Privacy Policy

Last updated:

1. Introduction

Thryxelleinrozer ("we," "our," or "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy describes how we collect, use, store, and share your information when you visit our website or use our services. We are based at Kingly Court, Carnaby St, London, W1B 5PW, United Kingdom, and we comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please discontinue use of our website immediately.

2. Information We Collect

2.1 Personal Information You Provide

When you interact with our website, you may voluntarily provide us with certain personal information, including but not limited to:

• Your full name, as provided through our contact form
• Your email address, used for communication purposes
• The content of messages you send us through the contact form
• Your consent preferences regarding data processing

2.2 Information Collected Automatically

When you visit our website, we may automatically collect certain technical information, including:

• Your IP address and approximate geographic location
• Browser type, version, and language preferences
• Operating system and device information
• Pages visited, time spent on each page, and navigation paths
• Referring website addresses and search terms used to find our site
• Date and time of each visit

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience. For detailed information about our use of cookies, please refer to our Cookies Policy.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your enquiries and provide customer support
• To improve our website content, functionality, and user experience
• To analyse website traffic and usage patterns for optimisation
• To protect our website against fraud, abuse, and unauthorised access
• To comply with applicable legal obligations and regulations
• To communicate important updates about our services or policies
• To personalise your experience and present relevant content

4. Legal Basis for Processing

Under the UK GDPR, we process your personal data based on the following legal grounds:

• Consent: When you submit our contact form, you provide explicit consent for us to process your personal data for the stated purpose
• Legitimate Interests: We may process your data when it is in our legitimate business interests, such as improving our services and website security, provided these interests do not override your fundamental rights
• Legal Obligation: We may process your data when required to comply with applicable laws and regulations
• Contractual Necessity: When processing is necessary for the performance of a contract or to take steps at your request prior to entering a contract

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your data in the following limited circumstances:

• Service Providers: We may share data with trusted third-party service providers who assist with website hosting, analytics, and email delivery, subject to strict data processing agreements
• Legal Requirements: We may disclose your information if required by law, court order, or governmental regulation
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction, with prior notification
• Protection of Rights: We may share information when necessary to protect our rights, safety, or property, or that of our users and the public

6. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law. Specifically:

• Contact form submissions are retained for up to 24 months from the date of submission
• Website analytics data is retained for up to 26 months
• Cookie consent records are retained for up to 12 months

When personal data is no longer needed, we securely delete or anonymise it in accordance with our data retention procedures.

7. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal data we hold about you
• Right to Rectification: You may request correction of inaccurate or incomplete personal data
• Right to Erasure: You may request deletion of your personal data in certain circumstances
• Right to Restrict Processing: You may request that we limit how we use your data
• Right to Data Portability: You may request your data in a structured, commonly used, machine-readable format
• Right to Object: You may object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us using the details provided in Section 11 below. We will respond to your request within 30 days.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS protocols
• Regular security assessments and vulnerability testing
• Access controls limiting data access to authorised personnel only
• Secure storage practices aligned with industry standards
• Regular staff training on data protection and security awareness

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to maintaining the highest practical standards.

9. International Data Transfers

Your personal data is primarily stored and processed within the United Kingdom and the European Economic Area. If we need to transfer your data outside these regions, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the Information Commissioner's Office (ICO), or that the receiving country has been deemed to provide an adequate level of data protection.

10. Children's Privacy

Our website and services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately, and we will take steps to remove that information from our systems.

11. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

• Address: Kingly Court, Carnaby St, London, W1B 5PW, United Kingdom
• Phone: +44 20 3362 3366
• Email: reach-us@thryxelleinrozer.world

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated. The ICO can be contacted through their official website or by phone.

12. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your information. Continued use of our website after any changes constitutes acceptance of the updated policy.