Privacy Policy

01 Data Controller

Skyxaronwrshran.world operates as the data controller for all personal data processed through our services. Our registered address and contact details are:

Skyxaronwrshran.world
236 Gray's Inn Rd, London, WC1X 8HB, United Kingdom
Email: admin@skyxaronwrshran.world

For any data protection enquiries, including requests to exercise your rights, please contact us using the details above. We aim to respond to all valid requests within 30 calendar days.

02 Personal Data We Collect

We may collect and process the following categories of personal data, depending on your interactions with our services:

• Identity data: Full name, title, date of birth (where relevant for age verification)
• Contact data: Email address, telephone number, postal address, billing address, delivery address
• Technical data: IP address, browser type and version, operating system, device type, unique device identifiers, time zone setting, language preference
• Usage data: Pages visited, time and date of visits, time spent on pages, navigation paths, click-stream data
• Transaction data: Purchase history, order details, payment method (not card numbers), delivery preferences
• Communication data: Correspondence via email, contact forms, live chat, or postal mail
• Marketing data: Preferences regarding newsletters, promotions, and communications; consent records

We do not collect sensitive personal data (such as health information) unless you voluntarily provide it in a message and we have a lawful basis to process it.

03 Purposes of Processing

We process your personal data for the following specified purposes:

• To process, fulfil, and deliver your orders, including payment processing and shipping
• To communicate with you about your orders, including confirmations, updates, and customer support
• To respond to your enquiries, complaints, and requests
• To send marketing communications where you have given consent
• To improve our website, products, and services through analytics and research
• To ensure security, prevent fraud, and comply with legal obligations
• To manage your cookie preferences and consent records
• To comply with tax, accounting, and regulatory requirements
• To establish, exercise, or defend legal claims

04 Legal Basis for Processing

Under the GDPR, we process your data on the following legal bases:

• Contract performance: Processing necessary to fulfil our contract with you (e.g. order processing, delivery)
• Consent: Where you have given clear, specific consent (e.g. marketing emails, non-essential cookies)
• Legitimate interests: Where processing is necessary for our legitimate business interests, provided your rights do not override them (e.g. fraud prevention, website analytics)
• Legal obligation: Where we must comply with laws (e.g. tax records, regulatory requirements)
• Vital interests: In rare cases, to protect someone's life

Where we rely on consent, you have the right to withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

05 Retention Periods

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our retention periods include but are not limited to:

• Order and transaction data: 7 years from the end of the financial year (for tax and legal compliance)
• Contact form submissions: 2 years from submission, unless a longer period is required for legal claims
• Marketing consent records: Until you withdraw consent, plus a short period for our records
• Cookie and preference data: As specified in our Cookie Policy, typically up to 12 months
• Technical and access logs: 90 days, unless required for security investigations
• Customer support correspondence: 3 years from the resolution of the matter

After the retention period, we securely delete or anonymise your data so it can no longer identify you.

06 Your Rights Under GDPR

Depending on the applicable law, you may have the following rights:

• Right of access: To request a copy of your personal data and information about how we process it
• Right to rectification: To request correction of inaccurate or incomplete data
• Right to erasure: To request deletion of your data in certain circumstances ("right to be forgotten")
• Right to restrict processing: To request that we limit how we use your data in certain situations
• Right to data portability: To receive your data in a structured, machine-readable format and transfer it to another controller
• Right to object: To object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: Where we rely on consent, to withdraw it at any time
• Right to lodge a complaint: To file a complaint with a supervisory authority, including the UK Information Commissioner's Office (ICO)

To exercise any of these rights, please contact us at admin@skyxaronwrshran.world. We will verify your identity before responding. You will not be charged for most requests. We may refuse requests that are manifestly unfounded or excessive.

07 Data Security

We implement robust technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption in transit (TLS/SSL) and at rest where appropriate
• Access controls limiting data access to authorised personnel only
• Regular security reviews and updates
• Secure storage infrastructure and backup procedures
• Staff training on data protection and security

We do not sell your personal data to third parties. We may share data with trusted service providers (e.g. payment processors, delivery partners) who process it on our behalf under strict contractual obligations.

08 International Transfers

Your data is primarily processed within the United Kingdom and the European Economic Area. Where we transfer data to countries outside the UK or EEA, we ensure appropriate safeguards are in place, such as adequacy decisions, Standard Contractual Clauses, or Binding Corporate Rules, as required under GDPR Chapter V.

09 Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. Material changes will be communicated via our website or email where appropriate. We encourage you to review this policy periodically. The "Last updated" date at the top indicates when the policy was last revised.