Privacy Policy for XASSION

Effective Date: February 6, 2026

At XASSION, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, share, and protect your data when you visit our website (xassion.com), make purchases, or interact with our services. We operate in compliance with applicable laws, including the General Data Protection Regulation (GDPR) in the EU, the UK Data Protection Act, the California Consumer Privacy Act (CCPA), the Australian Privacy Principles (APP), and the New Zealand Privacy Act.

By using our website or services, you consent to the practices described in this policy. If you have any questions, contact us at [privacy@xassion.com].

1. Information We Collect

We collect information to provide better services, process orders, and improve your experience. The types of information include:

  • Personal Information: Name, email address, shipping/billing address, phone number, and payment details (processed securely via third-party providers like Stripe or PayPal).
  • Account Information: If you create an account, we collect username, password (hashed), and preferences.
  • Usage Data: IP address, browser type, device information, pages visited, time spent, and referral sources (collected via cookies and analytics tools like Google Analytics).
  • Order Data: Details of products purchased (e.g., variants like SENSATION NON-LATEX or SILK ULTRA THIN), order history, and transaction records.
  • Communication Data: Emails, chat messages, or feedback you send us.
  • Marketing Data: If you subscribe to our newsletter, we collect your email for promotional updates.

We do not collect sensitive health data unless voluntarily provided (e.g., allergies for product recommendations).

2. How We Collect Information

  • Directly from You: When you place an order, sign up for newsletters, or contact us.
  • Automatically: Through cookies, web beacons, and tracking technologies. We use essential cookies for site functionality, performance cookies for analytics, and marketing cookies for personalized ads (with your consent where required).
  • From Third Parties: Payment processors, shipping partners (e.g., DHL), or analytics providers.

For EU/UK users, we obtain consent for non-essential cookies via a banner.

3. How We Use Your Information

We use your data for:

  • Processing and fulfilling orders (e.g., shipping discreetly to EU, UK, USA, AUS, NZ).
  • Providing customer support and responding to inquiries.
  • Improving our website, products (e.g., analyzing preferences for variants like GLIDE EXTRA LUBRICATED), and services.
  • Sending marketing emails (with unsubscribe option).
  • Preventing fraud and ensuring security.
  • Complying with legal obligations (e.g., tax reporting).

We do not sell your data to third parties.

4. Sharing Your Information

We share data only when necessary:

  • Service Providers: With trusted partners for payment processing, shipping, email services (e.g., Mailchimp), and analytics. They are bound by confidentiality.
  • Legal Requirements: If required by law, court order, or to protect our rights.
  • Business Transfers: In case of merger, acquisition, or sale of assets.

For international transfers (e.g., from Pakistan to EU), we use Standard Contractual Clauses (SCCs) under GDPR.

5. Your Rights

Depending on your location:

  • Access, Correction, Deletion: Request to see, update, or delete your data.
  • Objection/Withdrawal: Opt-out of marketing or processing (GDPR/CCPA right).
  • Portability: Receive your data in a transferable format (GDPR).
  • Do Not Sell (CCPA): We do not sell data, but you can opt-out if applicable.
  • Complaints: Lodge with authorities like ICO (UK), CNIL (EU), OAIC (AUS), or OPC (NZ).

To exercise rights, email [privacy@xassion.com]. We respond within 30 days (or 1 month under GDPR).

6. Data Security

We use industry-standard measures like SSL encryption, firewalls, and secure servers to protect your data. However, no system is 100% secure, so we cannot guarantee absolute security.

7. Data Retention

We retain data as long as needed for business purposes (e.g., 7 years for tax records) or legal requirements. Inactive accounts may be deleted after 2 years.

8. Children's Privacy

Our services are for adults 18+. We do not knowingly collect data from children under 16 (or 13 in USA). If we discover such data, we delete it.

9. Cookies and Tracking

We use cookies for functionality and analytics. You can manage preferences via browser settings or our cookie banner. For details, see our Cookie Policy.

10. Changes to This Policy

We may update this policy. Changes will be posted here with the updated effective date. Continued use means acceptance.

11. Contact Us

For questions or requests:
Email: privacy@xassion.com