Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

Xephylarttdharox
Owendoon, Owengallees, Bawnboy,
Co. Cavan, H14 E286, Ireland
Email: support@xephylarttdharox.world
Phone: +353 49 952 3448

2. Information We Collect

We collect information that you provide directly to us and information collected automatically when you use our website.

2.1 Information You Provide

• Contact Information: When you use our contact form, we collect your name, email address, and the content of your message.
• Consent Records: We maintain records of the consent you provide for data processing activities.

2.2 Information Collected Automatically

• Device Information: Browser type, operating system, and device identifiers.
• Usage Data: Pages visited, time spent on pages, and navigation patterns.
• Technical Data: IP address, browser settings, and referring URLs.

3. Purpose of Data Processing

We process your personal data for the following purposes:

• Communication: To respond to your inquiries and provide requested information.
• Website Improvement: To analyze usage patterns and improve our content and user experience.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.
• Security: To protect against unauthorized access, fraud, and other illegal activities.

We do not sell products or process payments on this website. We do not provide personalized medical, legal, or financial advice.

4. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your data based on the following legal grounds:

• Consent: Where you have given explicit consent for specific processing activities.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights.
• Legal Obligation: Where processing is required to comply with applicable laws.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Contact Form Data: Retained for up to 2 years from the date of submission to address any follow-up inquiries.
• Analytics Data: Retained for up to 26 months in accordance with standard analytics practices.
• Cookie Consent Records: Retained for the duration of consent validity or until you withdraw consent.

6. Your Rights Under GDPR

As a data subject, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete data.
• Right to Erasure: You can request deletion of your personal data under certain circumstances.
• Right to Restriction: You can request that we limit how we use your data.
• Right to Data Portability: You can request your data in a structured, commonly used format.
• Right to Object: You can object to processing based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us using the details provided in Section 1.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Secure HTTPS encryption for all website communications
• Regular security assessments and updates
• Access controls limiting data access to authorized personnel
• Secure data storage practices

8. Third-Party Services

Our website may use third-party services for analytics and functionality. These services may collect data as described in their respective privacy policies. We use:

• Analytics Services: To understand website usage patterns.
• Content Delivery Networks: To serve fonts and icons efficiently.

We do not sell your personal data to third parties.

We only enable non-essential analytics or marketing technologies after you provide consent through our cookie controls. You can change or withdraw consent at any time via the cookie banner settings.

9. International Data Transfers

If we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

10. Automated Decision-Making

We do not use your personal data for solely automated decision-making or profiling that produces legal or similarly significant effects under Article 22 GDPR.

11. Children's Privacy

Our website is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.

12. Response Times for Data Requests

We normally respond to verified data protection requests within one month, as required by GDPR. If your request is complex, this period may be extended by up to two additional months; if so, we will inform you.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

14. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection authority. In Ireland, this is the Data Protection Commission (DPC):

Data Protection Commission
21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
Website: www.dataprotection.ie