Privacy Policy

Last updated:

1. Introduction and Scope

Khexylonkhep.world ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website khexylonkhep.world and use our services. Please read this policy carefully to understand our views and practices regarding your personal data.

This policy applies to all visitors, users, and customers who access our website or services. By using our website, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access the site.

2. Data Controller

Khexylonkhep.world operates the website and is the data controller for the personal data collected through this site. As the data controller, we determine the purposes and means of processing your personal data.

Khexylonkhep.world
Rosenkrantzgata 17
3018 Drammen
Norway
Email: admin@khexylonkhep.world

3. Personal Data We Collect

We collect information that you provide directly to us, information we obtain automatically when you use our services, and information from third parties.

Contact and Identity Data

When you place an order or contact us, we collect your name, email address, postal address, phone number (if provided), and the content of your messages. This information is essential for order fulfillment and customer communication.

Technical and Usage Data

We automatically collect certain information when you visit our website, including your IP address, browser type and version, operating system, device information, pages visited, time spent on pages, click streams, and referral sources. This helps us improve our website and services.

Cookie Data

We use cookies and similar technologies as described in our Cookie Policy. You can manage your cookie preferences through our cookie banner or your browser settings.

4. Purposes of Processing

We process your personal data for the following purposes:

  • Fulfilling order requests, processing payments, and delivering products
  • Communicating with you about your orders and responding to inquiries
  • Providing, maintaining, and improving our website and services
  • Complying with legal obligations, including tax and accounting requirements
  • Preventing fraud and ensuring the security of our systems
  • Analytics to understand how visitors use our site (with your consent)
  • Marketing communications and promotional offers (with your consent)
  • Resolving disputes and enforcing our agreements

5. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your data based on the following legal grounds:

  • Contract Performance: Processing necessary to fulfill your order and provide our services
  • Legitimate Interests: Website operation, security, fraud prevention, and business improvement, where these interests are not overridden by your rights
  • Consent: Analytics cookies, marketing cookies, and non-essential communications. You may withdraw consent at any time
  • Legal Obligation: Compliance with applicable laws and regulations

6. Data Retention Periods

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Order-related data: Up to 7 years for legal, accounting, and tax compliance
  • Marketing consent: Until withdrawn or until you opt out
  • Analytics data: Up to 26 months, after which it is anonymized or deleted
  • Technical and server logs: Up to 90 days for security and troubleshooting
  • Customer correspondence: Up to 3 years after the last interaction

After the retention period expires, we securely delete or anonymize your data.

7. Your Rights Under GDPR

If you are in the European Economic Area, you have the following rights:

  • Right of Access: Request a copy of your personal data that we hold
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data ("right to be forgotten") where legally applicable
  • Right to Restrict Processing: Request that we limit how we use your data in certain circumstances
  • Right to Data Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to processing based on legitimate interests or for direct marketing
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
  • Right to Lodge a Complaint: Complain to a supervisory authority (in Norway: Datatilsynet)

To exercise these rights, contact us at admin@khexylonkhep.world. We will respond within 30 days.

8. Data Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

  • Encryption of data in transit (HTTPS/TLS) and at rest where applicable
  • Access controls and authentication mechanisms
  • Regular security assessments and updates
  • Employee training on data protection
  • Secure storage and backup procedures

While we strive to protect your personal data, no method of transmission over the internet is completely secure. We cannot guarantee absolute security.

9. International Data Transfers

Your data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, including adequacy decisions by the European Commission, standard contractual clauses approved by the EU, or binding corporate rules. We will inform you of any such transfers and the safeguards applied.

10. Children's Privacy

Our website is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by posting the updated policy on this page with a new "Last updated" date. We encourage you to review this page periodically. Your continued use of the website after changes constitutes acceptance of the revised policy.