Privacy Policy

Last Updated: 21/07/2026

This Privacy Policy explains how the personal data of users and customers of the BALAXX website is collected, used, stored, and protected.

It applies to the website https://balaxx.com as well as to the services and orders offered through the Site.

This Policy is established in accordance with applicable personal data protection regulations, particularly Regulation (EU) 2016/679 of 27 April 2016 ("GDPR"), where applicable.

1. Data Controller

The data controller for personal data is:

Ovado LLC
Company incorporated in the United States
Address: 30 N Gould St Ste N, Sheridan, WY 82801, USA

Email: contact@balaxx.com

Ovado LLC determines, depending on the processing concerned, the purposes and means of processing personal data collected within the scope of the Site and its activities.

When certain processing operations are carried out by service providers acting on behalf of Ovado LLC, these may act as sub-processors or independent service providers depending on the nature of their services and the applicable conditions.

2. Personal Data That May Be Collected

Depending on the use of the Site and the services utilized, the data that may be collected may include, but is not limited to:

Identification and Contact Data
  • first name and last name;
  • email address;
  • phone number;
  • delivery address;
  • billing address, when necessary.
Order-Related Data
  • products ordered;
  • order number;
  • order amount;
  • delivery information;
  • order history;
  • exchanges with customer service.
Payment-Related Data

Bank and payment data are generally processed directly by the payment service providers used during the transaction.

Unless specifically required by legal or technical necessity, BALAXX does not retain full credit card details.

Payment data is processed in accordance with the security measures and applicable rules of the relevant payment service provider.

Technical Data

When browsing the Site, certain technical data may be collected, including:

  • IP address;
  • device type;
  • operating system;
  • browser type;
  • pages viewed;
  • date and time of connection;
  • data related to Site usage.

This data may be collected through cookies or similar technologies, in accordance with the applicable Cookie Policy.

3. Purposes of Processing

Personal data may be processed for the following purposes:

  • managing orders;
  • processing payments;
  • organizing Product delivery;
  • providing customer service;
  • processing return, refund, and warranty requests;
  • managing customer accounts when an account is offered;
  • ensuring Site security;
  • preventing and detecting fraud;
  • complying with legal and regulatory obligations;
  • improving the Site's operation and user experience;
  • measuring Site audience and performance where legally permitted;
  • sending commercial communications when applicable legal conditions are met.

Data is not used for purposes incompatible with those for which it was collected, unless authorized or required by law.

4. Legal Bases for Processing

Depending on the purpose, processing may be based on:

Contract Performance

When processing is necessary to process an order, make a delivery, manage a payment, or fulfill contractual obligations to the Customer.

Compliance with a Legal Obligation

When processing is necessary to comply with an applicable legal or regulatory obligation.

Legitimate Interest

When processing is necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subjects do not override such interests.

This may include Site security, fraud prevention, or certain service management and improvement operations.

Consent

When the law requires consent, particularly for certain cookies, tracking technologies, or commercial communications.

When processing is based on consent, the data subject may withdraw it at any time, without affecting the lawfulness of processing carried out before its withdrawal.

5. Data Recipients

Personal data may be accessible, to the extent necessary for their functions, to the following categories of recipients:

  • Ovado LLC and authorized persons to process the data;
  • technical and hosting providers;
  • payment providers;
  • logistics and delivery providers;
  • customer service providers;
  • analytics and audience measurement providers, when their use is legally authorized;
  • professional advisors, when necessary;
  • administrative, judicial, or regulatory authorities when required by law.

Service providers who process data on behalf of Ovado LLC are selected and supervised in accordance with applicable data protection requirements.

6. Data Transfers Outside the European Economic Area

Certain service providers used in the operation of the Site may be established outside the European Economic Area.

When personal data is transferred to a country outside the EEA, the transfer is carried out in accordance with GDPR requirements and legally established mechanisms.

Depending on the case, the transfer may be based on:

  • an adequacy decision by the European Commission;
  • standard contractual clauses adopted by the European Commission;
  • appropriate safeguards provided by applicable regulations;
  • or another legal basis authorized by the GDPR.

Information regarding the relevant service providers and applicable transfer mechanisms may be specified or updated based on the services actually used on the Site.

7. Retention Period

Personal data is kept for a period not exceeding what is necessary for the purposes for which it is processed, subject to legal retention obligations.

Retention periods may depend on:

  • the time required to fulfill the order;
  • accounting and tax obligations;
  • legal deadlines applicable to claims and disputes;
  • the time required to manage a customer service request or warranty;
  • the consent of the data subject when it constitutes the legal basis for processing.

Upon expiration of the applicable periods, the data is deleted, anonymized, or archived when permitted or required by law.

8. Data Subject Rights

Subject to the conditions and limitations provided by applicable regulations, any data subject may exercise the following rights:

  • right to access their personal data;
  • right to rectification of inaccurate or incomplete data;
  • right to erasure;
  • right to restriction of processing;
  • right to object;
  • right to data portability when legal conditions are met;
  • right to withdraw consent when processing is based on it.

Certain requests may be subject to the conditions and exceptions provided by law.

9. Exercising Rights

Any request relating to rights regarding personal data can be sent to the following contact details:

Email: contact@balaxx.com

The request must, when necessary, contain sufficient information to allow verification of the applicant's identity and processing of the request.

Ovado LLC processes requests within the timeframes provided by applicable regulations.

10. Complaint to a Supervisory Authority

Any data subject has the right to lodge a complaint with the competent supervisory authority if they believe that the processing of their personal data does not comply with applicable regulations.

For individuals residing in France, the competent authority may be the Commission nationale de l'informatique et des libertés (CNIL), subject to applicable jurisdiction rules.

Individuals residing in another Member State of the European Union may also contact the competent data protection authority in their country, in accordance with applicable rules.

11. Data Security

Ovado LLC implements reasonable and appropriate technical and organizational measures to protect personal data against destruction, loss, alteration, unauthorized disclosure, or access.

However, no transmission or electronic storage system can be guaranteed to be completely secure.

In the event of a personal data breach requiring notification in accordance with applicable regulations, appropriate measures are taken in accordance with applicable legal obligations.

12. Cookies and Similar Technologies

The Site may use cookies and similar technologies.

These technologies may be used for purposes including:

  • ensuring the operation of the Site;
  • remembering certain preferences;
  • measuring audience;
  • improving services;
  • carrying out certain advertising or measurement operations, when legally authorized.

When consent is required, the cookies concerned are only placed after obtaining the user's consent.

Users can manage their preferences under the conditions provided by the cookie management mechanism available on the Site.

Detailed information relating to cookies is presented in the Cookie Policy.

13. Commercial Communications

When required by applicable regulations, electronic commercial communications are sent only after obtaining the data subject's consent or on another authorized legal basis.

The data subject can unsubscribe from commercial communications at any time by using the unsubscribe link present in the communications or by contacting the service indicated for this purpose.

The withdrawal of consent or unsubscribing from commercial communications does not prevent the sending of communications necessary for the execution of an order or the management of a contractual relationship.

14. Minors

The Site is not intended to voluntarily collect personal data from minors when the law requires the consent of a parental authority holder and such consent has not been obtained.

If an individual believes that personal data of a minor has been collected inappropriately, they can contact the data controller at the contact details indicated in this Policy.

15. Changes to this Policy

This Privacy Policy may be updated to reflect legal, regulatory, or technical developments, or changes to the services offered by the Site.

The applicable version is the one published on the Site on the date of its consultation, subject to the rules applicable to processing already carried out.

In the event of a substantial modification requiring specific information or new consent, appropriate measures are implemented in accordance with applicable regulations.

Last updated: 21/07/2026