Your Privacy Matters | Thexrovashak Policy

1. Introduction

Thexrovashak ("we," "us," or "our") operates the website at https://thexrovashak.world. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, how long we retain it, and what rights you have as a data subject under the General Data Protection Regulation (GDPR) and applicable U.S. privacy laws including, where relevant, the California Consumer Privacy Act (CCPA).

By using this website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please discontinue use of the site.

2. Personal Data We Collect

2.1 Data You Provide Directly

When you submit the contact form on our website, we collect the following personal data:

Full name — to address you properly in our response.
Email address — to send you our reply to your inquiry.
Message content — to understand and respond to your inquiry.
GDPR consent record — the date and time of your consent to data processing.

2.2 Data Collected Automatically

When you visit our website, our web server may automatically record the following technical data:

IP address (anonymized where technically possible)
Browser type and version
Operating system
Referring URL
Pages visited and time of visit

This data is collected for the purpose of maintaining the security and proper operation of the website and is not used to identify individual users.

2.3 Cookie Data

We use cookies and similar technologies as described in our Cookie Policy. Your cookie preferences are stored locally in your browser's localStorage and are not transmitted to our servers.

3. Purposes and Legal Bases for Processing

Purpose	Data Used	Legal Basis (GDPR)
Responding to contact form inquiries	Name, email, message	Consent (Art. 6(1)(a)) or Legitimate Interest (Art. 6(1)(f))
Website security and technical operation	Server log data, IP address	Legitimate Interest (Art. 6(1)(f))
Cookie consent management	Consent record stored in browser	Legal Obligation (Art. 6(1)(c))
Compliance with legal obligations	As required by law	Legal Obligation (Art. 6(1)(c))

4. Data Retention

We retain personal data only for as long as necessary for the purposes described above:

Contact form data: Retained for a maximum of 12 months from the date of submission, after which it is permanently deleted unless a longer retention period is required by law.
Server log data: Retained for a maximum of 30 days for security purposes, then automatically deleted.
Cookie consent records: Stored in the user's browser until manually cleared or until the site is re-visited and preferences are updated.

We do not sell, rent, or share your personal data with third parties for commercial purposes. Your data may be accessed by:

Our internal team members — solely for the purpose of responding to your inquiry.
Hosting providers — our web hosting infrastructure processes data as part of normal website operation. We ensure appropriate data processing agreements are in place.
Law enforcement or regulatory authorities — only when required by law or a valid legal order.

We do not transfer personal data outside of the United States except where required by law or where appropriate safeguards under GDPR Chapter V are in place (such as Standard Contractual Clauses).

6. Security Measures

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure. These measures include:

HTTPS encryption for all data in transit
Access controls limiting who can view contact form submissions
Regular review of data security practices

No method of transmission over the internet is completely secure. While we take reasonable precautions, we cannot guarantee absolute security.

7. Your Rights

Under GDPR and applicable law, you have the following rights regarding your personal data:

Right of access (Art. 15 GDPR): Request a copy of the personal data we hold about you.
Right to rectification (Art. 16 GDPR): Request correction of inaccurate data.
Right to erasure (Art. 17 GDPR): Request deletion of your personal data, subject to legal exceptions.
Right to restriction of processing (Art. 18 GDPR): Request that we limit how we process your data.
Right to data portability (Art. 20 GDPR): Receive your data in a structured, machine-readable format.
Right to object (Art. 21 GDPR): Object to processing based on legitimate interest.
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at: clients@thexrovashak.world

We will respond within 30 days. If you are located in the EU/EEA and believe your rights have been violated, you have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

8. Minors

This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through our site, please contact us and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Material changes will be communicated by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

10. Contact

For any questions, requests, or complaints regarding this Privacy Policy or our data handling practices, please contact us:

Thexrovashak

500 W 2nd St, Austin, TX 78701, USA

Phone: +1 512-542-1000

Email: clients@thexrovashak.world