Privacy Policy

Last updated:

1. Introduction

Welcome to Kharleonsykhex. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our website kharleonsykhex.world and purchase our products.

This policy is prepared in line with the General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act.

2. Data Controller Information

The data controller responsible for your personal data is:

  • Company Name: Kharleonsykhex
  • Address: Presteveien 24, 1605 Fredrikstad, Norway
  • Email: connect@kharleonsykhex.world
  • Country: Norway

3. Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide

  • Identity Data: Full name
  • Contact Data: Email address, phone number (optional), delivery address
  • Communication Data: Messages and correspondence you send us
  • Consent Data: Records of your consent to our policies

3.2 Information Collected Automatically

  • Technical Data: IP address, browser type and version, time zone setting, operating system
  • Usage Data: Pages visited, time spent on pages, navigation paths
  • Cookie Data: Information collected through cookies and similar technologies (see our Cookie Policy)

4. Purposes and Legal Basis for Processing

We process your personal data for the following purposes:

  • Order Processing: To process and fulfill your orders (Legal basis: Contract performance)
  • Customer Communication: To respond to your inquiries and provide customer support (Legal basis: Legitimate interest)
  • Legal Compliance: To comply with legal obligations (Legal basis: Legal obligation)
  • Website Improvement: To analyze and improve our website (Legal basis: Legitimate interest or Consent)
  • Direct Marketing: To send promotional communications only where permitted by law and, where required, with your consent (Legal basis: Consent or legitimate interest, depending on relationship and channel)

Where consent is used, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Order and Accounting Data: Up to 5 years after the end of the accounting year, or longer where required by applicable law
  • Customer Communication: 3 years from last interaction
  • Marketing Consent: Until consent is withdrawn
  • Website Analytics: 26 months

6. Data Sharing and Recipients

We may share your personal data with:

  • Payment Processors: To process secure payments
  • Shipping Partners: To deliver your orders
  • Service Providers: Who assist in website operations and customer support
  • Legal Authorities: When required by law

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not sell your personal data to third parties.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside the EEA. When this happens, we use legally recognized safeguards, such as:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions by the European Commission
  • Other valid transfer tools under GDPR

8. Your Rights Under GDPR

Under the GDPR, you have the following rights:

  • Right of Access: Request a copy of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your data (right to be forgotten)
  • Right to Restriction: Request limitation of processing
  • Right to Data Portability: Receive your data in a structured format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at connect@kharleonsykhex.world. We normally respond within one month, or as otherwise permitted by GDPR.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • SSL/TLS encryption for data transmission
  • Secure server infrastructure
  • Access controls and authentication
  • Regular security assessments
  • Employee training on data protection

10. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

11. Children's Privacy

Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Links to Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read the privacy policies of any linked websites.

13. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

14. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet):

  • Website: www.datatilsynet.no
  • Address: Postboks 458 Sentrum, 0105 Oslo, Norway

15. Contact Us

If you have any questions about this privacy policy or our data practices, please contact us:

  • Email: connect@kharleonsykhex.world
  • Address: Presteveien 24, 1605 Fredrikstad, Norway