Privacy Policy

1. Introduction

Xefralextlaxyron ("we", "us", "our") is committed to protecting the privacy of individuals who visit our website and interact with our services. This Privacy Policy describes how we collect, use, store, disclose and protect your personal information.

This policy applies to all personal information collected through the website xefralextlaxyron.world and is governed by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where we interact with individuals in the European Union or United Kingdom, the General Data Protection Regulation (EU) 2016/679 (GDPR) and equivalent UK legislation also apply.

2. What Personal Information We Collect

We may collect the following categories of personal information:

• Identity data: first name, last name
• Contact data: email address, phone number, postal/delivery address
• Transaction data: details of orders, purchases and payments
• Technical data: IP address, browser type and version, browser plug-in types and versions, time zone setting, operating system and platform
• Usage data: information about how you use our website
• Marketing and communications data: your preferences in receiving marketing communications from us

We do not collect any special categories of personal information (including health data beyond what you voluntarily provide when making an enquiry) and we do not collect information about criminal convictions or offences.

3. How We Collect Personal Information

We collect personal information directly from you when you:

• Complete and submit the order form on our website
• Contact us by email, phone or in person
• Request information about our products
• Subscribe to any communications we provide

We also collect technical data automatically through cookies and similar technologies. Please see our Cookie Policy for further detail.

4. Purposes and Legal Basis for Processing

We use your personal information for the following purposes:

• To fulfil and administer orders — legal basis: performance of a contract
• To respond to enquiries — legal basis: legitimate interests / consent
• To send transactional communications (order confirmations, shipping updates) — legal basis: performance of a contract
• To comply with legal obligations (tax records, ACL obligations) — legal basis: legal obligation
• To improve our website and services — legal basis: legitimate interests
• To send marketing communications (only where you have opted in) — legal basis: consent

5. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting or reporting requirements:

• Order and transaction records: 7 years (Australian tax and accounting obligations)
• Customer enquiry records: 3 years from last contact
• Marketing consent records: until consent is withdrawn + 1 year
• Website analytics data: 26 months (anonymised after this period)

6. Disclosure of Personal Information

We do not sell, trade or rent your personal information to third parties. We may disclose personal information to:

• Service providers who assist in our operations (e.g. payment processors, logistics/shipping providers, email service providers), who are bound by confidentiality obligations
• Regulatory authorities where required by law (e.g. the TGA, Australian Tax Office, law enforcement)
• Professional advisors (lawyers, accountants, auditors) bound by professional secrecy obligations

Where we disclose information to third parties located outside Australia, we take reasonable steps to ensure those parties are subject to privacy protections substantially similar to Australian standards.

7. Security of Personal Information

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration or destruction. These measures include encrypted data transmission (HTTPS/TLS), access controls and regular security reviews.

No method of transmission over the internet is completely secure. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately.

8. Your Rights

Under Australian and applicable international privacy law, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information (subject to legal retention obligations)
• Object to or restrict processing in certain circumstances
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au

To exercise any of these rights, please contact us at the details provided above. We will respond within 30 days.

9. Cookies

Our website uses cookies and similar tracking technologies. Please refer to our Cookie Policy for full details of how we use cookies, your choices and how to manage your preferences.

10. Children's Privacy

Our website and products are not directed at individuals under 18 years of age. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated policy on this page with a revised "Last updated" date. Where changes are material, we will provide more prominent notice.

12. Contact Us

For questions, concerns or requests relating to this Privacy Policy or the handling of your personal information, please contact us: