At Cravelynx LLC, operating at https://cravelynx.com, we are deeply committed to protecting your privacy and handling your personal data with the utmost transparency and care. While Cravelynx LLC is based in the United States, we recognize the importance of global data protection standards, including the General Data Protection Regulation (GDPR), especially for our customers located in the European Economic Area (EEA) and the UK. This statement outlines our commitment to GDPR principles in how we collect, process, and protect your personal data.

What is GDPR? 

The General Data Protection Regulation (GDPR) is a comprehensive data privacy law in the European Union and European Economic Area (EEA) that grants individuals more control over their personal data. It requires businesses to protect personal data and privacy, ensuring data is collected and used lawfully, fairly, and transparently.

Our Commitment to Your Privacy: 

Cravelynx LLC adheres to the following core GDPR principles:

  1. Lawfulness, Fairness, and Transparency: We process personal data lawfully, fairly, and in a transparent manner. We will always inform you about the data we collect and how we use it.
  2. Purpose Limitation: We collect your personal data for specified, explicit, and legitimate purposes (such as processing your orders, providing customer support, or sending marketing communications if you've opted in) and do not process it further in a manner that is incompatible with those purposes.
  3. Data Minimization: We collect only the personal data that is necessary for the purposes for which it is processed. This typically includes information like your name, shipping address, email, and payment details required for transactions.
  4. Accuracy: We strive to keep your personal data accurate and up-to-date. If you believe any of your information is incorrect, please contact us.
  5. Storage Limitation: We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law.
  6. Integrity and Confidentiality: We implement appropriate technical and organizational measures to ensure the security of your personal data, protecting it against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

Types of Data We Collect: 

When you visit https://cravelynx.com or make a purchase, we may collect:

  • Contact Information: Your name, email address, phone number, shipping, and billing address (used for order fulfillment and customer service).
  • Transaction Information: Details about your purchases (payment information is processed securely by third-party payment processors like Stripe and PayPal; Cravelynx LLC does not directly store sensitive payment card details).
  • Website Usage Data: Information about how you interact with our website, collected via cookies and similar technologies (e.g., IP address, browser type, pages visited). This helps us improve our website and your shopping experience.

How We Use Your Data (Lawful Basis): 

We process your personal data based on several lawful grounds:

  • Contractual Necessity: To fulfill orders you place (e.g., processing payments, shipping products).
  • Legitimate Interests: To operate and improve our business (e.g., website analytics, fraud prevention, customer service).
  • Consent: For specific purposes like sending marketing emails, which you can opt-out of at any time.
  • Legal Obligation: To comply with applicable laws and regulations.

Your Data Protection Rights (GDPR Rights): 

If you are located in the EEA or UK, you have the following rights regarding your personal data:

  • Right to Access: You have the right to request copies of your personal data.
  • Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
  • Right to Erasure (Right to be Forgotten): You have the right to request that we erase your personal data, under certain conditions.
  • Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
  • Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
  • Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
  • Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing before its withdrawal.

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month.

Data Security: 

Cravelynx LLC implements robust security measures, including encryption, firewalls, and secure server environments, to protect your personal data from unauthorized access, alteration, disclosure, or destruction. We regularly review our security practices to ensure your data remains safe.

Third-Party Data Sharing: 

We may share your personal data with trusted third-party service providers who assist us in operating our website, conducting our business, or serving our users, as long as those parties agree to keep this information confidential and comply with data protection regulations. These include:

  • Payment Processors: Stripe, PayPal, to securely handle your transactions.
  • Shipping Carriers: To deliver your orders.
  • Analytics Providers: To understand website usage and improve our services.
  • E-commerce Platform: WooCommerce, which hosts our online store.

We ensure that all third parties we work with have adequate data protection policies in place.

International Data Transfers: 

As Cravelynx LLC is based in the United States at 3090 Helmsdale Pl Suite 340, Lexington, KY 40509, United States, any personal data collected is primarily stored and processed on servers located in the US. While we do not ship internationally, we may process personal data of individuals located in the EEA or UK if they interact with our website. In such cases, we strive to ensure that appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

Contact Us: 

If you have any questions about this GDPR Compliance Statement, your personal data, or wish to exercise your data protection rights, please contact Cravelynx LLC:

Updates to This Statement: 

We may update this GDPR Compliance Statement from time to time to reflect changes in our practices or for legal or regulatory reasons. We encourage you to review this page periodically for the latest information on our privacy practices.