Privacy Policy

At Xorila, we understand that your privacy is extremely important. This Privacy Policy describes in detail how we collect, use, store, and protect your personal information when you use our services.

Section 1 - Collection of personal data

1.1 Log files

When you visit Xorila for informational purposes but don't register with us, create an account, order something, or otherwise deliberately transfer information to us, we collect information from your browser to help us serve our websites to you.

What we collect:

• IP address
• date and time of the request
• time zone difference to Greenwich Mean Time (GMT)
• name of the requested file
• access status/HTTP status code
• volume of data transferred
• the page from which you came to visit us
• your operating system and its interface
• your browser type, language, and version of the browser software.

The data is technically necessary for us to display our website to you. It is also evaluated to make the website user-friendly and to ensure stability and security.

1.2 Cookies

We also use "cookies" on our sites. Cookies (also called web cookies, Internet cookies, browser cookies, or simply cookies) are small blocks of data created by a web server while a user is browsing a website and placed on the user's computer or other devices by the user's web browser. Cookies are placed on the device used to access a website, and more than one cookie may be placed on a user's device during a session.

Cookies serve useful and sometimes essential functions on the web. They enable web servers to store stateful information (such as items added to the shopping cart in an online store) on the user's device or to track the user's browsing activity (including clicking particular buttons, logging in, or recording which pages were visited in the past). This helps us to make our website more user-friendly and effective overall. The legal bases for this are your consent and our legitimate interests.

We use session cookies, persistent cookies, and third-party cookies.

A session cookie (also known as an in-memory cookie, transient cookie or non-persistent cookie) exists only in temporary memory while the user navigates a website. Session cookies expire or are deleted when the user closes the web browser. Session cookies are identified by the browser by the absence of an expiration date assigned to them. For example, this lets you store certain information you have entered (such as log-in information, and language settings) in such a way that you do not have to repeat it constantly.

A persistent cookie expires at a specific date or after a specific length of time. For the persistent cookie's lifespan set by its creator, its information will be transmitted to the server every time the user visits the website that it belongs to, or every time the user views a resource belonging to that website from another website (such as an advertisement)

When you visit our website, our partner companies also store third-party cookies on your device. The cookies contain information about how our website is used, e.g. which pages and products were visited. The data is collected in a pseudonymized form by assigning an identification number, which is not combined with any other personal data you may have provided to us.

You can delete cookies in your browser settings at any time or prevent them from being stored, although the latter may result in a restriction of the functionality of our website for you. In the relevant sections of this Privacy Policy, we explain which technologies that are comparable to cookies are used on our website and how you can object to the use of cookies and other technologies with individual third-party providers.

Section 2 – What do we do with your information?

When you purchase something from our store, as part of the buying and selling process, we collect the personal information you give us such as your name, address and email address.
When you browse our store, we also automatically receive your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system.
Email marketing: We may send you emails about our store, new products and other updates if you have purchased a product from us or signed up to our newsletter.

Section 3 – Consent

How do you get my consent?
When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.
If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.

How do I withdraw my consent?
If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at anytime, by contacting us at [email protected].

Section 4 – Disclosure 

We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service.

Payment:
If you choose a direct payment gateway to complete your purchase, then we store your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.
All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover.
PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

Section 5 – Third-party services

In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.
However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.
For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
In particular, remember that certain providers may be located in or have facilities that are located a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s Terms of Service.

Section 6 - Security

We use reasonable measures to secure our website and any private information you submit to us against loss, tampering, unauthorized access, and other malicious acts. For example, we use SSL connections when possible to protect your data while it is in transit (for example login data and customer orders). However, no data transmission over the Internet is completely secure, so we cannot completely guarantee the security of any data. You use our services at your own risk, and are responsible for taking reasonable measures to secure your password, information, and account

Section 7 -  Processing of data for web analytics

7.1 Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google LLC ("Google"). Google uses cookies (see Section 1.2), which enable an analysis of your use of our website. The information generated by the cookie about usage is usually transferred to a Google server and stored there. However, due to the activation of IP anonymization on our website, where applicable, your IP address will first be shortened by Google. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website and internet use.

The IP address transmitted by your browser in the context of Google Analytics will not be combined with other data held by Google.

You can prevent the storage of cookies by selecting the appropriate settings in your browser software; however, please note that if you do this you may not be able to use the full functionality of our website. You can also prevent the data generated by the cookie and relating to your use of the website (including your IP address) from being recorded and processed by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout/.

This website uses Google Analytics with the "_anonymizeIp()" extension. Consequently, IP addresses are further processed in shortened form, so that any personal association with the data subject can be ruled out. As far as the data collected about you relates to you personally, that association is therefore ruled out immediately and the personal data thus erased without delay.

We use Google Analytics to analyze and regularly improve the use of our website. The statistics this yields allow us to improve our website and make it more interesting for you as a user. The legal bases for our use of Google Analytics are your consent and our legitimate interests.

Third-party provider information: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. See also the terms of use (https://www.google.com/analytics/terms/us.html) and privacy overview (https://support.google.com/analytics/answer/6004245 ) for Google Analytics as well as Google's privacy policy: https://policies.google.com/privacy.

7.2 Hotjar

Our website also uses the web analytics service Hotjar from Hotjar Ltd. This service allows us to track movements on our website (so-called heat maps). These make it possible to see how much time you spend on which pages, how far you scroll, the movement of your mouse and how often you click on certain links and buttons. Your keystroke data, i.e. your entries in input fields, are not recorded. Hotjar uses cookies (see point 2.1 b) to collect this information about your behavior, as well as the following information about your device: IP address of the device (only collected and stored in an abbreviated, anonymized form), screen size, device type (unique device identifiers), browser used, geographic location (country only) and language preferred when viewing the online offer. Hotjar Ltd. stores the information on servers in Ireland for 365 days, after which the data is deleted. Neither Hotjar Ltd. nor we will merge or associate the information with any other data about you, and it will not be used to identify individual users. The data collected by Hotjar Ltd. is only used for our internal evaluation of the user behavior when interacting with our online offer. It is used to improve aspects of user-friendliness of our website. To the extent that you have given us your consent, the legal basis for processing is your consent, and otherwise the legal basis is our legitimate interests.

You can prevent the storage of cookies by selecting the appropriate settings in your browser software; however, please note that if you do this you may not be able to use the full functionality of our website. This will place an opt-out cookie which prevents recording when you visit our website in future. Please note that if you delete all cookies on your device, this opt-out cookie will also be deleted; in this case, if you still wish to object then you must place the cookie again using the above button. The opt-out cookie is set per top-level domain, per browser and device, and only prevents the recording of data for this website. How to prevent collection on other websites is explained on the respective site and here: https://www.hotjar.com/privacy/do-not-track/.

Third Party Information: Hotjar Ltd, Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ, Malta. For more information about Hotjar Ltd.'s privacy practices, please see their privacy policy: https://www.hotjar.com/legal/policies/privacy.

Section 8 - Children's online privacy protection

Xorila is not intended or directed at individuals under the age of 13. We do not knowingly collect or keep any information of children under the age of 13. If we discover it, we will delete it as soon as possible.

Section 9 - Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We encourage you to review this policy regularly to stay informed about how we protect your information.  Any modifications or clarifications will be effective immediately upon posting on our website. If we make significant changes to this policy, we will provide a prominent notice on our site, ensuring you are aware of the updated information we collect, how we use it, and under what circumstances we may disclose it. In the event of a merger, acquisition, or sale of our store, your information may be transferred to the new owners. This transfer will only occur to ensure the continued provision of our products and services to you, maintaining the same level of privacy protection as outlined in this policy.