LexoraTech Store

01.

What We Collect

Lexora Store Collects Specific Data Points Categorized As "Active Input" (Provided By You) And "Passive Telemetry" (Collected By Our Systems). This Data Is Minimized To What Is Strictly Necessary For Operational Integrity.

Active Input

Identity Name, Email
Logistics Address, Phone
Financial Transaction Tokens

Passive Telemetry

Network IP Addr, ISP
Hardware User Agent, OS
Behavior Clickstream

02.

How We Use It

Data Type	Primary Purpose	Legal Basis
Order Details	Fulfillment, Shipping Label Generation, Invoice Creation	CONTRACTUAL
Email Address	Transactional Alerts (Shipping, Receipts) & Security 2FA	LEGITIMATE INTEREST
Technical Logs	Fraud Detection, System Debugging	LEGITIMATE INTEREST

03.

Data Storage

We Adhere To A Strict Data Lifecycle Policy. Data Is Purged Automatically Upon Expiration Of These Timers.

Session Data End of Session Cleared On Browser Close.

Inactive Accounts 24 Months Post Last Login Activity.

Financial Records 7 Years Mandated By Tax Law.

04.

Third-Party Modules

Lexora Store Operates As A Modular System. We Transmit Encrypted Data Segments To The Following Partners Strictly For Functional Requirements. We Never Sell Data.

Payhere

Role: Payment Processor.
Data Shared: Tokenized Card Data, Billing Zip Code. Lexora Store Never Sees Your Raw Credit Card Number (PCI-DSS Compliant).

Google Analytics 4

Role: Traffic Analysis.
Data Shared: Anonymized IP Addresses, Page Flow. We Have Explicitly Disabled "User-ID" Tracking Features To Protect Privacy.

05.

Cookie Specification

Cookie Identifier	Classification	Lifespan	Functionality
PHPSESSID	NECESSARY	Session	Maintains login state across pages.
lexora_cart	FUNCTIONAL	30 Days	Preserves cart contents if window closes.
theme_pref	PREFERENCE	1 Year	Remembers Dark/Light mode selection.

06.

Your Rights

Under GDPR And CCPA Frameworks, You Retain Full Ownership Of Your Data. You May Execute The Following Commands Via Our DPO

Right Ao Access

Request A Raw JSON Export Of All Your Data Points.

Right To Erasure

Request Permanent Deletion Of Your Account/Logs ("Right To Be Forgotten").

07.

Security Specs

Encryption

All Data In Transit Is Secured Via TLS 1.3 (Transport Layer Security). Data At Rest In Our Database Uses AES-256 Encryption.

Hashing

User Passwords Are Never Stored As Plain Text. We Utilize Bcrypt With A Work Factor Of 12 And Individual Per-User Salts.

Privacy Policy