Privacy Policy

Last updated: March 17, 2025

1. Controller and contact details

The controller responsible for the processing of your personal data in connection with this website is:

Phrexxonkhel
698 Amsterdam Ave
New York, NY 10025
United States

Email: message@phrexxonkhel.world
Phone: +1 212 865 9700

If you have questions about this Privacy Policy or your personal data, please contact us using the details above.

2. Scope and legal basis

This Privacy Policy applies to the website https://phrexxonkhel.world and any related subpages, and to all personal data we collect when you visit our site, place an order, use our contact form, or otherwise interact with us.

We process personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) where it applies, and with US federal and state privacy laws, including the laws of the State of New York.

Legal bases for processing may include: your consent (Art. 6(1)(a) GDPR or equivalent), performance of a contract (Art. 6(1)(b) GDPR or equivalent), our legitimate interests (Art. 6(1)(f) GDPR or equivalent), or compliance with legal obligations (Art. 6(1)(c) GDPR or equivalent).

3. Data we collect and purposes

We may collect the following categories of personal data:

• Identity and contact data: name, email address, telephone number (if provided), and shipping or billing address when you place an order or contact us. Purpose: processing orders, responding to inquiries, and communicating with you.
• Transaction data: order details, payment-related information (processed by our payment providers), and order history. Purpose: fulfilling orders, accounting, and handling returns or complaints.
• Technical and usage data: IP address, browser type and version, device type, operating system, referring URL, pages visited, and date and time of access. Purpose: operating and securing the website, analyzing use, and improving our services.
• Cookie and similar technologies data: as described in our Cookie Policy. Purpose: depending on the cookie category (strictly necessary, analytics, marketing), as set out in that policy.

We do not collect more data than is necessary for the stated purposes. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.

4. How we collect data

Personal data is collected when you voluntarily provide it (e.g. via order forms, contact forms, or email), when you use our website (e.g. through cookies and similar technologies), and when we receive it from third parties involved in order or payment processing, where permitted by law.

5. Retention periods

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

• Order and customer data: for the duration of the contractual relationship and thereafter for the period required by tax and commercial law (typically at least 7 years in the US where applicable).
• Contact form and general inquiries: until your request is resolved and for a reasonable period thereafter for follow-up (e.g. 2–3 years), unless longer retention is required by law.
• Technical and access logs: generally up to 12 months, unless a shorter or longer period is required for security or legal reasons.
• Cookie data: as specified in our Cookie Policy for each category.

After the retention period, we delete or anonymize your data so that it can no longer be attributed to you.

6. Security measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Use of HTTPS (TLS/SSL) for all pages to encrypt data in transit.
• Restricted access to personal data on a need-to-know basis.
• Secure storage and handling of data in line with industry practices.
• Regular review and update of our security practices.

While we strive to protect your data, no method of transmission or storage over the internet is completely secure. We encourage you to use strong passwords and to contact us if you suspect any unauthorized use of your data.

7. Sharing and disclosure of data

We may share your personal data with:

• Service providers: e.g. hosting, payment processing, email delivery, and analytics, who process data on our behalf under contractual obligations consistent with this policy.
• Legal and regulatory bodies: when required by law, court order, or to protect our rights, safety, or property.

We do not sell your personal data to third parties. We do not transfer your data outside the United States unless we use services that process data in other countries; in such cases we ensure appropriate safeguards (e.g. standard contractual clauses or adequacy decisions) where required by law.

8. Your rights

Depending on your location, you may have the following rights in relation to your personal data:

• Access: to obtain confirmation as to whether we process your data and to receive a copy of your data.
• Rectification: to have inaccurate or incomplete data corrected.
• Erasure: to request deletion of your data where legally applicable (e.g. where processing was based on consent and you withdraw it, or where data is no longer necessary).
• Restriction of processing: to request that we limit how we use your data in certain circumstances.
• Data portability: to receive your data in a structured, commonly used format where the processing is based on consent or contract and is carried out by automated means.
• Objection: to object to processing based on legitimate interests, including profiling, where applicable.
• Withdraw consent: where processing is based on consent, to withdraw it at any time.

To exercise these rights, contact us at message@phrexxonkhel.world. We will respond within the time limits set by applicable law (e.g. one month under the GDPR).

If you are in the European Economic Area, you have the right to lodge a complaint with a supervisory authority in your country of residence. If you are in the United States, you may have additional rights under state laws (e.g. California, Virginia, Colorado); we will honour them where applicable.

9. Children

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will take steps to delete it.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The updated version will be posted on this page with a new “Last updated” date. We encourage you to review this policy periodically. Where required by law, we will seek your consent to material changes.

11. Contact

For any questions about this Privacy Policy or our data practices, please contact:

Phrexxonkhel
698 Amsterdam Ave, New York, NY 10025, United States
Email: message@phrexxonkhel.world
Phone: +1 212 865 9700