Privacy Policy

Last Updated:

1. Introduction

Thelaxenphak ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website thelaxenphak.world (the "Website") and purchase our products.

This policy complies with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

2. Data Controller Information

The data controller responsible for your personal information is:

  • Company Name: Thelaxenphak
  • Address: 150 N Riverside Plaza, Chicago, IL 60606, USA
  • Email: reach-us@thelaxenphak.world

3. Information We Collect

3.1 Information You Provide Directly

We collect personal information that you voluntarily provide when you:

  • Place an order through our Website
  • Contact us via email or other communication channels
  • Subscribe to our newsletter
  • Participate in surveys or promotions

This information may include:

  • Full name
  • Email address
  • Phone number (optional)
  • Shipping and billing address
  • Payment information
  • Any messages or communications you send us

3.2 Information Collected Automatically

When you visit our Website, we may automatically collect certain information, including:

  • IP address
  • Browser type and version
  • Operating system
  • Referring website
  • Pages viewed and time spent on pages
  • Date and time of visits
  • Device information

3.3 Cookies and Similar Technologies

We use cookies and similar tracking technologies to collect information about your browsing activities. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

4. Legal Basis for Processing (GDPR)

Under the GDPR, we process your personal data based on the following legal grounds:

  • Consent: Where you have given explicit consent for specific purposes, such as marketing communications.
  • Contract Performance: Processing necessary to fulfill orders and provide services you have requested.
  • Legal Obligation: Processing required to comply with applicable laws and regulations.
  • Legitimate Interests: Processing for our legitimate business interests, such as improving our Website and preventing fraud, where such interests do not override your rights.

5. How We Use Your Information

We use the information we collect for the following purposes:

  • Process and fulfill your orders
  • Communicate with you about your orders and inquiries
  • Send order confirmations and shipping updates
  • Provide customer support
  • Improve our Website and services
  • Analyze website usage and trends
  • Prevent fraud and unauthorized access
  • Comply with legal obligations
  • Send marketing communications (with your consent)

6. Information Sharing and Disclosure

We do not sell your personal information. We may share your information with:

  • Service Providers: Third-party companies that help us operate our business, including payment processors, shipping carriers, and customer service providers.
  • Legal Requirements: When required by law, court order, or governmental authority.
  • Business Transfers: In connection with a merger, acquisition, or sale of business assets.
  • Protection of Rights: To protect our rights, property, or safety, or that of our users or others.

7. International Data Transfers

Your personal information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer data internationally, we implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, to ensure your data is protected.

8. Data Retention

We retain your personal information for as long as necessary to:

  • Fulfill the purposes for which it was collected
  • Comply with legal, accounting, and reporting requirements
  • Resolve disputes and enforce agreements

Order information is typically retained for 7 years for tax and legal compliance purposes. Marketing preferences are retained until you withdraw consent. You may request deletion of your data at any time, subject to legal requirements.

9. Your Rights

9.1 GDPR Rights (EEA Residents)

If you are located in the European Economic Area, you have the following rights:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten").
  • Right to Restriction: Request restriction of processing of your personal data.
  • Right to Data Portability: Receive your data in a structured, machine-readable format.
  • Right to Object: Object to processing based on legitimate interests or for direct marketing.
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
  • Right to Lodge a Complaint: File a complaint with a supervisory authority.

9.2 CCPA Rights (California Residents)

If you are a California resident, you have the following rights under the CCPA:

  • Right to know what personal information we collect, use, and disclose
  • Right to request deletion of your personal information
  • Right to opt-out of the sale of personal information (we do not sell personal information)
  • Right to non-discrimination for exercising your privacy rights

10. Exercising Your Rights

To exercise any of these rights, please contact us at:

  • Email: reach-us@thelaxenphak.world
  • Mail: 150 N Riverside Plaza, Chicago, IL 60606, USA

We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

11. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

  • Encryption of data in transit using SSL/TLS protocols
  • Secure storage of personal data
  • Access controls limiting who can view personal information
  • Regular security assessments and updates
  • Employee training on data protection

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

12. Children's Privacy

Our Website is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information.

13. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

  • Email: reach-us@thelaxenphak.world
  • Address: 150 N Riverside Plaza, Chicago, IL 60606, USA

For GDPR-related inquiries, you may also contact your local Data Protection Authority if you believe we have not adequately addressed your concerns.