Privacy Policy

This privacy policy (“Privacy Policy”) governs how we, Xrock (info@xrock.ae) (“Xrock”, “we”, “our” or “us”) use, collect and store Personal Data we collect or receive to you (“User”, “you”).

COLLECTING PERSONAL INFORMATION

When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Cookies Policy, we refer to any information that can uniquely identify an individual (including the information below) as “Personal Information”. See the list below for more information about what Personal Information we collect and why.

Additionally, Xrock may use your information to comply with applicable legal requirements and Xrock's policies and procedures, and for any other uses with your consent.

We may also combine the information you provide to us over time and we may combine such information with information that is publicly available, collected through cookies and other technologies, and information that we receive from our partners, affiliates and other third parties. We may use that combined information to better provide you the Services and to better provide you personalized content, customized content and advertising.

We value your comments, feedback, testimonials, etc., which help us improve our services and products. By making such submissions to us, you assign your rights in the submissions to us.

DEVICE INFORMATION

Examples of Personal Information collected: version of web browser, time zone, cookie information, what products you view, search terms, and how you interact with the Site.

Purpose of collection: to load the Site accurately for you, and to perform analytics on Site usage to optimize our Site.

Source of collection: Collected automatically when you access our Site using cookies, log files, web beacons, tags, or pixels.

ORDER INFORMATION

Examples of Personal Information collected: name, shipping address, email address, and phone number.

Purpose of collection: to provide products or services to you to fulfill our contract, arrange for shipping, and provide you with invoices and/or order confirmations, communicate with you, screen our orders for potential risk or fraud, and when in line with the preferences you have shared with us, provide you with information relating to our products or services.

Source of collection: collected from you.

Disclosure for a business purpose: shared with Tipple, Stripe, Google, Meta, PayPal, FedEx, UPS, DHL, etc.

CUSTOMER SUPPORT INFORMATION

Examples of Personal Information collected: name, billing address, shipping address, email address, and phone number.

Purpose of collection: to provide customer support.

Source of collection: collected from you.

Disclosure for a business purpose: PayPal, FedEx, UPS, DHL.

MINORS

The Site is not intended for individuals under the age of 18. We do not intentionally collect Personal Information from children. If you are the parent or guardian and believe your child has provided us with Personal Information, please contact us at the address below to request deletion.

SHARING PERSONAL INFORMATION

We share your Personal Information with service providers to help us provide our services and fulfill our contracts with you, as described above. For example:

We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

BEHAVIORAL ADVERTISING

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:

We use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here: https://policies.google.com/privacy?hl=en. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

We share information about your use of the Site, your purchases, and your interaction with our ads on other websites with our advertising partners. We collect and share some of this information directly with our advertising partners, and in some cases through the use of cookies or other similar technologies (which you may consent to, depending on your location).

YOU CAN OPT OUT OF TARGETED ADVERTISING BY:

FACEBOOK - https://www.facebook.com/settings/?tab=ads

GOOGLE - https://www.google.com/settings/ads/anonymous

BING - https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads]

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

USING PERSONAL INFORMATION

We use your personal Information to provide our services to you, which includes: offering products for sale, processing payments, shipping and fulfillment of your order, and keeping you up to date on new products, services, and offers.

LAWFUL BASIS

Pursuant to the General Data Protection Regulation (“GDPR”), if you are a resident of the European Economic Area (“EEA”), we process your personal information under the following lawful bases:

Your consent;

The performance of the contract between you and the Site;

Compliance with our legal obligations;

To protect your vital interests;

To perform a task carried out in the public interest;

For our legitimate interests, which do not override your fundamental rights and freedoms.

RETENTION

When you place an order through the Site, we will retain your Personal Information for our records unless and until you ask us to erase this information.

YOUR RIGHTS

GDPR

If you are a resident of the EEA, you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information below.

CCPA

If you are a resident of California, you have the right to access the Personal Information we hold about you (also known as the ‘Right to Know’), to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information below.

If you would like to designate an authorized agent to submit these requests on your behalf, please contact us at the address below.

COOKIES

A cookie is a small amount of information that’s downloaded to your computer or device when you visit our Site. We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance whether it’s their first time visiting or if they are a frequent visitor.

We use the following cookies to optimize your experience on our Site and to provide our services.

WHAT IS A COOKIE?

Cookies are computer files containing small amounts of information which are downloaded to your computer or mobile device when you visit a website. Cookies can then be sent back to the originating website on each subsequent visit, or to another website that recognizes that cookie. Cookies are widely used in order to make websites work, or to work more efficiently, as well as to provide information to the owners of the site.

Cookies do lots of different jobs, like letting you navigate between pages efficiently, remembering your preferences, and generally improving the user experience. Cookies may tell us, for example, whether you have visited our Site before or whether you are a new visitor.

There are two broad categories of cookies:

First party cookies, served directly by us to your computer or mobile device.

Third party cookies, which are served by a third party on our behalf. We use third party cookies for functionality, performance / analytics, and social media purposes.

Cookies can remain on your computer or mobile device for different periods of time. Some cookies are 'session cookies', meaning that they exist only while your browser is open. These are deleted automatically once you close your browser. Other cookies are 'permanent cookies', meaning that they survive after your browser is closed. They can be used by websites to recognize your computer when you open your browser and browse the Internet again.

We may also use web beacon or other similar cookie technologies. When a visitor accesses our Site, a non-identifiable notice of that visit is generated which may be processed by us or by third parties. These web beacons usually work in conjunction with cookies. If you don't want your cookie information to be associated with your visits to these pages, you can set your browser to turn off cookies as described further below. If you turn off cookies, web beacon and other technologies will still detect your visits to our Site; however, they will not be associated with information otherwise stored in cookies.

HOW DO WE USE COOKIES?

We use cookies to:

track traffic flow and patterns of travel in connection with our Site;

understand the total number of visitors to our sites on an ongoing basis and the types of internet browsers (e.g. Chrome, Firefox, Safari, or Internet Explorer) and operating systems (e.g. Windows or Mac) used by our visitors;

monitor the performance of our Site and to continually improve it; and

customize and enhance your online experience.

We may also use a third party called Google Analytics to gather general information about how people use our website for the purposes of website optimization and analytics. To find out more about Google Analytics' privacy policies, please visit http://www.google.com/policies/privacy/partners/.

We, or our third-party mail service providers, may also include web beacons in e-mail messages to you in order to determine whether messages have been opened and links contained within them have been clicked.

WHAT TYPES OF COOKIES DO WE USE?

The types of cookies used by us and our partners in connection with the Site can be classified into one of three categories, namely 'essential website cookies', 'functionality cookies', and 'analytics and performance cookies'. We've set out some further information about each category, and the purposes of the cookies we and third parties set in the following table.

STRICTLY NECESSARY COOKIES

These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.

PERFORMANCE COOKIES

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.

SOCIAL MEDIA COOKIES

These cookies are set by a range of social media services that we have added to the site to enable you to share our content with your friends and networks. They are capable of tracking your browser across other sites and building up a profile of your interests. This may impact the content and messages you see on other websites you visit. If you do not allow these cookies you may not be able to use or see these sharing tools.

TARGETING COOKIES

These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

FUNCTIONAL COOKIES

These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.

LINKS TO AND INTERACTION WITH THIRD PARTY PRODUCTS

The Website enable you to interact with third party websites, mobile software applications and services that are not owned or controlled by us (each a “Third Party Service”). We are not responsible for the privacy practices or the content of such Third Party Services. Please be aware that Third Party Services may collect Personal Information from you. Accordingly, we encourage you to read the terms and conditions and privacy policy of each Third Party Service that you choose to use or interact with.

SPECIFIC PROVISIONS APPLICABLE UNDER CALIFORNIA PRIVACY LAW

1. This Privacy Policy for California Residents supplements and is expressly made part of the information contained in this Privacy Policy, and applies solely to all visitors, users, and others who reside in the State of California (“consumers” or “you”). We adopt this Privacy Policy to comply with the California Consumer Privacy Act of 2018 ("CCPA"). Any terms defined in the CCPA have the same meaning when used in this Privacy Policy.

2. We, including our Website, collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device. In particular, our websites and agents, have collected the mentioned categories of Personal Information in Section 1 from consumers within the last twelve (12) months.

3. Your Choices. You have certain choices about your Personal Information. Where you have consented to the processing of your Personal Information, you may withdraw that consent at any time and prevent further processing by contacting us as described in this Privacy Policy. Even if you opt out, we may still collect and use non-Personal Information regarding your activities on our services and for other legal purposes as described above. While we cannot guarantee privacy perfection, we will address any issue to the best of our ability as soon as possible. We will process such requests in accordance with applicable laws. To protect your privacy, we will take steps to verify your identity before fulfilling your request.

4. Sale of Personal Information. Disclosure of Personal Information for business purposes. Financial incentives for collection of Personal Information. We do not sell any Personal Information and we do not disclose any Personal Information for any business purpose. Therefore, we have not sold or disclosed consumers’ Personal Information for a business purpose in the preceding 12 months. We do not offer financial incentives for collection of Personal Information.

5. We obtain the mentioned categories of Personal Information the following categories of sources:

Directly from you. For example, from forms you complete or products and services you purchase.

Indirectly from you. For example, from observing your actions on our Website.

From third-party business partners, who provide data services available in the public domain.

6. Questions. If you have further questions with respect the collection, use, disclosure or sale of your personal information, please make your request by contacting us to info@xrock.ae.

7. Marketing emails – opt-out: You may choose not to receive marketing email of this type by sending a single email with the subject "BLOCK" to info@xrock.ae. Please note that the email must come from the email account you wish to block.

8. Marketing SMS – opt-out: You may choose not to receive marketing SMS of this type by replying “STOP” to an SMS message you received or by contacting us at info@xrock.ae and we will process your request within a reasonable time after receipt.

9. Non-Discrimination. If you decide to exercise your rights, you will not receive any discriminatory treatment by us for the exercise of the privacy rights conferred by the CCPA. However, note that some features of our Website, our products and/or our services will not function without your Personal Information. Unless permitted by the CCPA, we will not:

Deny you goods or services.

Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.

Provide you a different level or quality of goods or services.

Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

DATA PROTECTION FOR INDIVIDUALS BASED IN THE EUROPEAN ECONOMIC AREA

If you are a customer or website visitor in the European Economic Area (“EEA”), the following, additional information is relevant to you. (Please do not rely on the below if you are not located in an EEA nation.):

We only process your personal information if you have consented to such processing or, to the extent that it is necessary (i) for the performance of your agreement with us or in order to take steps at your request prior to entering into an agreement with us; (ii) to comply with our legal obligations; or (iii) for the purpose of our legitimate interests, including operating, evaluating and improving our global business. As required under the GDPR, we have carefully balanced our legitimate business interests against your data protection rights. For companies like us that have global business operations, processing customer’s personal information for internal administrative purposes customer relations or direct marketing is typically also considered a legitimate interest under the GDPR.

Your personal information will be hosted in and managed from the European Union, where we is based. The law in Bulgaria may not offer the same level of privacy and data protection as the law in your home country. We will rely on Xrock’s need of your personal information for the performance of our contract with you.

In general we will store your personal information as long as the information is necessary to fulfil the purposes for which we collected it. We are committed to being our customers’ jeweler for life. If you become a customer of Xrock, you may be eligible for many lifetime benefits. If you decide to take advantage of these benefits, we will keep your information until you (or your next of kin) ask us to remove your personal information from our records. Once your personal information has been removed from our records, it will not be possible to warranty, upgrade, clean, repair, or resize any product that you have purchased with us.

You have the right to request access to the personal information that we process about you, to have your personal information corrected or erased, to restrict the processing of your personal information, as well as the right to data portability (certain of these rights are subject to our obligation to verify your identify). To exercise these rights, you should submit a written request using the contact details set out below. If you are not satisfied with the way we handle your request, you can lodge a complaint with the supervisory authority in your home country.

Where we have obtained your consent for the processing of your personal information, you have the right to withdraw your consent at any time. This will not affect the lawfulness of the processing that has happened based on your consent prior to the withdrawal.

You also have the right to object, at any time, to the processing of your personal information which is based on Xrock’s legitimate interests, provided that we may retain your personal information for certain compelling purposes such as legal, auditing, accounting and billing purposes. Where we process your personal information for direct marketing purposes, you have the right to object at any time to such processing, including for profiling purposes to the extent that it is related to direct marketing. If you object to processing for direct marketing purposes, we will no longer process your personal information for such purposes.

DATA PROTECTION FOR INDIVIDUALS BASED IN THE PEOPLE'S REPUBLIC OF CHINA

If you are a customer or website visitor in the People Republic of China (“PRC”), the following, additional information is relevant to you. (Please do not rely on the below if you are not located in the PRC).

Xrock is the personal information processor of your personal information for purposes of the Personal Information Protection Law of the PRC (“PIPL”).

We only process your personal information if (1) you have consented to such processing or, to the extent that (2) it is necessary (i) to enter into and/or perform your agreement with us; (ii) to comply with our legal responsibilities or obligations; (iii) to respond to public health incidents, or to protect in urgency the life, health and property security of the individual; (iv) other applicable circumstances provided by laws and regulations. We will only collect and use your personal information that is necessary to fulfill a particular business function as stated in the previous section to the minimum extent.

We may process some certain sensitive personal information about you (including but not limited to your payment information) and we will inform you of the necessity of processing your sensitive personal information and potential impacts on your rights and interests, and obtain your separate consent before processing such sensitive personal information as required by the PIPL.

Your personal information will be hosted in and managed from the European Union, where Xrock is based. We will implement appropriate safeguards to ensure that your personal information remains protected.

We will only retain your personal information in the period which is reasonably necessary to fulfill the purposes we collected it for, including for the purposes of performing our agreements with you, satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal information for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you. Where the purpose of processing has been achieved, it is impossible to achieve such purpose, or it is no longer necessary to achieve such purpose, we will delete or anonymize such personal information.

We may need to share your personal information with third parties which are located outside of the PRC in order to provide our products and services to you and in some cases may transfer your personal information. We will strictly comply with applicable procedures for the above sharing and transfer (if any) and will obtain your separate consents if it is so required under the PIPL.

You can exercise the following rights in relation to your personal information:

Access your personal information held by us and request a copy of the information.

Request us to update or correct your personal information if it is inaccurate or incomplete.

Request us to delete your personal information if we did not delete your personal information as required under PIPL.

Object or withdraw your consent to our processing of your personal information, if we process your personal information based on your consents.

Request us to transfer your personal information to another personal information processor designated by you, provided that such request complies with the conditions prescribed by competent government authorities of the PRC.

If you wish to exercise any of the rights set out above, please contact us through the method as indicated in the “Contact” section below.

CHANGES

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.

CONTACT

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at info@xrock.ae

Last updated: 02/2024