GDPR Information Notice - Lexme Shop EN

Effective Date: 29.08.2026

This GDPR Information Notice explains how AMERKEZ LLC – Lexme.shop (“Company”, “we”, “us”, “our”) processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

1. Data Controller

AMERKEZ LLC – Lexme.shop
1209 Mountain Road Pl NE, Ste N Albuquerque NM 87110 USA
Phone: +15052203073
Email: [email protected]

2. Categories of Personal Data Collected

We may collect and process the following categories of personal data:

Full Name
Billing Address
Shipping Address
Email Address
Phone Number
IP Address
Device and Browser Information
Cookie Data
Order and Transaction Details

3. Legal Basis for Processing (Article 6 GDPR)

We process personal data based on one or more of the following legal grounds:

Performance of a contract (order processing and delivery)
Compliance with legal obligations
Legitimate interests (fraud prevention, website security, analytics)
Explicit consent (where required by law)

4. Purpose of Processing

Your personal data is processed for the following purposes:

Order fulfillment and delivery
Payment processing
Customer service communication
Fraud detection and prevention
Website security and performance optimization
Legal compliance and record keeping

We do not conduct email marketing campaigns. Transactional emails related to your order are sent automatically by our system.

5. Data Sharing and Third-Party Processors

We may share personal data with trusted service providers strictly for operational purposes, including:

Google (Analytics & Ads)
Meta (Pixel)
Stripe (payment processing)
PayPal (payment processing)
Wise (bank transfer processing)
Automattic / Jetpack (CDN and image optimization)
Cloudflare (security and CDN services)
WordPress and WooCommerce infrastructure

All third-party providers are contractually bound to process data in accordance with applicable data protection laws.

6. International Data Transfers

As we operate globally and are based in the United States, personal data may be transferred outside the European Economic Area (EEA).

Where required, such transfers are safeguarded using Standard Contractual Clauses (SCCs) approved by the European Commission or other lawful transfer mechanisms under GDPR.

7. Data Retention

Personal data related to orders and financial transactions is retained for up to 10 years in compliance with tax and accounting obligations.

Other data is retained only as long as necessary for legitimate business purposes or legal requirements.

8. Data Subject Rights (Articles 15–22 GDPR)

Under GDPR, EU residents have the following rights:

Right of access
Right to rectification
Right to erasure (“Right to be Forgotten”)
Right to restriction of processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time
Right to lodge a complaint with a supervisory authority

Requests may be submitted via email at [email protected]. We reserve the right to verify identity before processing any request.

9. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.

However, no online transmission can be guaranteed as completely secure.