Privacy Policy

Last updated: 12 March 2025

This Privacy Policy describes how Kholvexxex ("we", "us", "our") collects, uses, stores, and protects your personal data when you use our website https://kholvexxex.world (the "Site") and our services. We process personal data in accordance with the EU General Data Protection Regulation (GDPR), the Swedish Personal Data Act (SFS 2018:218), and other applicable data protection laws.

1. Data controller

The data controller responsible for your personal data is:

Kholvexxex
Stortorget 8
211 34 Malmö
Sweden

Email: reply@kholvexxex.world
Phone: +46 771 450 450

2. Personal data we collect

We may collect the following categories of personal data:

• Identity and contact data: name, email address, telephone number (if provided), and postal address when you place an order or contact us.
• Transaction data: order details, payment-related information (we do not store full card numbers; payment processing may be handled by third-party providers).
• Technical and usage data: IP address, browser type and version, device type, time zone, pages visited, and how you use the Site, where permitted by your cookie choices.
• Communication data: content of messages you send us via contact forms, email, or other channels.

3. Legal basis and purposes of processing

We process your personal data only where we have a lawful basis:

• Contract performance: to process and deliver your orders, manage your account, and provide customer support (GDPR Art. 6(1)(b)).
• Legitimate interests: to improve our Site, prevent fraud, ensure security, and defend our legal rights, where such interests are not overridden by your rights (GDPR Art. 6(1)(f)).
• Consent: where you have given clear consent for specific processing, e.g. marketing communications or non-essential cookies (GDPR Art. 6(1)(a)).
• Legal obligation: where processing is necessary to comply with laws (e.g. tax, accounting) (GDPR Art. 6(1)(c)).

Purposes include: order fulfilment, customer service, website operation and analytics (where consented), fraud prevention, and compliance with legal obligations.

4. Retention periods

We keep your data only as long as necessary for the purposes above:

• Order and customer data: typically 7 years from the end of the financial year in which the transaction occurred, for accounting and legal obligations under Swedish law.
• Contact and enquiry data: until the enquiry is resolved and for a reasonable period thereafter (e.g. 2 years), unless longer retention is required by law.
• Marketing and consent-based data: until you withdraw consent or object, or for the period stated at the time of collection.
• Technical and log data: as specified in our Cookie Policy, generally up to 24 months for analytics where applicable.

After the retention period, we delete or anonymise your data so that you can no longer be identified.

5. Security measures

We implement appropriate technical and organisational measures to protect your personal data, including:

• Use of HTTPS and encryption in transit for all data transmitted via the Site.
• Restricted access to personal data on a need-to-know basis.
• Secure storage and handling of data in line with industry practices.
• Regular review of our security practices and, where applicable, use of trusted service providers who are bound by data processing agreements.

Despite these measures, no transmission over the internet or electronic storage is completely secure; we cannot guarantee absolute security.

6. Sharing and international transfers

We may share your data with:

• Service providers: payment processors, hosting providers, email and support tools, and analytics providers, only where necessary and under strict contractual obligations.
• Authorities: when required by law or to protect our rights.

When we transfer data outside the EEA, we ensure appropriate safeguards are in place (e.g. adequacy decisions, Standard Contractual Clauses, or other approved mechanisms under GDPR).

7. Your rights under GDPR

You have the following rights in relation to your personal data:

• Access (Art. 15): request a copy of the personal data we hold about you.
• Rectification (Art. 16): request correction of inaccurate or incomplete data.
• Erasure (Art. 17): request deletion of your data in certain circumstances (e.g. where it is no longer necessary or you withdraw consent).
• Restriction (Art. 18): request that we limit processing in certain situations.
• Data portability (Art. 20): receive your data in a structured, machine-readable format where the processing is based on consent or contract.
• Object (Art. 21): object to processing based on legitimate interests or to direct marketing.
• Withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at reply@kholvexxex.world. We will respond within one month. You also have the right to lodge a complaint with a supervisory authority; in Sweden, this is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten), www.imy.se.

8. Children

Our Site and services are not directed at individuals under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.

9. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will be revised, and we encourage you to review this page periodically. Material changes may be communicated by email or a notice on the Site where appropriate.

10. Contact

For any questions about this Privacy Policy or our data practices, contact us:

Kholvexxex
Stortorget 8, 211 34 Malmö, Sweden
Email: reply@kholvexxex.world
Phone: +46 771 450 450