XAH · Luxury Edits

Privacy Policy

How we collect, use, and protect your personal information.

Last updated: August 20, 2026

XAH (“we”, “our”, “us”) respects your privacy. This policy explains how we collect, use, transfer, and safeguard personal information when you visit our website or send an inquiry.

Information We Collect

  • Contact details such as name, email address, phone number, and shipping address
  • Order and payment information processed securely through our payment partners
  • Account credentials if you create a customer account
  • Technical data including IP address, browser type, and device information
  • Marketing preferences if you subscribe to our newsletter

How We Use Your Information

  • Process and fulfill orders, including shipping and customer support
  • Communicate order updates, service notices, and marketing (with consent)
  • Improve website performance, security, and product offerings
  • Comply with legal obligations and prevent fraud

Cross-Border Data Transfers

Because we serve customers worldwide and use international service providers, your personal data may be transferred to, stored in, or accessed from countries outside your own.

  • EEA / UK (GDPR): Where required, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms approved under applicable law. You may request details by contacting us via our Contact page with the subject line “Privacy Request”.
  • Other regions: We apply reasonable contractual and technical protections with processors handling payments, messaging, analytics, and shipping.

Cookies & Analytics

We use cookies and similar technologies to remember preferences, analyze traffic, and improve your shopping experience. You may adjust cookie settings in your browser at any time.

Sharing of Information

We do not sell your personal data. We share information only with trusted service providers such as payment processors, shipping carriers, and email platforms — strictly to operate our business.

Data Retention & Security

We retain personal data only as long as necessary for the purposes described above. We implement administrative and technical safeguards, including SSL encryption at checkout.

California Privacy (CCPA / CPRA)

We do not sell or share your personal information for cross-context behavioral advertising. To limit analytics and marketing cookies, use or choose Reject All on the cookie banner. To request access or deletion, contact us via our Contact page with the subject line “Privacy Request”.

Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict processing of, or port your personal data, and to object to certain processing or withdraw consent. Contact us via our Contact page with the subject line “Privacy Request”. EEA/UK residents may also lodge a complaint with their local supervisory authority.

Children’s Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal information from children.

Contact

For privacy-related questions, contact us via our Contact page with the subject line “Privacy Request”, or use our Contact page.