processors, and shipping service providers.

5. Purposes and Legal Bases for Processing

Purpose Legal Basis (GDPR)
To process and fulfill your order, including delivery and payment processing Performance of a contract (Art. 6(1)(b) GDPR)
To manage your relationship with us, including customer support Performance of a contract; Legitimate interests
To send transactional communications (order confirmation, shipping updates) Performance of a contract
To send marketing communications (with your consent) Consent (Art. 6(1)(a) GDPR)
To analyze website usage and improve our services Legitimate interests (Art. 6(1)(f) GDPR)
To comply with legal and regulatory obligations Legal obligation (Art. 6(1)(c) GDPR)
To detect and prevent fraud or abuse Legitimate interests; Legal obligation

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations.

  • Order and transaction data: retained for 7 years to comply with US tax and financial record-keeping requirements.
  • Customer account and communication data: retained for the duration of the business relationship plus 3 years.
  • Marketing consent data: retained until you withdraw consent or for 3 years of inactivity, whichever is earlier.
  • Website analytics data: retained in accordance with the applicable third-party service's retention settings (typically 14–26 months).

7. Data Sharing and Disclosure

We may share your personal data with the following categories of third parties:

  • Service providers: companies that assist us with order fulfillment, payment processing, shipping, email delivery, IT services, and customer support. These providers are contractually bound to process data only on our instructions.
  • Analytics providers: we use tools such as Google Analytics to understand website usage. These providers may process your IP address and usage data in accordance with their own privacy policies.
  • Legal and regulatory authorities: where required by applicable law, court order, or government authority.
  • Business transfers: if we undergo a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction.

We do not sell your personal data to third parties.

8. International Data Transfers

Our primary operations are based in the United States. If you access our website from outside the US, your data may be transferred to and processed in the United States. For transfers of data from the European Economic Area to the United States, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) adopted by the European Commission, where applicable.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Right of access: to request a copy of the personal data we hold about you.
  • Right to rectification: to request correction of inaccurate or incomplete data.
  • Right to erasure ("right to be forgotten"): to request deletion of your personal data, subject to legal retention obligations.
  • Right to restriction of processing: to request that we limit how we use your data in certain circumstances.
  • Right to data portability: to receive your data in a structured, commonly used, machine-readable format.
  • Right to object: to object to processing based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
  • Right to lodge a complaint: with your national data protection supervisory authority (for EU residents). US residents may contact the applicable state authority.

To exercise any of these rights, please contact us at: write-to-us-ask-@khomlaxxvor.world. We will respond to verified requests within 30 days (or as required by applicable law).

10. Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. These measures include encryption of data in transit (HTTPS/TLS), access controls, and secure data storage practices. However, no method of transmission over the internet is entirely secure, and we cannot guarantee absolute security.

11. Cookies

Our website uses cookies and similar tracking technologies. For full details on the types of cookies we use, their purposes, and how to manage your preferences, please see our Cookie Policy.

12. Children's Privacy

Our website and products are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately and we will take steps to delete that information.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us:

Khomlaxxvor
5999 W 34th St #106, Houston, TX 77092, United States
Phone: +1 (713) 686-9662
Email: write-to-us-ask-@khomlaxxvor.world