Privacy Policy

1. Introduction

This Privacy Policy describes how Quabalexacholie.world collects, uses, and protects your personal information. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and Dutch data protection laws.

By using our website and services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Data Controller

We are the data controller responsible for your personal information. This means we determine how and why your personal data is processed.

3. Information We Collect

3.1 Personal Information You Provide

We collect information that you voluntarily provide to us when you:

• Place an order for our products
• Create an account on our website
• Subscribe to our newsletter
• Contact our customer service
• Participate in surveys or promotions

This information may include:

• Full name
• Email address
• Postal address
• Phone number
• Payment information
• Order history

3.2 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and browsing behavior:

• IP address and location data
• Browser type and version
• Device information
• Pages visited and time spent
• Referring website
• Cookies and similar technologies

3.3 Information from Third Parties

We may receive information about you from third-party services such as payment processors, delivery services, and analytics providers.

4. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: You have given clear consent for us to process your personal data for specific purposes (e.g., marketing communications)
• Contract Performance: Processing is necessary to fulfill our contract with you (e.g., processing and delivering your order)
• Legal Obligation: Processing is necessary to comply with legal requirements (e.g., tax and accounting obligations)
• Legitimate Interest: Processing is necessary for our legitimate business interests (e.g., fraud prevention, website security, improving our services)

5. How We Use Your Information

We use your personal information for the following purposes:

• Order Processing: To process, fulfill, and deliver your orders
• Customer Service: To respond to your inquiries and provide support
• Account Management: To create and manage your account
• Payment Processing: To process payments and prevent fraud
• Marketing Communications: To send promotional emails (with your consent)
• Service Improvement: To analyze usage and improve our website and services
• Legal Compliance: To comply with applicable laws and regulations
• Security: To protect against fraud and unauthorized access

6. Data Sharing and Disclosure

We may share your personal information with the following categories of recipients:

6.1 Service Providers

We share data with trusted third-party service providers who assist us in operating our business:

• Payment processors (for secure payment handling)
• Shipping and delivery companies
• Email service providers
• Web hosting providers
• Analytics services
• Customer support platforms

These service providers are contractually obligated to protect your data and use it only for the purposes we specify.

6.2 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal obligations
• Respond to lawful requests from authorities
• Protect our rights and property
• Prevent fraud or illegal activities
• Protect the safety of our users

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

• Order Information: 7 years (for tax and accounting purposes under Dutch law)
• Account Information: Until you request deletion or 3 years of inactivity
• Marketing Consent: Until you withdraw consent or 3 years of inactivity
• Technical Data: 2 years from collection
• Customer Support Records: 3 years from last contact

After the retention period expires, we will securely delete or anonymize your personal data.

8. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

8.1 Right to Access

You have the right to request a copy of the personal data we hold about you.

8.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

8.3 Right to Erasure

You have the right to request deletion of your personal data in certain circumstances.

8.4 Right to Restriction

You have the right to request that we restrict the processing of your personal data.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format.

8.6 Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

8.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw consent at any time.

8.8 Right to Lodge a Complaint

You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have violated your privacy rights.

9. Security Measures

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption: All data transmitted between your browser and our servers is encrypted using SSL/TLS technology
• Access Controls: Strict access controls limit who can access your personal data
• Secure Storage: Personal data is stored on secure servers with regular backups
• Regular Audits: We conduct regular security assessments and audits
• Employee Training: Our staff receives regular training on data protection
• Incident Response: We have procedures in place to respond to data breaches

While we strive to protect your personal data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

10. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other legally approved transfer mechanisms

11. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your browsing experience. For detailed information about our cookie practices, please see our Cookie Policy.

12. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date
• Sending an email notification for material changes

Your continued use of our services after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry as soon as possible, typically within 5 business days.