Khiphloxspyxar ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect information about you when you visit khiphloxspyxar.world or place an order for Novavexor. It is written in accordance with Regulation (EU) 2016/679 (GDPR) and the Norwegian Personal Data Act (personopplysningsloven).
1. Data Controller
The data controller responsible for your personal data is:
Khiphloxspyxar
Strandgata 8, 7900 Rørvik, Norway
Telephone: +4774390499
Email: clientsask@khiphloxspyxar.world
2. Data We Collect
We may collect the following categories of personal data:
- Identity data: full name provided in the order form.
- Contact data: email address, phone number, delivery address.
- Transaction data: details of products ordered and payment information (processed via our payment provider — we do not store full card details).
- Technical data: IP address, browser type, operating system, pages visited, session duration (collected via cookies and server logs).
- Communication data: any messages or enquiries you send us.
We do not knowingly collect data from individuals under 18 years of age. Our products are not intended for minors.
3. Purposes and Legal Bases for Processing
| Purpose | Legal Basis (GDPR Art.) |
|---|---|
| Processing and fulfilling your order | Art. 6(1)(b) — Performance of a contract |
| Communicating about your order | Art. 6(1)(b) — Performance of a contract |
| Legal compliance (tax, consumer law) | Art. 6(1)(c) — Legal obligation |
| Analytics to improve our website | Art. 6(1)(a) — Consent |
| Marketing communications (where opted in) | Art. 6(1)(a) — Consent |
| Fraud prevention and site security | Art. 6(1)(f) — Legitimate interests |
4. Retention Periods
We retain personal data only for as long as necessary for the stated purpose:
- Order and transaction data: 5 years from order date (accounting obligations under Norwegian Bookkeeping Act).
- Customer communication: 3 years from last contact.
- Analytics data: up to 26 months.
- Consent records: 3 years from consent withdrawal or last activity.
When retention periods expire, data is securely deleted or anonymised.
5. Data Sharing and Transfers
We share your personal data only where necessary:
- Payment processors: to process transactions securely.
- Logistics and delivery providers: to fulfil your order.
- IT and hosting providers: for website infrastructure.
- Public authorities: where required by law.
Where data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses approved by the European Commission).
We do not sell your personal data to third parties.
6. Your Rights
Under GDPR, you have the following rights:
- Right of access (Art. 15): obtain a copy of the personal data we hold about you.
- Right to rectification (Art. 16): request correction of inaccurate data.
- Right to erasure (Art. 17): request deletion of your data where applicable.
- Right to restriction (Art. 18): request limited processing in certain circumstances.
- Right to data portability (Art. 20): receive your data in a structured, machine-readable format.
- Right to object (Art. 21): object to processing based on legitimate interests.
- Right to withdraw consent (Art. 7(3)): withdraw consent at any time without affecting prior lawful processing.
To exercise any of these rights, contact us at the details in Section 9. We will respond within 30 days.
7. Security Measures
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:
- HTTPS encryption for all data in transit.
- Access controls limiting data access to authorised personnel.
- Regular security reviews.
- Pseudonymisation and minimisation practices where applicable.
8. Cookies
We use cookies on this website. For detailed information on which cookies we use, their purpose, and how to manage your preferences, please see our Cookie Policy.
9. Contact and Right to Complain
For any privacy-related queries or to exercise your rights, contact us:
Khiphloxspyxar
Strandgata 8, 7900 Rørvik, Norway
Email: clientsask@khiphloxspyxar.world
You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet):
Datatilsynet
Postboks 458 Sentrum, 0105 Oslo, Norway
Website: datatilsynet.no
This policy may be updated from time to time. The current version is always published on this page with the date of last update.