Privacy Policy

1. Introduction

Blixarondhel ("we", "us", or "our") is committed to protecting the personal data of individuals who interact with our website located at blixarondhel.world ("Website"). This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, how long we retain it, and what rights you have as a data subject.

This Policy is written in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the California Consumer Privacy Act (CCPA), and other applicable privacy laws. By using our Website or submitting an order, you acknowledge that you have read and understood this Policy.

2. Personal Data We Collect

We collect personal data only to the extent necessary for the purposes described in this Policy. The categories of data we may collect are:

2.1 Data You Provide Directly

• Identification data: Full name
• Contact data: Email address, telephone number (optional)
• Communication data: The content of any message or instructions submitted via our order form
• Consent records: A record of your consent to our Privacy Policy at the time of form submission

2.2 Data Collected Automatically

• Technical data: IP address, browser type and version, operating system, referring URL, pages visited, time and date of access
• Cookie data: As described in our Cookie Policy

We do not collect any special categories of personal data (e.g., health data, racial or ethnic origin, political opinions, biometric data) unless you voluntarily provide such information in a free-text field, in which case it will be treated with the highest level of protection.

3. Legal Bases for Processing

We process your personal data on the following legal bases under Article 6 of the GDPR:

• Performance of a contract (Art. 6(1)(b)): Processing your name, email, and address to fulfill your order.
• Consent (Art. 6(1)(a)): Processing your data for analytics and marketing cookies, where you have given explicit consent via our cookie banner.
• Legal obligation (Art. 6(1)(c)): Retaining certain records as required by applicable law (e.g., accounting, consumer protection).
• Legitimate interests (Art. 6(1)(f)): Improving website security, preventing fraud, and maintaining the operation of our Website, provided such interests are not overridden by your rights.

4. How We Use Your Personal Data

Your personal data is used for the following specific purposes:

• Processing and fulfilling your order for Total Internal Balance
• Communicating with you regarding your order status, shipping, or support requests
• Sending a transactional confirmation email related to your order
• Complying with our legal and regulatory obligations
• Detecting, investigating, and preventing fraudulent or unauthorized activity
• Analyzing anonymized or aggregated website usage data to improve our site (only when analytics consent is given)

We do not use your personal data for automated decision-making or profiling in ways that have legal or similarly significant effects on you.

5. Sharing and Disclosure of Personal Data

We do not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your data with the following categories of recipients, strictly to the extent necessary:

• Logistics and fulfillment providers: To process and deliver your order
• Payment processors: Processed directly by a PCI-DSS compliant third-party payment provider; we do not store full payment card details
• IT and hosting providers: Who support the technical operation of our Website under appropriate data processing agreements
• Legal authorities: Where required by applicable law, court order, or to protect our legal rights

All third-party processors are subject to contractual data processing agreements that require them to process personal data only on our instructions and in accordance with applicable data protection law.

6. International Transfers

Our operations are primarily based in the United States. If personal data is transferred to recipients outside of the European Economic Area (EEA), we ensure such transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) adopted by the European Commission, or other lawful transfer mechanisms.

7. Data Retention

We retain personal data for no longer than is necessary for the purposes for which it was collected:

• Order-related data: Retained for up to 7 years from the date of transaction to comply with financial record-keeping obligations
• Customer support communications: Retained for 3 years
• Cookie consent records: Retained for the duration of the consent, up to 13 months
• Website access logs: Retained for up to 12 months for security purposes

After the applicable retention period, personal data is securely deleted or anonymized.

8. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure, or destruction. These measures include:

• HTTPS encryption for all data transmitted between your browser and our Website
• Access controls limiting data access to authorized personnel only
• Regular security assessments and updates
• Data minimization practices to limit the amount of personal data we collect and retain

While we take these measures seriously, no method of transmission over the Internet is completely secure, and we cannot guarantee absolute security.

9. Your Rights as a Data Subject

Depending on your location, you may have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): Request a copy of the personal data we hold about you
• Right to rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete data
• Right to erasure (Art. 17 GDPR): Request deletion of your personal data in certain circumstances
• Right to restriction of processing (Art. 18 GDPR): Request that we limit the way we use your data
• Right to data portability (Art. 20 GDPR): Receive your personal data in a structured, commonly used format
• Right to object (Art. 21 GDPR): Object to processing based on legitimate interests
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
• CCPA rights (California residents): Right to know, right to delete, right to opt-out of sale, and right to non-discrimination

To exercise any of these rights, please contact us at talk@blixarondhel.world. We will respond within 30 days (or within the shorter timeframe required by applicable law). We may need to verify your identity before processing your request.

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with your local data protection supervisory authority. In the US, relevant authorities include state attorneys general offices for CCPA concerns.

10. Cookies

Our Website uses cookies and similar technologies. For full information on the types of cookies we use, your choices, and how to manage consent, please read our Cookie Policy.

11. Children's Privacy

Our Website and products are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe that a minor has provided us with personal data, please contact us immediately and we will take steps to delete such data.

12. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and recommend you review their respective privacy policies.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page will indicate when the most recent changes were made. We encourage you to review this Policy regularly. Continued use of the Website after an update constitutes acceptance of the revised Policy.

14. Contact Us

For any questions, requests, or concerns about this Privacy Policy or our data processing practices, please contact us:

• Company: Blixarondhel
• Address: 1201 3rd Ave, Seattle, WA 98101, United States
• Email: talk@blixarondhel.world
• Website: blixarondhel.world