Privacy Policy

1. Introduction

Brexalonkrax ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website at https://brexalonkrax.world and use our services.

This policy is issued in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR). By using our website, you acknowledge that you have read and understand this Privacy Policy.

2. Data Controller

The data controller responsible for your personal data is:

  • Company Name: Brexalonkrax
  • Registered Address: 1 George Square, Glasgow G2 1AL, United Kingdom
  • Email: correspondence@brexalonkrax.world
  • Website: https://brexalonkrax.world

3. Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Data You Provide to Us

  • Contact Information: Full name, email address, and phone number (optional) when you complete our order form.
  • Communications: Messages or enquiries you send to us through our website contact form.
  • Consent Records: Records of any consent you have given, including date, time, and method.

3.2 Data Collected Automatically

  • Technical Data: IP address, browser type and version, operating system, time zone setting, browser plug-in types and versions, device information.
  • Usage Data: Pages visited, page interaction information, time spent on pages, referring URLs, and navigation paths.
  • Cookie Data: Information collected through cookies and similar technologies (see our Cookie Policy).

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under Article 6 of the UK GDPR:

Purpose Legal Basis
Processing your order and providing our services Performance of a contract (Art. 6(1)(b))
Sending order-related communications Performance of a contract (Art. 6(1)(b))
Analysing website usage and improving our services Legitimate interests (Art. 6(1)(f))
Complying with legal obligations Legal obligation (Art. 6(1)(c))
Marketing communications (where applicable) Consent (Art. 6(1)(a))

5. How We Use Your Data

We use your personal data for the following purposes:

  • To process and fulfil your orders, including sending confirmations and updates.
  • To respond to your enquiries and provide customer support.
  • To administer and protect our website, including troubleshooting, data analysis, and system testing.
  • To improve our website, products, services, and customer experience.
  • To comply with legal and regulatory requirements.
  • To enforce our Terms of Use and protect our rights.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We may share your data with:

  • Service Providers: Third-party companies that assist us with website hosting, payment processing, delivery services, and analytics. These providers are contractually obligated to protect your data and process it only on our instructions.
  • Legal Authorities: Where required by law, regulation, or legal process, we may disclose your data to law enforcement agencies, courts, or other governmental bodies.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, with appropriate safeguards in place.

7. International Data Transfers

Your personal data is primarily processed within the United Kingdom and the European Economic Area (EEA). If we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO).
  • Transfer to countries that have received an adequacy decision from the UK Government.
  • Other legally recognised transfer mechanisms.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Order Data: Retained for 6 years from the date of the transaction to comply with tax and accounting obligations under UK law (Taxes Management Act 1970).
  • Communication Records: Retained for 2 years from the date of your last interaction, unless a longer period is required by law.
  • Cookie Consent Records: Retained for 12 months, after which consent will be requested again.
  • Website Analytics Data: Retained in anonymised form for up to 26 months.

After the applicable retention period, your data will be securely deleted or anonymised.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These measures include:

  • HTTPS/TLS encryption for all data transmitted between your browser and our servers.
  • Access controls limiting data access to authorised personnel only.
  • Regular security assessments and vulnerability reviews.
  • Secure storage and encrypted backups of personal data.
  • Staff training on data protection and privacy practices.

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We encourage you to take precautions when sharing personal information online.

10. Your Rights Under UK GDPR

Under the UK GDPR and Data Protection Act 2018, you have the following rights:

  • Right of Access (Art. 15): You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification (Art. 16): You can request correction of inaccurate or incomplete data.
  • Right to Erasure (Art. 17): You can request the deletion of your personal data in certain circumstances.
  • Right to Restriction of Processing (Art. 18): You can request that we limit how we use your data.
  • Right to Data Portability (Art. 20): You can request to receive your data in a structured, commonly used, machine-readable format.
  • Right to Object (Art. 21): You can object to our processing of your data for direct marketing or where we rely on legitimate interests.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have been violated.

To exercise any of these rights, please contact us at: correspondence@brexalonkrax.world. We will respond to your request within one month, as required by law.

11. Children's Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will take prompt steps to delete that information.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to read the privacy policy of every website you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or regulatory guidance. The updated version will be posted on this page with the "Last updated" date revised accordingly. We encourage you to review this page periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

  • Email: correspondence@brexalonkrax.world
  • Address: 1 George Square, Glasgow G2 1AL, United Kingdom
  • Website: https://brexalonkrax.world