PRIVACY POLICY

At LEGENDIXA, we respect your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR).

This policy explains how we collect, use, and share your personal data, and what rights you have regarding your personal data. Please read this policy carefully before using our products or services.

What personal data do we collect?
We collect personal data that you provide to us when you use our products or services, such as:
Your name, email address, phone number, and other contact details.
Your payment information, such as your credit card number and billing address.
Your preferences, interests, feedback, and reviews.
Your location, device information, browser type, IP address, and other technical data.
Your usage data, such as the pages you visit, the products you buy, the services you use, and the time and duration of your sessions.

We also collect personal data from third parties, such as:
Social media platforms, such as Facebook, Instagram, Pinterest, TikTok, or YouTube, if you choose to link your accounts with us or interact with us on these platforms.
Analytics providers, such as Google Analytics, that help us measure and improve our performance and user experience.
Marketing partners, such as Mailchimp or Hubspot, that help us communicate with you and offer you relevant products or services.
We do not collect any special categories of personal data, such as your race, ethnicity, religion, health, or biometric data.

Why do we collect and use your personal data?
We collect and use your personal data for the following purposes:
To provide you with our products or services that you request or purchase from us.
To communicate with you about your orders, inquiries, feedback, or complaints.
To send you marketing messages and newsletters about our products or services that may interest you, if you have given us your consent or if we have a legitimate interest to do so.
To improve our products or services and user experience by analysing your usage data and feedback.
To comply with our legal obligations and protect our rights and interests.

What is the legal basis for processing your personal data?
We process your personal data based on one or more of the following legal grounds:
Your consent: We ask for your consent before we process your personal data for certain purposes, such as sending you marketing messages or newsletters. You can withdraw your consent at any time by contacting us or by following the unsubscribe link in our emails.
Our contract with you: We process your personal data to fulfil our contractual obligations to you when you purchase or use our products or services.
Our legitimate interests: We process your personal data to pursue our legitimate interests that do not override your rights and interests. For example, we process your personal data to improve our products or services and user experience, to prevent fraud and abuse, and to protect our rights and interests.
Our legal obligations: We process your personal data to comply with our legal obligations under applicable laws and regulations.

Who do we share your personal data with?
We share your personal data with third parties that help us provide our products or services to you. These third parties include:
Our service providers: We share your personal data with our service providers that perform functions on our behalf, such as hosting, payment processing, analytics, marketing, customer support, etc. We only share the minimum amount of personal data necessary for them to perform their services for us. We also require them to protect your personal data in accordance with this policy and applicable laws.
Our affiliates: We share your personal data with our affiliates that are part of the LEGENDIXA group of companies. We only share the personal data that is relevant for them to offer you their products or services that may interest you. We also ensure that they comply with this policy and applicable laws.
Our business partners: We share your personal data with our business partners that offer complementary products or services that may interest you. We only share the personal data that is relevant for them to offer you their products or services. We also obtain your consent before we share your personal data with them. You can opt out of receiving their offers at any time by contacting us or by following the unsubscribe link in their emails.
Other parties: We may share your personal data with other parties in certain circumstances, such as:
When we have a legal obligation or a court order to do so.
When we are involved in a merger, acquisition, sale of assets, or other business transaction that involves the transfer of your personal data.
When we need to protect our rights, interests, property, or safety, or the rights, interests, property, or safety of others.
We do not sell your personal data to any third parties.

How do we protect your personal data?
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, use, disclosure, alteration, or destruction. These measures include:
Encrypting your personal data in transit and at rest.
Using secure servers and firewalls to store your personal data.
Limiting the access to your personal data to our authorised personnel and service providers who need it to perform their services for us.
Training our personnel and service providers on how to handle your personal data securely and confidentially.
Reviewing and updating our security policies and practices regularly.
However, no method of transmission or storage is completely secure. Therefore, we cannot guarantee the absolute security of your personal data. You are also responsible for keeping your account information and password confidential and for notifying us immediately if you suspect any unauthorised access or use of your account.

How long do we keep your personal data?
We keep your personal data for as long as necessary to fulfil the purposes for which we collected it, or as required by applicable laws and regulations. The retention period may vary depending on the type of personal data, the purpose of processing, and the legal obligations that apply to us. When we no longer need your personal data, we will delete it or anonymise it in a secure manner.
What rights do you have regarding your personal data?
You have the following rights regarding your personal data under the GDPR:
The right to access: You have the right to request a copy of the personal data that we hold about you.
The right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data that we hold about you.
The right to erasure: You have the right to request that we delete your personal data when it is no longer necessary for the purposes for which we collected it, or when you withdraw your consent, or when there is no other legal basis for processing it.
The right to restriction: You have the right to request that we limit the processing of your personal data when you contest its accuracy, or when you object to its processing, or when its processing is unlawful, or when we no longer need it but you need it for legal claims.
The right to objection: You have the right to object to the processing of your personal data when it is based on our legitimate interests or for direct marketing purposes.
The right to portability: You have the right to request that we transfer your personal data to another organisation or to you in a structured, commonly used, and machine-readable format, when it is based on your consent or our contract with you and when it is processed by automated means.
The right to withdraw consent: You have the right to withdraw your consent at any time when we process your personal data based on your consent. This will not affect the lawfulness of the processing before you withdrew your consent.
The right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority in the EU member state where you live, work, or where the alleged infringement of the GDPR occurred.
To exercise any of these rights, please contact us using the contact details below. We will respond to your request within one month, unless we need more time due to the complexity or number of requests. We may also ask you to provide proof of your identity before we process your request.

How do we update this policy?
We may update this policy from time to time to reflect changes in our products or services, our practices, or applicable laws and regulations. We will notify you of any material changes by posting a notice on our website or by sending you an email. We encourage you to review this policy periodically to stay informed about how we protect your personal data.

How can you contact us?
If you have any questions or comments about this policy or how we handle your personal data, please contact us using the following contact details:

LEGENDIXA, London, United Kingdom
legendixa@gmail.com