Privacy Policy

Last updated: 15th January 2026

This Privacy Policy describes how oravexantil.top SARL ("we", "our", or "us") collects, uses, and protects your personal information when you visit our website oravexantil.top or use our services.

Data Controller Information

The data controller for your personal information is:

oravexantil.top SARL
Avenue Monterey 93
4337 Differdange
Luxembourg
Registration Number: RCSB854796
VAT Number: LU85362467
Email: [email protected]
Phone: +352 23153005

Data Collection

The data we collect includes personal information you provide directly to us and information automatically collected when you use our website. We collect the following types of personal data:

• Contact information (name, email address, phone number)
• Business information (salon name, business type, location)
• Communication preferences and enquiry details
• Website usage data and analytics information
• IP address and device information
• Cookie and tracking technology data

How We Use Your Information

We use of your data is based on legitimate business interests and your consent where required. We use your personal information for the following purposes:

• To respond to your enquiries and provide customer support
• To deliver our salon client retention services and consultations
• To communicate with you about our services and business updates
• To improve our website and services through analytics
• To comply with legal obligations and protect our legitimate interests
• To send marketing communications (with your consent)

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about our use of cookies, please see our Cookie Policy.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal bases:

• Consent: For marketing communications and non-essential cookies
• Contract: To provide our services and fulfil our obligations to you
• Legitimate interests: To improve our services and operate our business effectively
• Legal obligation: To comply with applicable laws and regulations

Data Sharing and Third Parties

We may share your personal information with:

• Service providers who assist us in operating our website and business
• Analytics providers (such as Google Analytics) to understand website usage
• Legal authorities when required by law or to protect our rights
• Business partners with your explicit consent

We do not sell your personal information to third parties.

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, and protect our legitimate interests. Typically, we retain:

• Contact information and enquiry data for up to 7 years
• Website analytics data for up to 26 months
• Marketing consent records until withdrawn
• Legal and compliance records as required by law

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data in certain circumstances
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Request transfer of your data to another provider
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent for processing at any time

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) where our service providers are located. When we transfer data internationally, we ensure appropriate safeguards are in place, including adequacy decisions or standard contractual clauses approved by the European Commission.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption, secure hosting, access controls, and regular security assessments.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal data, please contact us:

Privacy Officer
Email: [email protected]
Phone: +352 23153005
Address: Avenue Monterey 93, 4337 Differdange, Luxembourg

Supervisory Authority

If you believe we have not addressed your concerns adequately, you have the right to lodge a complaint with the relevant supervisory authority:

Commission nationale pour la protection des données (CNPD)
15, boulevard du Jazz
L-4370 Belvaux
Luxembourg
Website: cnpd.public.lu