Effective Date: 07/06/2024
Welcome to Luxxacation (“we,” “us,” “our”). This Privacy Policy details our policies regarding the collection, use, and disclosure of personal information we receive from users of our site and the choices you have associated with that information. By using the Service, you agree that you are at least 18 years of age and you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms of Use.
1. Introduction
This Privacy Policy applies to all site visitors, registered users, and all other users of our platform and the information that we collect about you when you use our websites, mobile applications, features, and other products and services, collectively the “Services.”
By using the site, you agree to the collection and use of information in accordance with this policy.
2. Information Collection
Personal Identification Information: We collect information you provide, including, but not limited to, when you register on the site, subscribe to a newsletter, fill out a form, or enter information on our site. This may include names, email addresses, mailing addresses, and phone numbers.
Non-personal Identification Information: We may collect non-personal information about Users whenever they interact with our Site. This may include, but is not limited to, the browser name, the type of computer, and technical information about Users’ means of connection to our Site, such as the operating system and the Internet service providers utilized.
Communications With Us: You may also provide us with information (i.e., when you communicate with our teams or sign up for a newsletter). When you communicate with us via a form, email, phone, or otherwise, we store a copy of our communications (including any call recordings as permitted by applicable law).
Automatically Collected Information:
Log information: We collect some information that web browsers, mobile devices, and servers typically make available (e.g., browser type, IP address, unique device identifiers, etc.).
Usage information: We collect information about your usage of our Services, such as page views, searches on our website, or your device details.
Location information: We may determine the approximate location of your device from your IP address.
Cookies & other related technologies: Cookies and other related technologies help us, for example, to identify and track visitors, usage, and access preferences for our Services. See our Cookie Policy for more details.
Third-party services may also give us information, like mailing addresses for individuals who are not yet our users (but we hope will be!). We may use this information for marketing purposes like postcards and other mailers advertising our Services. We employ third party companies and individuals for Cloud Hosting (Hosting our website and storing your data securely) and Analytics Providers (Measuring how users interact with our website).
Third-Party Plugins: Please see this non-comprehensive list of third-party plugins’ websites for their privacy policy details:
<https://www.cookieyes.com/privacy-policy/>
<https://elementor.com/about/privacy/>
<https://store.brainstormforce.com/privacy-policy/>
<https://wpdeveloper.com/>
<https://www.hcaptcha.com/privacy/>
<https://www.hostinger.com/legal/privacy-policy/>
<https://iplocationblock.com/privacy-policy/>
<https://automattic.com/privacy/>
<https://www.litespeedtech.com/company/privacy-policy>
<https://leap13.com/privacy-policy/>
<https://nextendweb.com/privacy-policy/>
<https://www.wordfence.com/>
<https://www.wpautoterms.com/>
<https://yoast.com/privacy-notice/>
3. Information Use
Some of the purposes that we may use the information we collect include, but are not limited to:
Providing our Services,
Personalizing user experience,
Ensuring quality, maintaining safety, and improving our website,
Marketing our Services, measuring, gauging, and improving the effectiveness of our marketing,
Protecting our Services, our users, and the public,
Fixing problems with our Services,
Communicating with users,
Send periodic emails regarding services.
4. Information Sharing and Disclosure
We never directly sell your personal information in the conventional sense (i.e., for money).
Affiliates and independent contractors: We may disclose information about you to our subsidiaries and independent contractors who need the information to help us provide our Services or process the information on our behalf.
Third-party vendors: We may share information about you with third-party vendors who need the information in order to provide their services to us, or to provide their services to you or your site. This includes vendors that help us provide our Services to you (like cloud storage services, hosting providers, postal and email delivery services that help us stay in touch with you, customer chat and email support services that help us communicate with you, registrars, registries, and those that may assist us with our marketing efforts (e.g., by providing tools for identifying a specific marketing target group or improving our marketing campaigns, and by placing ads to market our services); those that help us understand and enhance our Services (like analytics providers); those that make tools to help us run our operations (like programs that help us with task management, scheduling, word processing, email and other communications, and collaboration among our teams); and other third-party tools that help us manage operations.
Legal Requirements: We disclose information as required by law, when we believe disclosure is necessary to protect our rights, or to comply with a judicial proceeding, court order, or legal process served on our Website.
Business Transfers: In case of a merger, acquisition, or sale of all or a portion of our assets, users’ personal information will likely be among the assets transferred.
To protect rights, property, and others: We may disclose user information if or when we believe in good faith that disclosure is reasonably necessary to protect the property or rights of us, our affiliates, third parties, or the public at large.
With your consent: We may share and disclose information with your consent or at your direction. For example, we may share your information with third parties when you authorize us to do so.
Aggregated or de-identified information: We may share information that has been aggregated or de-identified, so that it can no longer reasonably be used to identify you. For instance, we may publish aggregate statistics about the use of our Services, or share a hashed version of your email address to facilitate customized ad campaigns on other platforms.
Public information: Any information that you choose to make public will be publicly visible.
YOU ARE SOLELY RESPONSIBLE, AND WE WILL NOT BE HELD LIABLE, FOR THE INFORMATION THAT YOU SHARE, AND THAT IS SHARED ON YOUR ACCOUNT, ON OUR SITE OR THROUGH THE SERVICES. WE RESERVE THE RIGHT, BUT NO THE OBLIGATION, IN OUR SOLE DISCRETION, TO MONITOR, EDIT, AND/OR REMOVE ANY INFORMATION THAT YOU SHARE.
5. Compliance With Laws
We will disclose your Personal Information only in response to a subpoena, court order, or other governmental request, or when we believe in good faith that disclosure is reasonably necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
6. User Choices and Rights
Opt-out: Users may opt-out of future emails, change their personal information, or delete their account by contacting us directly.
Limit the information that you provide: If you have an account with us, you may choose not to provide optional account information, profile information, or transaction and billing information. Please keep in mind that if you do not provide this information, certain features of our Services may not be accessible.
Limit access to information on your mobile device: Your device or web browser should have options available that allow you to discontinue our ability to collect stored information or location information (i.e., removal or rejection of browser cookies). If you choose to limit this, you may not be able to use certain features or this may cause certain features to not function properly.
If you are located in certain parts of the world, including some US states and countries that fall under the scope of the European General Data Protection Regulation (aka the “GDPR”), you may have certain rights regarding your personal information, like the right to request access to or deletion of your data.
European General Data Protection Regulation (GDPR)
If you are located in a country that falls under the scope of the GDPR, data protection laws give you certain rights with respect to your personal data, subject to any exemptions provided by the law, including the rights to:
Request access to your personal data;
Request correction or deletion of your personal data;
Object to our use and processing of your personal data;
Request that we limit our use and processing of your personal data; and
Request portability of your personal data.
You also have the right to make a complaint to a government supervisory authority.
US Privacy Laws
Laws in some US states, including California, Colorado, Connecticut, Utah, and Virginia, require us to provide residents with additional information about the categories of personal information we collect and share, where we get that personal information, and how and why we use it. You’ll find that information in this section (if you are a California resident, please note that this is the Notice at Collection we are required to provide you under California law).
In the last 12 months, we collected the following categories of personal information, depending on the Services used:
Identifiers (like your name, contact information, and device and online identifiers);
Commercial information (your billing information and purchase history, for example);
Characteristics protected by law (for example, you might provide your gender as part of a research survey for us);
Internet or other electronic network activity information (such as your usage of our Services);
Geolocation data (such as your location based on your IP address);
Audio, electronic, visual or similar information (such as your profile picture, if you uploaded one);
Professional or employment-related information (for example, your company information); and
Inferences we make (such as likelihood of retention or attrition).
In some US states you have additional rights subject to any exemptions provided by your state’s respective law, including the right to:
Request a copy of the specific pieces of information we collect about you and, if you’re in California, to know the categories of personal information we collect, the categories of business or commercial purpose for collecting and using it, the categories of sources from which the information came, and the categories of third parties we share it with;
Request deletion of personal information we collect or maintain;
Request correction of personal information we collect or maintain;
Opt out of the sale or sharing of personal information;
Receive a copy of your information in a readily portable format; and
Not receive discriminatory treatment for exercising your rights.
When you contact us about one of your rights under this section, we will need you to verify that you are the owner of the account in question before we are able to disclose or delete anything. For example, if you are a user, we will need you to contact us from the email address associated with your user account. You may also designate an authorized agent to make a request on your behalf by giving us written authorization. In any event, we reserve the right to still require you to verify your identity with us.
7. Cookies and Tracking Technologies
We use cookies to maintain the continuity of sessions and customize the user experience. If you reject cookies, you may still use our site, but your ability to use some areas of our site will be limited or may not work.
8. Appeals Process for Rights Request Denials
In some circumstances we may deny your request to exercise one of these rights. For example, if we cannot verify that you are the account owner, we may deny your request to access the personal information associated with your request. As another example, if we are legally required to maintain a copy of your personal information we may deny your request to delete your personal information.
In the event that we deny your request, we will communicate this fact to you in writing. You may appeal our decision by responding in writing to our denial email and stating that you would like to appeal. In the event that your appeal is also denied this information will be communicated to you in writing.
If your appeal is denied, in some US states (Colorado, Connecticut, and Virginia) you may refer the denied appeal to the state attorney general if you believe the denial is in conflict with your legal rights. The process for how to do this will be communicated to you in writing at the same time we send you our decision about your appeal.
9. Data Security
We adopt appropriate data collection, storage, and processing practices and security measures to protect against unauthorized access, alteration, disclosure, or destruction of your personal information and data stored on our Site.
While no online service is 100% secure, we work very hard to protect your information against unauthorized access, use, alteration, or destruction, and we take reasonable measures to do so. We constantly monitor our Services for potential vulnerabilities and attacks.
Encryption: Using SSL/TLS to encrypt data sent between your device and our servers.
Data Storage Practices: Implementing secure data storage practices and conducting regular audits.
To enhance the security of your account, we strongly encourage you to enable our advanced security settings, like Two Step Authentication.
10. Data Breach Notification Procedure
Definition of a Data Breach: A data breach occurs when unauthorized access, loss, destruction, theft, or use of personal information that we hold is confirmed. This can involve any kind of personal data, including but not limited to names, email addresses, financial records, and confidential correspondence.
Detection and Reporting: We employ a variety of security measures to detect and prevent unauthorized access to or misuse of personal information. In the event of a data breach, our internal security team will initiate an immediate investigation to verify and assess the breach. All suspected breaches must be reported within 24 hours of discovery to our team.
Assessment and Containment: Upon confirmation of a breach, a rapid assessment will be conducted by our security team in collaboration with IT and legal departments. The goals of this assessment are:
To determine the scope and impact of the breach.
To identify the type of data involved.
To determine the initial cause and implement immediate measures to prevent further unauthorized access or loss.
The containment and mitigation strategies will be tailored to the nature of the breach, focusing on securing data and closing off unauthorized access channels.
Notification Procedures: In accordance with applicable law, we are committed to notifying affected individuals and regulatory bodies without undue delay and, where feasible, not later than 72 hours after having become aware of it. Notifications to data subjects will include:
Description of the nature of the data breach.
The contact details where more information can be obtained.
A description of the likely consequences of the data breach.
A description of the measures proposed or taken by us to address the data breach.
Advice on steps the individual can take to protect themselves from potential harm.
If required by law or regulation, we will also notify data protection authorities of the breach within the timeframe stipulated by applicable data protection law.
Documentation and Record Keeping: All data breaches will be documented in our breach register, including the facts surrounding the breach, its effects, and the remedial action taken. This documentation will be used to report the breach to relevant authorities and stakeholders, as necessary.
Review and Evaluation: After a breach has been dealt with, we will conduct a thorough review of the incident and our response to it. This review aims to improve our data handling and security measures, and to mitigate the risk of future breaches. Recommendations for improvements will be considered and changes implemented where appropriate.
Communication: Throughout the process of managing a data breach, we will maintain clear and open communication with all affected parties. Updates will be provided as more information becomes available and as required by law.
11. International Transfer of Information
We currently operate only in the U.S. but plan to expand to international markets. Information we collect may be stored, processed, and transferred between any of the countries in which we operate to enable us to use the information as described in this privacy policy.
12. Children’s Privacy
Our Service does not address anyone under the age of 18. We do not knowingly collect personally identifiable information from children under 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Information, please contact us.
13. Data Retention
We will retain your information for as long as your account is active or as needed to provide you services, comply with our legal obligations, resolve disputes, and enforce our agreements.
14. Changes to This Privacy Policy
This Privacy Policy is effective as of 05/13/2024 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page. This Privacy Policy may be amended at any point in time at our sole discretion by posting a revised version. Unless stated otherwise, any accessing or using of our Site or continued use of our Services after the effective date of any revised version constitutes your acceptance of that revised version. If we make any material change to this Privacy Policy or any portion therein, our posting of the revised version on our website, a notice on our Site, through the Services, or by other means that we deem appropriate such as an email sent to Your email address that we have on file will serve as adequate notification. If you do not agree to this Privacy Policy, you may not access or use the Site or Services. This Privacy Policy may be translated into other languages and should any conflicts arise between this English version and any translations, the English version shall control.
15. Contact Information
If you have any questions about this Privacy Policy, please contact us through our web form or via email.
You may also contact us at:
Independent Integration Systems Engineering, Inc.
P.O. Box 904
Condon, MT, 59826
Luxxacation, a trademark of Independent Integration Systems Engineering, Inc. dba XSE, a Montana-based non-profit corporation (501(c)(3) tax-exempt status has been granted by the IRS), is committed to transparency and integrity in all of its operations, including its relationships with affiliated for-profit companies. As part of XSE’s mission to encourage and promote strength, integrity, and independence, we collaborate with for-profit entities to help bring our vision to life. These for-profit companies may provide support to XSE. Additionally, XSE may collaborate with for-profit companies on specific projects, initiatives, or events.
Victor & Angela is a dba of Luxauro, a for-profit company affiliated with XSE. While XSE is a non-profit organization, it collaborates with for-profit ventures like Luxauro to further their similar missions and visions. The promotion of Victor & Angela on Luxxacation’s platform is part of a strategic partnership. Luxauro, which operates Victor & Angela, supports XSE’s mission through collaborative initiatives. No compensation is provided for this promotion.
It’s important to note that while XSE and the affiliated for-profit companies share common ownership and similar missions and visions, they operate as separate legal entities with distinct objectives and activities. The affiliation between XSE and the for-profit companies does not imply endorsement or promotion of specific products or services. If you have any questions about our affiliations or partnerships, please don’t hesitate to contact us.
Copyright © | 2024 | Luxxacation | All rights reserved.