Privacy policy
Privacy Policy
This policy describes how druxen handles personal data, the legal bases for processing, service-provider disclosures, international transfers, retention, security, and individual rights under applicable privacy law.
Introduction
This Privacy Policy explains how druxen collects, uses, stores, shares, and protects personal data when you browse the website, create an account, place an order, request customer service, or otherwise interact with our online store. It is intended to provide transparent information for customers and visitors, including individuals protected by the General Data Protection Regulation (âGDPRâ). This policy should be read together with any cookie notice or transaction-specific information displayed at the point where data is collected.
Data Controller
The controller responsible for personal data processed through druxen is Guangzhou Zhongzhe Clothing Co., Ltd., Room 502, No. 8 Xingfu Road, Ningxi Subdistrict, Zengcheng District, Guangzhou, 511358, China. The controller determines the purposes and essential means of processing described in this policy. Privacy questions or rights requests may be submitted through the Contact Page at /contactus; please identify the request as a privacy matter.
Data We Collect
We may collect access data such as IP address, device type, browser information, approximate location derived from technical data, pages viewed, referral source, and server-log events. We may also process account data, contact data, order and invoice data, delivery addresses, product selections, communications, return information, and limited payment-related records such as transaction status or the last digits of a card. Cookie identifiers, preference data, and interaction data may be collected where permitted and, when required, only after consent.
Purposes of Data Processing
Personal data is processed to operate and secure the website, display products, maintain carts and accounts, accept and fulfill orders, arrange delivery, handle returns and refunds, answer questions, prevent fraud, maintain business records, and comply with legal duties. Where permitted, data may also be used to improve website usability, understand service performance, remember preferences, and send marketing communications requested by the customer. We do not use personal data for an incompatible purpose without providing appropriate notice or obtaining consent where required.
Legal Bases Under the GDPR
Where the GDPR applies, processing may rely on Article 6(1)(b) for steps requested before a contract and performance of a sales contract; Article 6(1)(c) for tax, accounting, consumer-law, or other legal obligations; Article 6(1)(f) for legitimate interests such as website security, fraud prevention, service improvement, and the management of customer inquiries; and Article 6(1)(a) where consent is required. Legitimate interests are assessed against the rights and reasonable expectations of affected individuals. Consent can be withdrawn at any time without affecting earlier lawful processing.
Cookies and Similar Technologies
The website may use cookies, local storage, pixels, tags, and comparable technologies. Strictly necessary technologies support functions such as security, session continuity, cart operation, checkout, and privacy choices. Analytics, advertising, or personalization technologies will be used only in accordance with applicable law and, where required, after a valid choice has been recorded. Browser settings may block certain technologies, but doing so can reduce website functionality.
Payment and Shipping Service Providers
Payment data needed to authorize a transaction is generally submitted directly to payment processors, acquiring banks, card networks, or fraud-prevention providers. druxen does not generally store complete card numbers or security codes. Delivery information is shared with carriers, logistics partners, fulfillment providers, and customs intermediaries to prepare labels, transport parcels, provide tracking, resolve delivery problems, and satisfy cross-border requirements where applicable.
Disclosure to Third Parties
We may disclose personal data to hosting providers, technical service providers, payment and fraud-prevention partners, warehouses, carriers, customer-support providers, professional advisers, insurers, auditors, and public authorities when disclosure is necessary and lawful. Service providers are expected to process data only for defined purposes and under appropriate contractual or legal safeguards. We do not sell personal data as a standalone commercial product.
International Data Transfers
Because the controller and some service providers may operate in different countries, personal data can be transferred outside the European Economic Area or the country where the customer resides. Where the GDPR requires additional safeguards, transfers may rely on an adequacy decision, approved standard contractual clauses, contractual controls, security measures, or another lawful transfer mechanism. The level of legal protection can differ between jurisdictions, and we take reasonable steps to apply protections appropriate to the data and transfer risk.
Data Retention
Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected, including order fulfillment, customer support, dispute management, fraud prevention, and legal compliance. Order, invoice, and transaction records may be retained for the period required by tax, accounting, or commercial law. Account information is generally retained while an account remains active, while technical logs and support records are kept for shorter operational periods unless a security incident or legal claim requires longer retention.
Data Security
We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction. Measures may include encrypted transmission, access controls, authentication, logging, provider reviews, data minimization, and staff or contractor confidentiality obligations. No internet transmission or storage system is completely risk-free, so customers should also protect passwords, devices, and account access.
Rights of Data Subjects
Where the GDPR or similar law applies, you may have the right to request access to personal data, rectification of inaccurate data, erasure, restriction of processing, and data portability in a structured, commonly used, machine-readable format. You may also have the right to object to processing based on legitimate interests and to lodge a complaint with a competent supervisory authority. Rights are subject to legal conditions, exemptions, identity verification, and the rights of other individuals.
Withdrawal of Consent and Right to Object
You may withdraw consent at any time for future processing by changing available privacy settings or contacting us. You may object to direct marketing at any time, and we will stop using personal data for that purpose. For other processing based on legitimate interests, explain the reasons for the objection so we can assess whether compelling lawful grounds or legal-claim needs require continued processing.
Contact
Questions, complaints, or privacy-rights requests may be submitted through the Contact Page at /contactus. To protect personal data, we may ask for information reasonably necessary to confirm identity and locate relevant records. Please do not send complete payment-card details, passwords, or unnecessary sensitive information in a request.
Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in website functions, service providers, legal requirements, or data practices. The revised version will be posted on this page with appropriate notice when a change materially affects how personal data is handled. Continued use of the website after publication does not replace consent where consent is legally required.
Privacy Contact
Use our Contact Page for privacy questions or to exercise a data-protection right. Clearly state that the request concerns privacy and describe the right you wish to exercise.
Contact druxen