Your privacy matters to us. This policy explains clearly what data we collect, why we collect it, and how we protect it. We never sell your personal information to third parties.
1Information We Collect
When you shop with XylocoatDB, we collect the following types of information:
- Personal details: Full name, email address, and phone number provided at checkout.
- Shipping information: Delivery address including street, city, state, ZIP code, and country.
- Order data: Products purchased, quantities, prices, order numbers, and transaction history.
- Payment information: We do not store card details. All payments are processed securely by Stripe. We only receive a transaction confirmation and a Stripe session ID.
- Device & browsing data: IP address, browser type, pages visited, and session data — collected automatically for analytics and security purposes.
- Communications: Any messages you send us via email or contact form.
2How We Use Your Information
We use the information we collect for the following purposes:
- Processing and fulfilling your orders, including shipping and delivery.
- Sending order confirmations, shipping updates, and tracking information.
- Responding to your customer support enquiries.
- Preventing fraud and ensuring the security of our platform.
- Improving our website, products, and customer experience.
- Complying with legal obligations and resolving disputes.
We will only send you marketing emails if you explicitly opt in. You can unsubscribe at any time.
3Data Sharing
We do not sell, rent, or trade your personal information. We only share your data in these limited circumstances:
- Stripe: Your payment details are processed directly by Stripe, Inc. Their privacy policy applies to payment data.
- Shipping carriers: Your name and delivery address are shared with our courier partners (e.g., DHL, FedEx, Royal Mail) to fulfil your order.
- Legal requirements: We may disclose information if required by law, court order, or to protect the rights and safety of XylocoatDB or others.
4Cookies
We use cookies and similar technologies to:
- Maintain your shopping cart and wishlist across sessions.
- Remember your preferences and language settings.
- Analyse website traffic and usage patterns to improve our service.
You can disable cookies in your browser settings. Note that disabling cookies may affect the functionality of the cart and checkout process.
5Data Security
We take data security seriously and implement the following measures:
- All connections to our website are encrypted via SSL/TLS (HTTPS).
- Passwords are hashed using industry-standard algorithms — never stored in plain text.
- Payment processing is handled entirely by Stripe with PCI-DSS Level 1 compliance.
- We restrict access to your personal data to authorised personnel only.
While we take all reasonable precautions, no method of internet transmission is 100% secure. If you suspect any unauthorised use of your account, please contact us immediately.
6Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Ask us to correct inaccurate or incomplete data.
- Deletion: Request deletion of your personal data ("right to be forgotten").
- Portability: Request your data in a portable, machine-readable format.
- Objection: Object to how we process your data in certain circumstances.
To exercise any of these rights, contact us at xylocoatss@gmail.com. We will respond within 30 days.
7Third-Party Services
Our website uses third-party services that may collect data independently:
- Stripe: Payment processing — stripe.com/privacy
- Google Fonts: Typography — loaded from Google's servers.
We are not responsible for the privacy practices of these third parties.
8Children's Privacy
XylocoatDB is not directed at children under the age of 16. We do not knowingly collect personal information from anyone under 16. If you believe we have inadvertently collected such information, please contact us immediately.
9Policy Changes
We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.
Continued use of our website after changes are posted constitutes your acceptance of the updated policy.
