Privacy Policy

Introduction

xenlavorquzint.top d.o.o. ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect data and information about you when you use our website at xenlavorquzint.top and our beauty subscription services. We are the data controller for the purposes of the General Data Protection Regulation (GDPR).

This policy applies to all visitors and users of our website and services. By using our website or services, you consent to the data collection and use practices described in this Privacy Policy.

Data Controller Information

The data controller responsible for your personal data is:

Data We Collect

We collect various types of personal data collection from you when you visit our website, subscribe to our services, or contact us. The data we collect includes:

Personal Information

• Name and contact details (email address, phone number, postal address)
• Billing and payment information
• Beauty preferences and profile information
• Subscription and order history
• Communication preferences

Technical Information

• IP address and browser type
• Device information and operating system
• Website usage data and analytics
• Cookies and tracking technologies
• Pages visited and time spent on our website

How We Use Your Information

We use of your data for various legitimate business purposes in accordance with GDPR. The legal basis for processing your personal data includes:

Service Provision (Contract Performance)

• Processing and fulfilling your subscription orders
• Personalising your beauty box selections
• Managing your account and subscription
• Processing payments and billing
• Providing customer support and service

Legitimate Interests

• Improving our website and services
• Conducting market research and analytics
• Preventing fraud and ensuring security
• Developing new products and services

Consent

• Marketing communications and promotional offers
• Analytics and performance tracking
• Personalised advertising and remarketing

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about our use of cookies, please see our Cookie Policy.

Data Sharing and Third Parties

We may share your personal data with trusted third parties in the following circumstances:

• Service providers who help us operate our business (payment processors, shipping companies, customer service platforms)
• Analytics providers (Google Analytics) to understand website usage
• Marketing platforms (Google Ads) for advertising and remarketing purposes
• Legal authorities when required by law or to protect our rights
• Business partners for joint marketing initiatives (with your consent)

We ensure that all third parties have appropriate data protection measures in place and only process your data for specified purposes.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy. Our data retention periods are based on:

• Account and subscription data: Retained while your account is active and for 7 years after closure for legal and tax purposes
• Marketing data: Retained until you withdraw consent or for 3 years from last interaction
• Website analytics: Aggregated data retained for 2 years for business analysis
• Customer support records: Retained for 3 years after resolution

After these periods, we will securely delete or anonymise your personal data unless we are required to retain it for legal reasons.

Your Rights

Under the GDPR, you have several rights regarding your personal data. These your rights include:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Request transfer of your data to another service
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent for processing based on consent

To exercise any of these rights, please contact us using the contact information provided below. We will respond to your request within 30 days.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) where our service providers are located. When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training on data protection.

Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us so we can delete such information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us using the following contact information:

You also have the right to lodge a complaint with the Slovenian Information Commissioner if you believe we have not handled your personal data in accordance with applicable law.