Privacy Policy

1. Data Controller

Shryxellioshepax ("we," "our," or "us") is the data controller responsible for personal data collected through this website and in connection with orders for Essence Daily. We are committed to protecting your privacy and handling your personal data in accordance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and all other applicable privacy laws.

2. Personal Data We Collect

We may collect the following categories of personal data:

• Identification data: Full name
• Contact data: Email address, telephone number (if voluntarily provided)
• Communication data: Messages, inquiries, and correspondence submitted through our order form or email
• Technical data: IP address, browser type and version, device type, operating system, pages visited, time and date of access, referral URL
• Cookie data: Preferences and consent status stored in the browser (see our Cookie Policy)
• Transaction data: Order details, including the products requested and delivery addresses communicated to us

We do not collect special categories of personal data (such as health data, racial or ethnic origin, or financial data beyond what is necessary to process a transaction). We do not knowingly collect personal data from individuals under the age of 18.

3. Purposes and Legal Bases for Processing

We process your personal data only for specified, explicit, and legitimate purposes. The legal bases under which we process personal data are as follows:

Where we rely on consent as our legal basis, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

4. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law:

• Order and transaction data: Retained for up to 7 years to comply with applicable tax and commercial record-keeping laws.
• Customer communications and support data: Retained for up to 3 years from the date of the last interaction.
• Website analytics data: Retained for up to 26 months in anonymized or aggregated form.
• Marketing consent records: Retained for the duration of the consent and for up to 3 years thereafter as evidence of consent.
• Cookie consent records: Retained for up to 12 months.

Once retention periods have expired, personal data is securely deleted or anonymized in a manner that prevents re-identification.

5. Sharing of Personal Data

We do not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only where necessary:

• Service providers and processors: Third-party suppliers who assist us in operating the website, processing orders, sending communications, or providing analytics services. These processors are bound by data processing agreements and are only permitted to process your data on our instruction.
• Logistics and delivery partners: To fulfill and track your order delivery.
• Legal and regulatory authorities: Where we are required to disclose data by applicable law, regulation, court order, or governmental request.
• Professional advisors: Such as lawyers or accountants, subject to strict confidentiality obligations.

Any transfer of personal data outside the European Economic Area (EEA) will be subject to appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of access: You have the right to request a copy of the personal data we hold about you.
• Right to rectification: You have the right to request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected.
• Right to restriction of processing: You have the right to request that we limit the processing of your data in certain circumstances.
• Right to data portability: Where processing is based on consent or contract, you may request your personal data in a structured, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where we rely on consent, you can withdraw it at any time without affecting prior processing.
• Right not to be subject to automated decision-making: You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.

To exercise any of these rights, please contact us at: call-us@shryxellioshepax.world. We will respond to your request within 30 days.

You also have the right to lodge a complaint with a competent supervisory authority. In the United States, you may contact the Federal Trade Commission (FTC). For EEA residents, you may contact your national data protection authority.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit using TLS (HTTPS)
• Access controls limiting staff access to personal data on a need-to-know basis
• Regular security reviews of our systems and third-party processors
• Secure deletion procedures at the end of data retention periods

Despite these measures, no transmission over the internet or storage system is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by law.

8. Cookies

We use cookies and similar tracking technologies on this website. For detailed information about the cookies we use, their purposes, and how to manage your preferences, please read our Cookie Policy.

9. Children's Privacy

Our website and products are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently received data from a minor, we will take steps to delete that data promptly. If you believe a minor has submitted personal data to us, please contact us immediately.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information is being collected about you
• The right to know whether your personal information is sold or disclosed and to whom
• The right to opt out of the sale of personal information
• The right to access your personal information
• The right to equal service and price (non-discrimination)

We do not sell personal information to third parties. To exercise your California rights, contact us at call-us@shryxellioshepax.world.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Your continued use of the website after any changes are posted constitutes your acceptance of the revised policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us: