Privacy Policy

Data Controller

Kyxrelynxexax.world (Lovico) is the data controller responsible for your personal data.

Introduction

We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR), the Irish Data Protection Act 2018, and applicable EU law. This comprehensive Privacy Policy describes in detail how we collect, use, store, protect, and respect your information when you visit our website, place orders, or interact with our services.

Transparency is fundamental to our approach. We believe you have the right to understand exactly what data we hold about you, why we hold it, and how we use it. This document has been prepared to provide you with clear, accessible information about our data practices.

Data We Collect

We may collect the following categories of personal data, depending on your interactions with us:

Purposes of Processing

We process your personal data for the following purposes:

• To process and fulfil your orders, including payment processing and shipping
• To respond to your enquiries and provide customer support
• To send order confirmations, shipping updates, and delivery notifications
• To improve our website, products, and services based on usage analytics
• To comply with legal obligations, including tax, accounting, and regulatory requirements
• To send marketing communications, only where you have given your explicit consent
• To prevent fraud and ensure the security of our systems
• To personalise your experience and provide relevant product recommendations

Legal Basis

Under GDPR, we process your data only when we have a lawful basis. We rely on the following:

• Consent: Where you have given clear consent for us to process your data for a specific purpose, such as marketing emails.
• Contract: Where processing is necessary to perform our contract with you, such as fulfilling an order.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided your rights do not override those interests (e.g. improving our services, preventing fraud).
• Legal Obligation: Where we need to process your data to comply with the law.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:

• Order data: 7 years for accounting, tax, and legal compliance purposes
• Enquiry and correspondence data: 3 years from the date of last contact
• Marketing preferences: Until you withdraw consent or unsubscribe
• Technical and access logs: Up to 12 months for security and troubleshooting
• Cookie data: As specified in our Cookie Policy

After the retention period expires, we securely delete or anonymise your data so it can no longer identify you.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your data in certain circumstances (right to be forgotten)
• Right to Restrict Processing: Request that we limit how we use your data in certain situations
• Right to Data Portability: Receive your data in a structured, commonly used format and transfer it to another controller
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: Complain to the Data Protection Commission (Ireland) or your local supervisory authority

To exercise any of these rights, please contact us at admin@kyxrelynxexax.world. We will respond within one month.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our measures include:

• Encryption of data in transit (HTTPS/TLS) and at rest where appropriate
• Access controls and authentication to ensure only authorised personnel can access data
• Regular security assessments and updates to our systems
• Training of staff on data protection and security practices

We do not sell your personal data to third parties. Your data is used only for the purposes described in this policy.

Data Sharing

We may share your data with the following categories of recipients:

• Payment processors: To process payments securely
• Shipping and logistics providers: To fulfil and deliver your orders
• Service providers: Hosting, analytics, email delivery, and customer support tools

All such parties are bound by data processing agreements and use your data only for the purposes we specify. We require them to maintain appropriate security measures.

International Transfers

If we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or adequacy decisions. We will inform you of any such transfers and the safeguards in place.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page and update the "Last updated" date. We encourage you to review this policy periodically. Continued use of our services after changes constitutes acceptance of the updated policy.

Contact Us

For any questions about this Privacy Policy or to exercise your rights: