Data controller
Quexylanquebl.world operates this website and determines how and why personal data is processed when you browse pages, submit forms, purchase products, or communicate with us about Virelix.
Registered postal address: 764 Burke Avenue, Bronx, NY 10467, United States.
Primary contact for privacy requests: talk@quexylanquebl.world
Primary jurisdiction: United States. Where the GDPR or UK GDPR applies to our processing, we act as controller for the activities described below and support the rights listed in those frameworks.
Scope and principles
This policy applies to personal data collected through quexylanquebl.world, related landing experiences, and offline records that we tie to the same relationship, such as fulfillment notes linked to your order.
We follow the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and accountability. Where we rely on consent, you may withdraw it without affecting the lawfulness of processing that occurred before withdrawal, subject to exceptions such as contract performance or legal obligations.
We do not sell personal data in the sense of exchanging lists for monetary consideration. Where “sale” has a broader meaning under U.S. state laws, we provide opt-out mechanisms when required and describe categories in our cookie and marketing sections.
Categories of personal data
Depending on how you interact with us, we may process:
- Identity and contact data: name, email address, phone number if you provide it, and similar identifiers.
- Transaction data: order references, shipping and billing addresses, payment status, and delivery confirmations. Card numbers are handled by our payment service provider; we typically receive tokens or partial references rather than full card data.
- Communication content: text you include in contact forms, support tickets, or email threads.
- Technical and usage data: IP address, browser type, device category, approximate location derived from IP, referring URL, pages viewed, and timestamps.
- Cookie and similar data: identifiers stored in cookies or local storage when you consent to non-essential categories, as described in the Cookie Policy.
- Marketing preferences: opt-in status, suppression lists, and campaign engagement metrics when you have agreed to marketing.
We do not intentionally collect special categories of data (such as health information) beyond what you voluntarily include in free-text fields. Please avoid sending sensitive information unless we explicitly request it for a specific purpose.
Purposes and legal bases
We process personal data for the following purposes and, where the GDPR applies, on the following legal bases:
- Website operation and security (Article 6(1)(f) legitimate interests / Article 6(1)(b) steps at your request): delivering pages, preventing abuse, debugging errors, and protecting networks.
- Contract performance (Article 6(1)(b)): processing orders, taking payment, shipping products, and providing customer support related to your purchase.
- Legal obligations (Article 6(1)(c)): tax, accounting, and responding to lawful requests from public authorities where we are required to retain or disclose information.
- Consent (Article 6(1)(a)): non-essential cookies, certain marketing messages, and optional surveys where we ask explicitly.
Where we rely on legitimate interests, we balance our interests against your rights and offer an objection pathway for direct marketing and certain types of analytics where applicable law requires.
Recipients and subprocessors
We share personal data with categories of recipients that help us run the business:
- Hosting and infrastructure providers that store website content and databases.
- Email delivery services for transactional messages and, where permitted, marketing.
- Payment processors and fraud screening tools.
- Logistics partners that print labels and deliver parcels.
- Professional advisers such as accountants and lawyers, bound by confidentiality.
We use written agreements that require subprocessors to protect data and process it only on our instructions, except where they are independently compelled by law.
International transfers
Our operations are based in the United States. If you access the site from the European Economic Area, Switzerland, or the United Kingdom, your data may be transferred to the United States or other countries where our providers operate.
Where required, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, supplementary measures recommended by regulators, or derogations under Article 49 GDPR for occasional transfers. You may request a summary of relevant safeguards by contacting us.
Retention periods
We retain personal data only as long as necessary for the purposes above:
- Marketing and analytics logs: according to the retention windows in the Cookie Policy and your consent choices.
- Contact form and general inquiry records: up to twenty-four months after the last message, unless a dispute or legal hold requires longer retention.
- Order and tax records: up to seven years where U.S. or other applicable tax law requires.
- Security logs: typically ninety days to twelve months depending on system design, unless investigation extends the need.
After retention periods expire, we delete or irreversibly anonymize data where feasible.
Security measures
We implement administrative, technical, and physical safeguards appropriate to the risk, including HTTPS transport encryption for the site, access controls for internal systems, authentication for administrative interfaces, and vendor security reviews for critical providers.
No online transmission or storage is completely risk-free. If we become aware of a breach that affects your rights, we will notify regulators and, where required, affected individuals without undue delay.
Your rights
Depending on your location, you may have rights to access, rectify, erase, restrict processing, object, data portability, withdraw consent, and not be subject to solely automated decisions with legal effects. You may also lodge a complaint with a supervisory authority in your country.
To exercise rights, email talk@quexylanquebl.world with a description of your request. We may ask for reasonable information to verify your identity. We respond within one month unless the request is complex, in which case we may extend by two months and explain why.
U.S. residents in certain states may have additional rights under local privacy laws, including opt-out rights related to targeted advertising or sales of personal data where those terms apply to our activities.
Children
The site and Virelix products are intended for adults. We do not knowingly collect personal data from children under sixteen. If you believe we have received such data, contact us and we will delete it promptly where verification allows.
Advertising and measurement
When we run digital advertising, platforms may process technical identifiers, conversion events, and campaign performance metrics. Where consent is required for non-essential cookies or similar technologies, we rely on the choices you make in our cookie banner.
We use aggregated or pseudonymous data to measure whether ads lead to visits or inquiries. We do not use this information to make automated decisions with legal effects about you.
Updates to this policy
We may revise this policy to reflect legal, technical, or business changes. The effective date at the top is updated when material edits are published. Continued use of the site after changes constitutes acceptance of the revised policy where permitted by law; where consent is required, we will seek it separately.