Privacy Policy
Last updated:
This Privacy Policy explains how Thexrovacrex (“we”, “us”) handles personal data for visitors and buyers of ElmoraCare products through https://thexrovacrex.world. It aligns with the EU General Data Protection Regulation (GDPR), UK GDPR principles, and the Australian Privacy Act 1988 (APPs) where applicable.
Controller and contact particulars
- Registered trading name: Thexrovacrex
- Postal address: 146 Marion Rd, West Richmond SA 5033, Australia
- Privacy correspondence (plain text mailboxes): info@thexrovacrex.world · contact@thexrovacrex.world · support@thexrovacrex.world · help@thexrovacrex.world
For EU/UK data subjects we act as the controller and appoint the postal address above as the primary channel for written requests. You may also use any inbox listed, referencing “GDPR request” in the subject line.
Categories of personal data we process
- Identity and contact data: name, email, optional phone numbers, delivery address when supplied.
- Transaction data: order references, payment status flags (card data is handled solely by the payment processor).
- Technical data: IP address, device type, browser version, and approximate location derived from network information.
- Communication data: messages submitted through forms, support threads, and consent records for marketing or analytics cookies.
Purposes, legal bases, and storage periods
| Fulfilling product requests and deliveries | Performance of a contract / pre-contract steps (GDPR Art. 6(1)(b)) | Up to 7 years to meet Australian taxation and consumer record obligations |
| Customer assistance and dispute management | Legitimate interests in maintaining accurate service records (Art. 6(1)(f)), balancing test documented internally | 3 years after the last interaction unless a claim extends the need |
| Compliance with court orders or regulators | Legal obligation (Art. 6(1)(c)) | Duration mandated by the specific proceeding |
| Optional analytics or marketing cookies | Consent (Art. 6(1)(a)) | See the Cookie Policy for retention of each tag |
Recipients and international transfers
We share data with vetted processors: hosting providers, email delivery partners, payment gateways, and courier companies. Contracts include confidentiality duties and data-processing clauses consistent with GDPR Article 28.
Where a processor sits outside the EU/EEA or UK, we rely on Standard Contractual Clauses, adequacy decisions, or equivalent safeguards, plus supplementary technical measures when risk analyses require them.
Security measures
We apply TLS encryption for data in transit, role-based access restrictions, pseudonymisation where feasible for reporting, logging of administrative actions, and periodic reviews of subprocessors. No system is perfectly secure; if we confirm a breach that risks your rights, we notify regulators and affected individuals without undue delay where required.
Your rights
Depending on your jurisdiction you may request access, rectification, erasure, restriction, portability, or object to certain processing. You may withdraw consent for optional cookies at any time via the on-site banner without affecting the lawfulness of earlier processing.
EU/UK residents may lodge a complaint with their supervisory authority; Australian users may contact the Office of the Australian Information Commissioner (OAIC).
Children
ElmoraCare is intended for adults. We do not knowingly collect data from anyone under 16 without verifiable parental permission, and we delete such data if we become aware of it.
Audience geography and product category
Geography: This site is operated from South Australia with fulfilment and consumer notices aimed primarily at adult shoppers with delivery addresses in Australia. Visitors outside Australia may browse, but checkout rules, taxes, and courier networks may differ.
Product category: ElmoraCare is described only as a food supplement (dietary supplement style product). Personal data is processed for commerce and service—not for inferring medical conditions, diagnoses, or treatment plans.
Paid advertising, measurement, and platform rules
Where we run paid campaigns (for example through Google Ads or similar networks), we configure conversion and remarketing tools to respect consent choices captured in the Cookie Policy. We do not use ad tools to collect special-category health data as defined under GDPR Article 9, and we instruct partners not to personalize ads on the basis of self-reported conditions supplied through this storefront.
Creative assets and landing text are reviewed internally so they do not promise therapeutic outcomes, treat sensitive disease states, or contradict Therapeutic Goods Administration (TGA) guidance for consumer advertising of vitamins and minerals in Australia or applicable ACCC truthful-marketing expectations. If a platform rejects or limits an ad, we adjust the copy rather than attempting to circumvent the decision.
Updates
When we amend this Policy we adjust the “Last updated” date above and, when changes materially affect you, provide a concise notice on the homepage with a link to this file.