Privacy Policy

Last Updated: September 18, 2026

Welcome to the xngvl website.

We respect your privacy and take the security of your personal information seriously. This Privacy Policy explains how we may collect, use, store, and protect your personal information when you visit this website, browse products, place orders, make purchases, contact customer support, or use other website-related features.

This Privacy Policy applies to the products and related services provided through this website. It does not exclude or restrict any mandatory rights granted to consumers or other data subjects under applicable law.

1. Information We May Collect

Depending on how you interact with our website, we may collect the following types of information.

1. Information You Provide Directly

When you place an order, complete a form, contact us, or use other website features, you may provide us with:

• Name;

• Shipping address;

• Billing address;

• Telephone number;

• Email address;

• Order and purchase history;

• Return, refund, or after-sales information;

• Communications you voluntarily provide to customer support;

• Other information you voluntarily submit while using our website services.

If you use a third-party payment method to complete a purchase, payment-related information may be processed directly by the applicable payment service provider.

Unless required by law or necessary to provide a specific service, we generally do not store complete debit or credit card information.

2. Information Automatically Collected

When you visit our website, and to the extent permitted by applicable law and your privacy settings, we may automatically collect certain technical and usage information, including:

• IP address;

• Browser type and version;

• Operating system;

• Device type;

• Page visit records;

• Date and time of access;

• Browsing paths and navigation information;

• Data generated through cookies and similar technologies;

• Referral source;

• Website and server logs;

• Information relating to website security, performance, and technical operation.

This information is primarily used to maintain website operations, ensure security, troubleshoot technical issues, and improve website functionality.

2. How We Use Personal Information

We use personal information in accordance with applicable data protection laws and the relevant lawful basis for processing.

1. Orders and Product Services

Personal information may be used to:

• Create and manage orders;

• Confirm order information;

• Process or verify payments;

• Arrange product delivery;

• Provide customer support;

• Process returns, refunds, and exchanges;

• Respond to customer inquiries;

• Send order, delivery, and after-sales service notifications.

2. Website Operation and Security

We may use relevant technical information to:

• Maintain the normal operation of the website;

• Prevent unauthorized access;

• Detect potential fraudulent activity;

• Protect the website and users;

• Troubleshoot technical problems;

• Maintain the website and related systems;

• Identify and reduce security risks.

3. Improving Our Website and Services

Where permitted by applicable law, we may analyze website usage to understand how users interact with our website and use this information to improve:

• Website functionality;

• Product presentation;

• User experience;

• Service processes;

• Website performance.

4. Marketing Communications

Where applicable law requires your prior consent, we will obtain the necessary consent before sending you marketing or commercial communications.

Such communications may include information about new products, promotional activities, or other products and services offered through the website.

You may unsubscribe by following the instructions included in our marketing emails or by contacting us at the customer support email address.

5. Legal and Compliance Requirements

Where required or permitted by law, we may retain, use, or disclose personal information for purposes including:

• Complying with applicable laws and regulations;

• Responding to lawful requests from government authorities or regulatory bodies;

• Complying with legal proceedings;

• Handling or resolving disputes;

• Preventing fraud or other unlawful activities.

3. Legal Bases for Processing Personal Information

If the GDPR or other applicable data protection laws apply to the processing of your personal information, we may process your information on the following legal bases:

Performance of a Contract

For activities necessary to process orders, arrange delivery, provide after-sales services, and fulfill our contractual obligations.

Legal Obligations

When processing is necessary to comply with obligations imposed by applicable laws or regulations.

Legitimate Interests

Where permitted by law, we may process information for purposes such as maintaining website security, preventing fraud, managing our business, and improving our services, while taking into account the rights and legitimate interests of individuals.

Your Consent

Where applicable law requires consent, we will obtain your consent before beginning the relevant processing activity.

If processing is based on your consent, you may withdraw your consent in accordance with applicable law.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

4. Cookies and Similar Technologies

To provide website functionality and improve the user experience, we may use cookies, browser storage, and other similar technologies.

Depending on their specific functions, these technologies may be used to:

• Save shopping cart information;

• Support essential website functions;

• Remember language or browsing preferences;

• Analyze website visits;

• Understand website performance;

• Maintain website security;

• Measure the effectiveness of relevant marketing activities.

For non-essential cookies or similar technologies for which user consent is legally required, we will provide an appropriate consent or preference mechanism in accordance with applicable law.

You may manage, restrict, or delete cookies through the cookie settings provided on the website or through your browser settings.

Please note that restricting certain essential cookies may affect some website functions.

5. Sharing of Personal Information

We do not sell your personal information to third parties for the purpose of selling personal information.

To the extent necessary to fulfill orders, maintain our website, and provide related services, we may share certain information with relevant service providers.

These service providers may include:

• Payment service providers;

• Logistics and delivery providers;

• Website hosting providers;

• Cloud service and infrastructure providers;

• Website technology service providers;

• Data analytics providers;

• Website security and fraud prevention providers;

• Customer service and communications providers;

• Advertising or marketing service providers, where applicable.

We will provide only the information reasonably necessary for the relevant service and will implement appropriate data protection measures to the extent required by applicable law.

Where permitted or required by law, we may also disclose personal information to relevant authorities or other parties, including where necessary for:

• Compliance with laws, regulations, or judicial proceedings;

• Responding to lawful requests from courts or regulatory authorities;

• Preventing fraud or other unlawful activities;

• Protecting the legitimate rights and interests of us, consumers, or other relevant parties;

• Handling legal disputes;

• Enforcing applicable agreements or protecting our website and services.

6. Third-Party Services

Our website may use certain third-party services as part of its operation.

Depending on the actual functionality of the website, these services may include:

• Payment services;

• Delivery services;

• Website analytics;

• Website security;

• Customer support;

• Communications;

• Advertising or marketing;

• Social media-related features.

If a third-party service directly processes your personal information, that third party may process your information in accordance with its own privacy policy.

We recommend reviewing the privacy policies of relevant third-party service providers to understand how they process personal information.

7. Google Services

If this website uses Google Analytics, Google Ads, or other Google services, such services may process certain technical information and website usage data according to their respective functions.

These technologies may be used for purposes including:

• Website traffic analysis;

• Website performance measurement;

• Advertising performance measurement;

• Conversion tracking;

• Website and marketing campaign optimization.

Where applicable law requires consent for non-essential analytics or advertising technologies, we will obtain the necessary consent through appropriate cookie or privacy preference mechanisms before enabling such technologies.

Specific data processing practices may also be subject to Google's applicable privacy policies.

8. Security of Personal Information

We take reasonable technical and organizational measures to protect personal information based on its nature and the associated risks.

Such measures may include:

• Encryption of data transmissions;

• Access controls;

• Authentication procedures;

• Website security monitoring;

• Fraud prevention measures;

• Data backups;

• System security maintenance;

• Data access management.

Although we take reasonable measures to protect personal information, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

If you believe that your account or personal information may have been compromised or is subject to a security issue, please contact us promptly at the customer support email address.

9. Retention of Personal Information

We do not retain your personal information indefinitely.

To the extent permitted by law, we retain information for as long as reasonably necessary to fulfill the purposes for which it was collected and to meet our legitimate business and legal requirements.

The retention period may be affected by factors including:

• The period necessary to provide order and product services;

• Return and after-sales service requirements;

• Financial, tax, and accounting record requirements;

• Legally required retention periods;

• The time necessary to resolve potential disputes;

• Fraud prevention and website security requirements.

When personal information is no longer necessary and there is no legal requirement to retain it, we will delete, anonymize, or otherwise appropriately process the information in accordance with applicable law.

10. Your Data Protection Rights

If the GDPR or other applicable data protection laws apply to your personal information, you may have the following rights under applicable law:

Right of Access

You may request confirmation as to whether we process your personal information and, where legally permitted, request access to relevant information.

Right to Rectification

If your personal information is inaccurate or incomplete, you may request that it be corrected or supplemented as permitted by law.

Right to Erasure

Where the applicable legal requirements are satisfied, you may request the deletion of your personal information.

Right to Restriction of Processing

Where the conditions established by applicable law are met, you may request that the processing of your personal information be restricted.

Right to Object

Where provided by applicable law, you may object to certain types of processing of your personal information.

Right to Data Portability

Where applicable, you may request to receive your personal information in a structured, commonly used, and machine-readable format.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw your consent in accordance with applicable law.

These rights may be subject to conditions and exceptions provided by applicable law.

To exercise any applicable data protection rights, please contact us at:

📧 calahanfairy@gmail.com

We will process your request in accordance with the applicable legal procedures and deadlines.

11. Children's Information

This website is not specifically intended to provide products or services to children.

If we become aware that we have collected personal information from a minor without appropriate authorization where such authorization is required by applicable law, we will take reasonable steps to address the situation in accordance with applicable law.

If you believe that a minor may have submitted personal information to us, please contact us:

📧 calahanfairy@gmail.com

12. International Data Transfers

Some of our website service providers may be located in different countries or regions. As a result, personal information may be transferred to and processed in locations outside your country or region as necessary to provide website services.

If personal information is transferred to a location outside the European Economic Area (EEA), we will implement appropriate data protection measures to the extent required by applicable law.

Such measures may include applicable data transfer mechanisms or other safeguards recognized by law.

13. Data Security Incidents

If a data security incident occurs that may affect the security of personal information, we will take appropriate measures based on the nature of the incident and applicable law.

Where legally required, we may notify the relevant regulatory authorities and, where necessary, affected individuals.

14. Updates to This Privacy Policy

We may update this Privacy Policy from time to time due to changes in laws or regulations, website functionality, business operations, or technology.

The updated Privacy Policy will be published on this website and, where applicable, will include an updated effective or revision date.

If there are material changes, we will provide appropriate notice to relevant users as required by applicable law.

We recommend reviewing this page periodically to stay informed about the latest version of our Privacy Policy.

15. Contact Us

If you have any questions about this Privacy Policy, the processing of personal information, cookies, data protection rights, or other privacy matters, please contact:

xngvl Customer Support

📧 calahanfairy@gmail.com

To help us process your request more efficiently, please provide as much relevant information as possible in your email.

We will handle your request in accordance with applicable law and the specific circumstances.

Thank you for trusting xngvl.