Privacy Policy

1. Information We Collect

We collect the following categories of personal information:

2. How We Use Your Information

We use your personal information for the following purposes:

• •Processing and fulfilling your orders
• •Sending order confirmation, status updates, and delivery notifications
• •Providing customer support and responding to inquiries
• •Detecting, preventing, and investigating fraud, abuse, or unauthorized activity
• •Complying with applicable legal and regulatory obligations
• •Improving our website, services, and user experience
• •Sending transactional emails (e.g., receipts, order updates)
• •Enforcing these Terms of Service and other applicable agreements

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• •Contract Performance: Processing necessary to fulfill your order and provide purchased services.
• •Legitimate Interests: Fraud prevention, security, and improving our services.
• •Legal Obligation: Compliance with applicable laws (e.g., tax recordkeeping, anti-money laundering).
• •Consent: Where you have given explicit consent for specific processing activities (e.g., marketing emails).

4. Payment Processing by Stripe

All payment processing is performed by Stripe, Inc.(stripe.com), a PCI-DSS Level 1 certified payment processor. When you proceed to checkout, you are redirected to Stripe's secure payment page.

X6RR LLC never receives, stores, or has access to your full card number, CVV, or PIN at any time. Stripe's handling of your payment data is governed by Stripe's Privacy Policy.

Stripe may share limited transaction data with us (such as the last four digits of your card, card type, and transaction ID) solely for order management and fraud prevention purposes.

5. Data Sharing & Third Parties

We may share your information with the following categories of third parties only as necessary:

• •Stripe (payment processing) — subject to Stripe's Privacy Policy
• •Email service providers (to deliver transactional emails)
• •Fraud prevention and identity verification services
• •Law enforcement or government authorities where required by law
• •Legal counsel or professional advisors under confidentiality obligations

6. Cookies & Tracking Technologies

Our website uses the following types of cookies:

• •Essential Cookies: Required for core site functionality (e.g., maintaining your shopping cart session). These cannot be disabled.
• •Analytics Cookies: Used to understand how visitors use our Site (e.g., pages visited, time on site). Data is anonymized where possible.
• •Security Cookies: Used to detect and prevent fraudulent activity.

You can control and delete cookies through your browser settings. Disabling essential cookies may impact the functionality of the Site.

7. Data Retention

We retain your personal data for the following periods:

• •Order and transaction records: Minimum 7 years to comply with U.S. tax and financial recordkeeping requirements.
• •Customer support communications: Up to 3 years from last contact.
• •Account/session data: Deleted within 90 days of your last interaction.
• •Fraud prevention data: Retained as long as necessary to prevent future abuse.

8. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights:

• •Right of Access: Request a copy of the personal data we hold about you.
• •Right to Rectification: Request correction of inaccurate or incomplete data.
• •Right to Erasure: Request deletion of your personal data (subject to legal retention obligations).
• •Right to Data Portability: Request your data in a machine-readable format.
• •Right to Restrict Processing: Request that we limit how we use your data.
• •Right to Object: Object to processing based on legitimate interests.
• •Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
• •California Residents (CCPA): Right to know, right to delete, and right to opt out of sale of personal information (we do not sell personal information).

To exercise any of these rights, contact us at privacy@x6rr.com. We will respond within 30 days.

9. Data Security

We implement commercially reasonable technical, administrative, and physical safeguards to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These include SSL/TLS encryption for all data transmitted to and from the Site, access controls limiting employee access to personal data on a need-to-know basis, and regular security reviews. However, no method of internet transmission is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our Services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected information from a minor, please contact us immediately at privacy@x6rr.com and we will promptly delete such information.

11. International Data Transfers

X6RR LLC is based in the United States. If you are located outside the U.S., your personal data may be transferred to and processed in the United States, which may have different data protection laws than your country. By using our Services, you consent to such transfer. Where required, we implement appropriate safeguards (such as Standard Contractual Clauses) for cross-border data transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Site. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of the Site following any changes constitutes acceptance of the updated policy.

13. Contact

For privacy-related inquiries, requests, or complaints: