Privacy Policy

1. Data controller

The controller responsible for the processing of your personal data is 3XA ECOM LLC, with registered address at 407 Lincoln Rd STE 708, Miami Beach, FL 33139. For any privacy matter you can reach us at legal@valfiguer.com.

2. Data we collect

We only collect the personal data we need. Depending on how you use the Site, this may include:

• Contact data you provide voluntarily — such as your name, email address and the content of your message — when you write to us or use a contact form.
• Technical and usage data — such as IP address, device and browser type, pages visited and interactions — collected automatically through cookies and similar technologies.
• Any other information you choose to send us in the course of a communication or business relationship.

We do not knowingly collect data from children, and we do not carry out automated decision-making that produces legal effects on you.

3. Purposes and legal basis

We process your personal data for the following purposes and on the following legal bases (Article 6 of the EU General Data Protection Regulation, the “GDPR”):

• To respond to your enquiries and manage our communication with you — based on your consent and/or on the steps taken at your request prior to entering into a relationship (Art. 6(1)(a) and (b) GDPR).
• To operate, secure and improve the Site and to produce aggregate analytics — based on our legitimate interest in running and improving our website (Art. 6(1)(f) GDPR).
• To comply with legal obligations to which we are subject — based on Art. 6(1)(c) GDPR.

4. Cookies and similar technologies

The Site uses strictly necessary cookies to function and may use analytics cookies to understand how it is used.

Analytics and other non-essential cookies are only set with your consent, which you can give or withdraw at any time through your browser settings or through any cookie controls we provide.

5. Third parties and processors

We may share personal data with trusted service providers who process it on our behalf and under our instructions — for example hosting, email and analytics providers — bound by appropriate confidentiality and data-protection obligations.

We may also disclose data where required by law, to protect our rights, or in connection with a corporate transaction within the Valfiguer group. We never sell your personal data.

6. International data transfers

3XA ECOM LLC is established in the United States. Where personal data is transferred outside your country — including from the European Economic Area to the United States — we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or an equivalent recognised mechanism, to ensure your data remains protected.

7. Data retention

We keep personal data only for as long as necessary for the purposes for which it was collected, to comply with our legal obligations, and to resolve disputes or enforce our agreements.

When data is no longer needed, we delete it or anonymise it securely.

8. Your rights

Depending on your location, you have rights over your personal data. Under the GDPR these include the rights to:

• Access the personal data we hold about you and obtain a copy of it.
• Rectify inaccurate or incomplete data.
• Erase your data (“right to be forgotten”) where applicable.
• Restrict or object to certain processing, including processing based on our legitimate interest.
• Data portability, where the processing is based on consent or a contract and carried out by automated means.
• Withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect, to request its deletion, and to opt out of any “sale” or “sharing” of personal information — which we do not carry out. We will never discriminate against you for exercising your rights.

To exercise any of these rights, contact us at legal@valfiguer.com. You also have the right to lodge a complaint with your local data-protection authority.

9. Changes to this Policy

We may update this Privacy Policy from time to time. The current version, together with its date, is always published on this page, and any material change will be highlighted where appropriate.