Privacy policy

Privacy policy

Last updated: November 2026

1. Who we are
XtremeMac S.à r.l., 2 rue John Lennon, L-4371 Belval, Luxembourg (RCS B184149) is the controller of the personal data collected on shop.xtrememac.com. Contact: info@xtrememac.com.

2. What we collect

• Order data: name, email, phone number, billing and delivery address, products ordered.
• Account and product registration data, if you create an account or register a product.
• Messages you send us through the contact form, email or chat.
• Newsletter data: your email address and whether you opened our emails.
• Browsing data: IP address, device, browser, pages viewed, collected with cookies when you accept them.

Payment card data is handled directly by our payment providers (Shopify Payments, PayPal and others shown at checkout). We never see or store your full card number.

3. Why we use it, and on what legal basis

• To process and deliver your order, handle returns and warranty claims: performance of the contract.
• To keep invoices and accounting records: legal obligation.
• To answer your questions and prevent fraud: our legitimate interest.
• To send newsletters and offers: your consent, which you can withdraw at any time with the unsubscribe link.
• To measure our site and show relevant ads on Google, Meta and other platforms: your consent through the cookie banner.

4. Who receives it
We share data only with service providers that work for us: Shopify (store hosting and checkout), payment providers, delivery companies (such as DHL and TNT), our email tools, our customer chat (Tidio), our product review tool (A2 Reviews), and advertising and analytics partners (Google, Meta) when you have consented. We do not sell your personal data.

5. Transfers outside the EU
Some providers may process data outside the European Economic Area, for example in the United States. In that case the transfer is covered by an adequacy decision (such as the EU-US Data Privacy Framework) or by the European Commission's standard contractual clauses.

6. How long we keep it
Order and invoice data: 10 years, as required by Luxembourg accounting law. Customer account: until you delete it. Newsletter: until you unsubscribe. Messages: up to 3 years after our last exchange. Cookies: up to 13 months.

7. Your rights
You can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. Write to info@xtrememac.com. You can also complain to the Luxembourg data protection authority, the CNPD (Commission nationale pour la protection des données, cnpd.public.lu), or to the authority of your country.

8. Cookies
Essential cookies make the store and the cart work. Analytics and advertising cookies are only set if you accept them in the cookie banner. You can change your choice at any time from the cookie settings link or in your browser.

9. Children
Our store is not intended for children under 16 and we do not knowingly collect their data.

10. Changes
We may update this policy. The date at the top shows the latest version.