Privacy Policy
Last updated: March 17, 2026
1. Controller and contact details
The data controller responsible for the processing of your personal data in connection with this website is:
Xexvalonvorkie
1500 Summit Ave
Union City, NJ 07087
United States
Email: hello@xexvalonvorkie.world
Phone: +1 201 867 5153
If you have questions about this Privacy Policy or about how we process your data, you may contact us using the details above.
2. Scope and purpose of this policy
This Privacy Policy describes how we collect, use, store, and protect your personal data when you use our website https://xexvalonvorkie.world (the "Website") and related services. It also explains your rights under applicable data protection laws, including the General Data Protection Regulation (GDPR) where it applies, and under United States federal and state privacy laws.
We process personal data in accordance with applicable law and only to the extent necessary for the purposes set out in this policy. We do not sell your personal data to third parties for marketing purposes.
3. Legal basis for processing (GDPR)
Where the GDPR applies (e.g. if you are in the European Economic Area), we process your personal data on one or more of the following legal bases:
- Contract: Processing necessary for the performance of a contract with you or to take steps at your request before entering into a contract (e.g. processing your order).
- Legal obligation: Processing necessary to comply with a legal obligation to which we are subject (e.g. tax, accounting, or consumer law).
- Legitimate interests: Processing necessary for our legitimate interests (e.g. improving our services, security, fraud prevention), where those interests are not overridden by your rights.
- Consent: Where we have obtained your clear consent for specific processing (e.g. optional cookies, marketing communications). You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
4. Types of data we collect and purposes
4.1 Data you provide
When you use our contact or order forms, we may collect:
- Name
- Email address
- Phone number (if you provide it)
- Message or order details
- Your consent to our Terms of Service and Privacy Policy, and where applicable, to marketing or optional cookies
Purpose: To respond to your enquiries, process your orders, and communicate with you about your orders or requests. Retention: We retain this data for as long as necessary to fulfil the purpose (e.g. order processing, customer support) and to comply with legal retention obligations (e.g. tax and commercial law), typically for a period of up to seven years where required by law, or shorter where no legal obligation applies.
4.2 Automatically collected data
When you visit our Website, we or our service providers may automatically collect certain technical data, such as:
- IP address
- Browser type and version
- Operating system
- Referrer URL
- Pages visited and time spent
- Approximate geographic location (e.g. country or region)
Purpose: To operate and secure the Website, analyse usage (where you have consented or where we have a legitimate interest), and improve our services. Retention: As set out in our Cookie Policy or as required for security and fraud prevention, typically between a few days and a number of months depending on the type of data and purpose.
4.3 Cookies and similar technologies
We use cookies and similar technologies as described in our Cookie Policy. Strictly necessary cookies do not require consent; for optional cookies (e.g. analytics, marketing), we rely on your consent where required by law.
5. Who we share your data with
We may share your personal data with:
- Service providers: Hosting, email delivery, analytics, payment processing, and other technical or operational services, under contracts that require them to protect your data and use it only for the purposes we specify.
- Legal and regulatory bodies: When required by law, court order, or to protect our rights, safety, or property.
- Professional advisers: Lawyers, accountants, or auditors where necessary for compliance or legal purposes.
We do not sell your personal data. We do not share your data with third parties for their own marketing purposes unless you have given explicit consent.
If we transfer personal data to countries outside the European Economic Area or the United Kingdom, we ensure appropriate safeguards are in place (e.g. standard contractual clauses, adequacy decisions) as required by applicable law.
6. Data security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Use of HTTPS and encryption for data in transit
- Access controls and authentication where applicable
- Secure storage and limited retention of personal data
- Regular review of our security practices and, where applicable, contracts with processors that require security and confidentiality
No method of transmission over the Internet or electronic storage is completely secure. We encourage you to use strong passwords and to avoid sending sensitive data through unsecured channels.
7. Your rights
Depending on your location, you may have the following rights in relation to your personal data:
- Access: To obtain confirmation as to whether we process your data and, where so, to access that data and receive certain information about the processing.
- Rectification: To have inaccurate or incomplete personal data corrected.
- Erasure: To request deletion of your personal data in certain circumstances (e.g. where it is no longer necessary, or you withdraw consent and there is no other legal basis).
- Restriction: To request that we restrict processing in certain situations (e.g. while we verify accuracy or where you object to processing).
- Data portability: Where processing is based on contract or consent and is carried out by automated means, to receive your data in a structured, commonly used, machine-readable format and, where technically feasible, to have it transmitted to another controller.
- Objection: To object to processing based on legitimate interests, including profiling. We will stop processing unless we demonstrate compelling legitimate grounds that override your interests, or for the establishment, exercise, or defence of legal claims.
- Withdraw consent: Where processing is based on consent, to withdraw consent at any time.
- Complaint: To lodge a complaint with a supervisory authority. In the EU/EEA, you may contact the data protection authority in your country. In the United States, you may have additional rights under state law (e.g. California, Virginia, Colorado).
To exercise any of these rights, please contact us using the details in section 1. We will respond within the time frame required by applicable law (e.g. one month under the GDPR, subject to permitted extensions). We may need to verify your identity before processing your request.
8. Children
Our Website and services are not directed at individuals under the age of 16 (or higher where local law specifies). We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will take steps to delete it.
9. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the Website. The "Last updated" date at the top indicates when the policy was last revised. We encourage you to review this page periodically. Where required by law, we will notify you of material changes or seek your consent.
10. Additional information for certain jurisdictions
United States: If you are a resident of a state with specific privacy laws (e.g. California, Virginia, Colorado, Connecticut), you may have additional rights such as the right to know, delete, correct, or opt out of certain sales or sharing of personal data. We do not sell personal data as defined under the California Consumer Privacy Act. To exercise your rights, contact us using the details in section 1.
European Economic Area and United Kingdom: Our processing of your data is governed by this Privacy Policy and, where applicable, the GDPR and UK GDPR. Our legal basis, retention periods, and your rights are set out in the sections above.
For any questions about this Privacy Policy or our data practices, please contact us at hello@xexvalonvorkie.world or at the address above.