Privacy Policy

1. Introduction

Lyxtherodhap ("we", "our", or "us") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at lyxtherodhap.world and use our services.

This policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Norwegian Personal Data Act (personopplysningsloven, lov om behandling av personopplysninger), and other applicable data protection laws in Norway and the European Economic Area (EEA). Norway applies GDPR through the EEA Agreement.

2. Data Controller Information

The data controller responsible for your personal data is:

  • Company Name: Lyxtherodhap
  • Address: Vollgaten 13, 4400 Flekkefjord, Norway
  • Email: notifyuse@lyxtherodhap.world
  • Country: Norway

3. Information We Collect

3.1 Personal Data You Provide

We collect personal data that you voluntarily provide when you:

  • Place an order on our website
  • Create an account or register for our services
  • Subscribe to our newsletter
  • Contact us with inquiries or feedback
  • Participate in surveys or promotions

This information may include:

  • Full name
  • Email address
  • Phone number (when voluntarily provided)
  • Shipping and billing address
  • Payment information (processed securely by our payment providers)
  • Communication preferences

3.2 Automatically Collected Data

When you visit our website, we may automatically collect certain information, including:

  • IP address
  • Browser type and version
  • Operating system
  • Referring URLs
  • Pages visited and time spent on pages
  • Device information
  • Cookies and similar tracking technologies (see our Cookie Policy)

4. How We Use Your Information

We use your personal data for the following purposes:

  • Order Processing: To process and fulfill your orders, including shipping and delivery
  • Communication: To send order confirmations, shipping updates, and respond to your inquiries
  • Customer Service: To provide customer support and address any issues
  • Legal Compliance: To comply with applicable laws, regulations, and legal processes
  • Website Improvement: To analyze usage patterns and improve our website and services
  • Marketing: With your consent, to send promotional materials and newsletters
  • Fraud Prevention: To detect and prevent fraudulent transactions

5. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

  • Contract Performance: Processing necessary to fulfill our contractual obligations to you
  • Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention and website security
  • Legal Obligation: Processing necessary to comply with legal requirements
  • Consent: Processing based on your explicit consent, which you may withdraw at any time

6. Data Sharing and Disclosure

We may share your personal data with:

  • Service Providers: Third-party companies that assist us in operating our business, such as payment processors, shipping carriers, and IT service providers
  • Legal Authorities: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal data to third parties.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • Order Data: For 7 years after the order date, as required for tax and accounting purposes
  • Marketing Data: Until you withdraw consent or unsubscribe
  • Website Analytics: For up to 26 months
  • Customer Inquiries: For 3 years after the last communication

9. Your Rights Under GDPR

Under the GDPR, you have the following rights:

  • Right of Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten")
  • Right to Restrict Processing: Request limitation of how we use your data
  • Right to Data Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to processing based on legitimate interests or for direct marketing
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at notifyuse@lyxtherodhap.world. We will respond to your request within 30 days.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encryption of data in transit using SSL/TLS
  • Secure server infrastructure
  • Access controls and authentication
  • Regular security assessments
  • Employee training on data protection

While we strive to protect your personal data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

11. Children's Privacy

Our website and services are not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing any personal data.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

14. Complaints

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with a supervisory authority. In Norway, this is the Norwegian Data Protection Authority (Datatilsynet):

  • Website: www.datatilsynet.no
  • Address: Postboks 458 Sentrum, 0105 Oslo, Norway
  • Phone: +47 22 39 69 00

EEA residents may also lodge complaints with the data protection authority in their country of residence.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

  • Email: notifyuse@lyxtherodhap.world
  • Address: Vollgaten 13, 4400 Flekkefjord, Norway