Privacy Policy

Last Updated:

1. Introduction

Welcome to Wrexalonnnexei ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website wrexalonnnexei.world and purchase our products.

This policy complies with the General Data Protection Regulation (GDPR), which applies in Norway through the European Economic Area (EEA) Agreement, and the Norwegian Personal Data Act (Personopplysningsloven, lov 15. juni 2018 nr. 38 om behandling av personopplysninger), which implements and supplements GDPR in Norwegian law.

2. Data Controller Information

The data controller responsible for your personal data is:

  • Company Name: Wrexalonnnexei
  • Address: Atneosveien 95, 2476 Atna, Norway
  • Email: partners@wrexalonnnexei.world
  • Country: Norway

3. Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide

  • Contact Information: Name, email address, phone number (optional), shipping address
  • Order Information: Products purchased, order history, payment details
  • Communications: Messages, inquiries, and correspondence with us
  • Consent Records: Records of consents you have provided

3.2 Automatically Collected Information

  • Device Information: IP address, browser type, operating system
  • Usage Data: Pages visited, time spent on site, referring URLs
  • Cookies: Information collected through cookies and similar technologies (see our Cookie Policy)

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

  • Contract Performance (Article 6(1)(b)): Processing necessary to fulfill your order and provide our services
  • Consent (Article 6(1)(a)): Where you have given explicit consent for specific processing activities
  • Legitimate Interests (Article 6(1)(f)): For business operations, fraud prevention, and improving our services
  • Legal Obligations (Article 6(1)(c)): Compliance with legal requirements, such as tax and accounting obligations under Norwegian law

Where required by Personopplysningsloven, we may rely on additional national legal bases for specific processing (e.g. use of national identification numbers where permitted).

5. How We Use Your Data

We use your personal data for the following purposes:

  • Processing and fulfilling your orders
  • Communicating with you about your orders and inquiries
  • Providing customer support
  • Sending transactional emails (order confirmations, shipping updates)
  • Improving our website and services
  • Analyzing website usage and performance
  • Complying with legal obligations
  • Preventing fraud and ensuring security

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Order Data: 7 years (for tax and legal compliance)
  • Marketing Consent: Until consent is withdrawn
  • Website Analytics: 26 months
  • Customer Inquiries: 3 years after resolution

After the retention period, data is securely deleted or anonymized.

7. Data Sharing and Disclosure

We may share your personal data with:

  • Service Providers: Payment processors, shipping carriers, hosting providers who assist in our operations
  • Legal Authorities: When required by law or to protect our legal rights
  • Business Transfers: In connection with any merger, acquisition, or sale of assets

We do not sell your personal data to third parties. All service providers are contractually bound to protect your data and process it only as instructed.

8. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When such transfers occur, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions by the European Commission
  • Binding Corporate Rules where applicable

9. Your Rights Under GDPR

As a data subject, you have the following rights:

  • Right of Access (Article 15): Request a copy of your personal data
  • Right to Rectification (Article 16): Request correction of inaccurate data
  • Right to Erasure (Article 17): Request deletion of your data ("right to be forgotten")
  • Right to Restriction (Article 18): Request limitation of processing
  • Right to Data Portability (Article 20): Receive your data in a structured, machine-readable format
  • Right to Object (Article 21): Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the details in section 14. We will respond without undue delay and in any event within one month (as required by GDPR Article 12(3)); that period may be extended by two further months where necessary, in which case we will inform you of the extension and the reasons.

10. Data Security and Breach Notification

We implement appropriate technical and organizational measures to protect your personal data, including:

  • SSL/TLS encryption for data transmission
  • Secure data storage with access controls
  • Regular security assessments
  • Employee training on data protection
  • Incident response procedures

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Norwegian Data Protection Authority (Datatilsynet) without undue delay and, where feasible, no later than 72 hours after having become aware of it, in accordance with GDPR Article 33. Where the breach is likely to result in a high risk to you, we will also inform you without undue delay (GDPR Article 34).

11. Children's Privacy

Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. Under Personopplysningsloven, processing of personal data of children under 13 years in connection with information society services is only lawful where consent is given or authorised by the holder of parental responsibility. If you believe we have collected data from a child, please contact us immediately.

12. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with a supervisory authority. In Norway, the competent authority is the Norwegian Data Protection Authority (Datatilsynet), which enforces Personopplysningsloven and GDPR:

  • Website: datatilsynet.no
  • Address: Postboks 458 Sentrum, 0105 Oslo, Norway

You may also lodge a complaint with the supervisory authority in the EU/EEA country of your residence or place of work.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

  • Email: partners@wrexalonnnexei.world
  • Address: Atneosveien 95, 2476 Atna, Norway