Privacy Policy

How VEXORA LUXE processes your personal data, who we share it with and what your rights are.

1. 1. Controller

   The controller of your personal data is Mugiwara LLC (VEXORA LUXE), 30 N Gould St #42808, Sheridan, WY 82801, USA. For any request about your personal data, contact info@vexora-luxe.com.

2. 2. Data we process

   • Order data: name, email address, telephone number, shipping and billing address, items ordered, amount and currency, order and shipping status, tracking number.
   • Payment data: you enter your card details directly with our payment provider, Stripe; they never reach us. We receive only information such as the payment status and transaction reference.
   • Correspondence: your contact details and the content of your messages when you use the contact form or email us.
   • Technical data: the IP address, browser information and access time recorded by our hosting provider when you visit the website. We use your IP address to estimate your country and show prices in the right currency, and your browser's language setting to choose the website language.
   • Preferences and shopping bag: your language and country preferences are stored in cookies, and your shopping bag in your browser's local storage. The contents of your bag are not sent to us until you proceed to checkout.
   • Usage data (only with your consent): through Google Analytics cookies, the pages you view, the search terms you use on the site, the products you look at and add to your bag, purchases, scrolling, outbound link clicks, form interactions and file downloads, your approximate location, and your device and browser type.

   We do not use advertising or social media tracking tools.

3. 3. Purposes and legal bases

   Purpose	Data	Legal basis (GDPR)
   Taking orders, payment, delivery and order emails	Order and payment data	Performance of a contract (Art. 6(1)(b))
   Withdrawals, returns, complaints and customer service	Order data, correspondence	Performance of a contract; legal obligation (Art. 6(1)(c))
   Record-keeping required by tax, accounting and consumer law	Order and payment data	Legal obligation (Art. 6(1)(c))
   Operating the website securely, preventing abuse and fraud	Technical data, payment data	Legitimate interests (Art. 6(1)(f))
   Remembering language, country and shopping bag	Preferences	Legitimate interests; strictly necessary cookies
   Measuring and improving how the website is used	Usage data	Consent (Art. 6(1)(a)); you can withdraw it under “Cookie settings”
   Establishing and defending legal claims	Relevant data	Legitimate interests (Art. 6(1)(f))

   We will ask for your separate consent before sending you marketing emails (newsletter); without your consent we do not send marketing messages. Stripe may subject transactions to automated fraud checks for payment security; apart from this, we do not make automated decisions about you or create profiles.

4. 4. Who we share data with

   Recipient	Service	Location
   Stripe	Payment processing, fraud prevention	USA / EU
   Vercel Inc.	Website hosting	USA
   Supabase, Inc.	Order database hosting	Germany (Frankfurt)
   Resend	Sending order emails and contact form messages	USA
   Google (Google Analytics)	Website usage statistics, only with your consent	USA and other countries
   Contracted carriers	Delivery and returns	Countries of dispatch and delivery
   Customs and tax authorities, courts, competent public bodies	Where required by law	Relevant country

   Our service providers process your data only on our instructions and in order to provide their services to us. We do not sell your personal information and do not share it for targeted advertising.

5. 5. International transfers

   Our company is established in the United States, and your data is processed in the United States. If you are in the European Union or the United Kingdom, we enter into data processing agreements with our service providers that rely, where applicable, on the EU–U.S. Data Privacy Framework (and its UK extension) or on the European Commission's Standard Contractual Clauses.

6. 6. Retention

   • Order, payment and invoice records: for as long as required by tax and commercial law (generally up to 10 years).
   • Correspondence: after your request has been resolved, for the applicable limitation period for possible legal claims.
   • Cookies: as stated in our Cookie Policy.
   • Usage data (Google Analytics): up to 14 months.
   • Server access logs: for the short retention period of our hosting provider.

   When the period ends, the data is deleted or anonymised.

7. 7. Your rights

   Depending on the law of your country, you have the right to access your data, to have it corrected or erased, to restrict its processing, to receive it in a portable format, to object to processing based on legitimate interests, and to withdraw any consent you have given at any time.

   You can send your request to info@vexora-luxe.com. We may ask for additional information to verify your identity. We respond within one month.

   You may lodge a complaint with the data protection authority of your country of residence in the European Union, with the Information Commissioner's Office (ICO) in the United Kingdom, or with the Personal Data Protection Board (KVKK) in Türkiye.

8. 8. Notice for U.S. residents

   Residents of certain U.S. states may have additional rights under state privacy laws, such as the right to know, correct and delete personal information and to opt out of its sale or sharing. We do not sell personal information or share it for cross-context behavioural advertising, and we will not discriminate against you for exercising your rights.

   Because we do not track users across third-party websites, our practices do not change in response to “Do Not Track” browser signals.

9. 9. Security

   The website runs over encrypted connections (HTTPS) only. Card data is processed by Stripe in accordance with the Payment Card Industry Data Security Standard (PCI DSS). Access to order data is limited to authorised persons.

10. 10. Children

    The website is not directed at children under 16, and we do not knowingly collect data from them. If you become aware of such a case, contact info@vexora-luxe.com and we will delete the data.

11. 11. Changes

    When we update this policy, we change the date at the top of this page. We will also announce material changes on the website.