Privacy Policy

LUXE XCLUSIVE ("we", "us") respects your privacy. This policy explains what we collect, how we use it, and the choices you have. We operate under the Australian Privacy Principles set out in the Privacy Act 1988 (Cth).

1. What we collect

When you visit or buy from luxeglobal.store we may collect:

• Account information — name, email, password (hashed)
• Order information — shipping address, items purchased, order history
• Payment information — handled directly by Stripe, PayPal or your Bitcoin wallet; we never see or store your full card number
• Usage data — pages viewed, products clicked, device + browser type, IP address
• Cookies & pixels — small files that remember your cart, your session, and let advertising platforms measure performance

2. How we use it

• To process orders and deliver products
• To send transactional emails (order confirmation, shipping notifications, abandoned cart reminders)
• To provide and improve customer support
• To detect and prevent fraud
• To measure and optimise advertising via Meta, TikTok, and Google pixels
• To comply with legal obligations (tax, consumer law)

3. Third-party services we use

• Stripe — payment processing (PCI-DSS compliant)
• PayPal — payment processing
• MongoDB Atlas — secure database hosting
• Resend — transactional email delivery
• Meta (Facebook / Instagram), TikTok, Google — advertising pixels and analytics
• AliExpress & international logistics partners — fulfillment and shipping

Each of these providers has its own privacy policy. We share only the minimum data needed for the service to function (e.g. your shipping address with the logistics partner).

4. Cookies & tracking

We use first-party cookies to keep you logged in and remember your cart. We use third-party pixels (Meta, TikTok, Google) to understand which ads brought you to our store and to show you relevant ads on those platforms.

You can opt out of advertising cookies via your browser settings or via each platform's preference centre (e.g. facebook.com/ads/preferences).

5. How long we keep your data

• Account data: until you request deletion
• Order data: 7 years (Australian tax law requirement)
• Marketing analytics: 24 months by default

6. Your rights

Under the Australian Privacy Principles you can:

• Ask for a copy of the personal information we hold about you
• Correct any inaccurate information
• Request deletion of your account and associated personal data
• Withdraw consent for marketing emails (every email has an unsubscribe link)
• Complain to us — or to the Office of the Australian Information Commissioner at oaic.gov.au

To exercise any of these rights, email privacy@luxeglobal.store. We respond within 30 days.

7. Security

We use TLS encryption for all data in transit, hashed passwords, JWT-based session tokens, and processor-managed payment fields. No system is 100% secure, but we maintain industry-standard safeguards. If a breach occurs, we will notify affected users without undue delay.

8. Children

Our store is intended for adults. We do not knowingly collect data from children under 16. If we discover such data, we will delete it.

9. International transfers

Some of our service providers operate outside Australia (e.g. Stripe in the US, AliExpress logistics in China). When data is transferred internationally, we ensure the recipient is bound by privacy standards comparable to the Australian Privacy Principles.

10. EU / UK customers — GDPR & UK GDPR

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018:

• Right of access — request a copy of all personal data we hold about you
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure ("right to be forgotten") — request deletion of your data
• Right to restriction — limit how we use your data
• Right to data portability — receive your data in a machine-readable format
• Right to object — opt out of processing based on legitimate interests or for direct marketing
• Right to withdraw consent — at any time, without affecting prior lawful processing
• Right to lodge a complaint — with your local supervisory authority (e.g. the UK ICO at ico.org.uk, or your national EU DPA)

Legal basis for processing: contract (to fulfil your orders), legitimate interests (to improve our store and prevent fraud), and consent (for marketing emails and advertising pixels — withdrawable at any time).

Data transfers outside the EEA rely on Standard Contractual Clauses or adequacy decisions where applicable.

To exercise any GDPR right, email privacy@luxeglobal.store. We respond within 30 days.

11. California residents — CCPA / CPRA

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) give you the following rights:

• Right to know — what personal information we collect, use, disclose, or share about you
• Right to delete — request deletion of your personal information
• Right to correct — request correction of inaccurate personal information
• Right to opt out of "sale" or "sharing" — described below
• Right to limit use of sensitive personal information
• Right to non-discrimination — we will not deny you service, charge different prices, or provide a lower quality of service for exercising any of these rights

Do Not Sell or Share My Personal Information

We do not sell your personal information for money. We do "share" certain identifiers and behavioural data with advertising partners (Meta, TikTok, Google) for cross-context behavioural advertising — this qualifies as "sharing" under CPRA.

You may opt out at any time by emailing privacy@luxeglobal.store with the subject "Do Not Sell or Share My Info", or by enabling the Global Privacy Control (GPC) signal in your browser — we honour GPC by automatically restricting advertising cookies and pixels for your session.

To submit a verifiable consumer request under CCPA, email privacy@luxeglobal.store. We respond within 45 days. You may also designate an authorised agent.

12. Updates

We may update this policy at any time. The "Last updated" date above will change accordingly. We recommend reviewing it periodically.

13. Contact

For privacy questions, email privacy@luxeglobal.store.