1. Data Controller
Khiphloxsrchunax.world (the "Company") is the data controller responsible for your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Norwegian data protection legislation.
Full contact information:
- Registered address: Fridtjof Nansens plass 5, 0160 Oslo, Norway
- Email: office@khiphloxsrchunax.world
- Country of establishment: Norway
2. Purposes of Data Processing
We process your personal data exclusively for the following purposes:
- To process, fulfill, and deliver your orders and requests in a timely and efficient manner
- To communicate with you regarding your orders, inquiries, and any support-related matters
- To send marketing communications, newsletters, and promotional offers only where you have given explicit consent
- To improve our website, services, and user experience through analytics and feedback
- To comply with legal obligations, including tax, accounting, and regulatory requirements
- To prevent fraud, ensure security, and protect the rights and safety of our users and the Company
3. Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (EU) 2016/679 and the Norwegian Personal Data Act, we process your data on the following legal bases:
- Contract performance: Processing necessary to perform the contract between you and us, including order fulfillment and customer service
- Consent: For marketing communications, non-essential cookies, and any processing where we have obtained your explicit consent
- Legitimate interests: To improve our services, prevent fraud, conduct analytics, and ensure the security of our systems, where such interests are not overridden by your rights
- Legal obligation: Where we are required to process data to comply with applicable laws and regulations
4. Categories of Data We Collect
We may collect and process the following categories of personal data:
- Identity data: Name, title, and similar identifiers
- Contact data: Email address, telephone number, postal address, and billing address
- Transaction data: Order history, payment details, and delivery information
- Technical data: IP address, browser type and version, device information, time zone, and usage data when you interact with our website
- Communication data: Records of correspondence, support tickets, and feedback you provide to us
5. Data Retention Periods
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements:
- Order and transaction data: 7 years from the date of the transaction (for legal and accounting requirements under Norwegian law)
- Marketing consent and preference data: Until you withdraw your consent or opt out
- Website analytics data: Up to 26 months from the date of collection
- Support and communication records: 3 years from the date of last contact
- Cookie data: As specified in our Cookie Policy, typically up to 12–26 months depending on the type
6. Your Rights Under GDPR
You have the following rights in relation to your personal data:
- Right of access: Request a copy of the personal data we hold about you
- Right to rectification: Request correction of inaccurate or incomplete data
- Right to erasure: Request deletion of your data ("right to be forgotten") where applicable
- Right to restriction: Request that we limit how we process your data in certain circumstances
- Right to data portability: Receive your data in a structured, commonly used, machine-readable format
- Right to object: Object to processing based on legitimate interests, including direct marketing
- Right to withdraw consent: Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us at office@khiphloxsrchunax.world. We will respond within one month. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at www.datatilsynet.no.
7. Data Security Measures
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:
- Encryption of data in transit using HTTPS/TLS protocols
- Secure storage with access controls and authentication
- Regular security assessments and vulnerability testing
- Staff training on data protection and security best practices
- Data processing agreements with third-party service providers
8. Data Sharing and Recipients
We may share your data with the following categories of recipients:
- Payment processors to complete transactions securely
- Shipping and logistics providers to deliver your orders
- Service providers who assist our operations under strict data processing agreements
- Legal or regulatory authorities when required by law
We do not sell your personal data to third parties. All sharing is conducted in compliance with applicable data protection laws.
9. International Data Transfers
If we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, adequacy decisions, or other mechanisms recognized under GDPR.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. The current version is always available on this page. We will notify you of significant changes by email or through a prominent notice on our website.