Lyxenta — Privacy Policy

1. Scope

This Privacy Policy describes how Lyxenta and its affiliates collect, use, disclose, and safeguard personal data when you visit our website (https://lyxenta.com), use our services, or otherwise interact with us (collectively, the "Services"). This Policy applies to all users of our Services worldwide.

2. Information We Collect

We collect information directly from you, automatically through your use of the Services, and from third parties. Categories of information include:

1. Account Information: name, email, username, password (hashed), account settings and subscription details provided when you create an Account.
2. Contact and Transaction Information: billing address, payment method details (processed by third-party processors), transaction history and purchase receipts.
3. Profile Content & User Content: content you provide while using the Services, including text, images, files and messages.
4. Usage Data: information about how you use the Services, pages viewed, features used, search queries, IP address, device and browser information, and session duration.
5. Cookies and Tracking: information collected by cookies and similar technologies as described in the "Cookies & Tracking" section below.
6. Third-Party Data: information we obtain from third-party service providers, social networks, or publicly available sources in accordance with applicable law.

3. How We Use Information

We use personal data for purposes including, but not limited to:

• Providing, maintaining, and improving the Services;
• Processing transactions and sending related information, including confirmations and invoices;
• Personalizing and customizing user experiences;
• Communicating with you including support, updates, security alerts, and marketing (where permitted);
• Protecting the security and integrity of our Services;
• Complying with legal obligations;
• Detecting, preventing and responding to fraud, abuse, or security incidents.

4. Legal Bases for Processing (for EU residents)

If you are in the European Economic Area (EEA), we rely on one or more of the following legal grounds to process your personal data:

1. Performance of a contract (e.g., to provide the Services you requested).
2. Legal compliance (e.g., to comply with applicable laws).
3. Legitimate interests (e.g., to operate and improve our Services, prevent fraud) balanced against your rights.
4. Consent (where we ask for your consent, such as for marketing communications or certain cookies).

5. Sharing & Disclosure

We may share your information with third parties in the following circumstances:

• Service providers: vendors and partners who perform services on our behalf such as payment processors, cloud hosting providers, analytics vendors, and customer support platforms.
• Business transfers: in connection with a merger, acquisition, reorganization, sale of assets, or other corporate transaction, we may transfer personal data to the acquiring entity.
• Legal requests: when required by law, court order, or governmental authorities, or to respond to legal process and enforce our rights.
• With your consent: when you expressly permit a disclosure.

We do not sell personal data to third parties. If that changes, we will update this Policy and provide required notices.

6. Cookies & Tracking

We and our partners use cookies and similar technologies to collect information about your interactions with the Services and devices. Cookies help us remember preferences, authenticate users, provide analytics, and deliver personalized content and advertising where allowed.

You can manage cookie preferences through your browser settings, and some browsers provide a "do not track" option, though the Services may not fully honor browser-level "do not track" signals. If you disable cookies, some features of the Services may not function properly.

Types of cookies we may use include:

• Strictly necessary cookies: required for basic site functionality.
• Performance / Analytics cookies: collect anonymous usage statistics to help us improve the Services.
• Functionality cookies: remember user preferences and settings.
• Advertising cookies: used by third parties to deliver targeted advertising based on your online activity.

7. Your Rights

Subject to applicable law, you may have certain rights regarding your personal data, including the rights to:

1. Access and obtain a copy of the personal data we hold about you.
2. Request correction of inaccurate personal data.
3. Request deletion of your personal data ("right to be forgotten").
4. Restrict or object to our processing of your personal data.
5. Request data portability where applicable.
6. Withdraw consent where processing is based on consent.

To exercise these rights, please contact us using the contact details below. We may require verification of your identity before processing requests.

8. Data Retention

We retain personal data for as long as necessary to provide the Services, fulfill legal obligations, resolve disputes, enforce our agreements, and for legitimate business purposes. When determining retention periods we consider the nature of the data, the purposes for processing, legal requirements, and industry best practices.

9. Data Security

We employ reasonable administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, disclosure, alteration, and destruction. However, no security system is impenetrable and we cannot guarantee absolute security.

If we discover a security breach that affects personal data, we will notify affected individuals and regulators as required by applicable law.

10. Children's Privacy

The Services are not directed to children under the age of 13. We do not knowingly collect personal data from children under 13 without parental consent. If you believe we have collected information from a child under 13, please contact us and we will take steps to delete such information.

11. International Transfers

We may transfer personal data to countries other than the country in which the data was originally collected, including to the United States. Where required by law, we will implement safeguards to protect transferred personal data, such as standard contractual clauses or other approved mechanisms.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will provide notice via the Services or by other means, and update the "Last updated" date at the top of this page. Continued use of the Services after any changes indicates acceptance of the updated Policy.

13. Contact Information

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

How to submit a request

To exercise your rights, please send an email to privacy@lyxenta.com with the subject line "Privacy Request" and include your full name, the email address associated with your account, the nature of your request, and any supporting documentation to verify your identity. We will respond in accordance with applicable law.

Dispute escalation

If you are located in the EEA and believe we have not adequately addressed your request, you have the right to lodge a complaint with your local data protection authority.