Privacy Policy

This Privacy Policy explains how XSPECIALIZT ("we", "us", "our") collects, uses, discloses, and protects information when you use our website, create an account, or place an order. By using the Service, you consent to the practices described here.

1. Information We Collect

• Account information: name, email address, phone number, and password (stored as a secure hash).
• Order & shipping information: billing and delivery address, order contents, and delivery instructions.
• Payment information: handled directly by our payment processor, Midtrans. We never receive or store your full card number, CVV, or bank credentials.
• Usage data: pages visited, device and browser type, and approximate location, collected automatically to keep the Service secure and improve performance.
• Communications: messages you send us via email, WhatsApp, or customer support channels.

2. How We Use Your Information

• To process, fulfill, and deliver your orders;
• To communicate order confirmations, shipping updates, and customer support responses;
• To operate our affiliate and referral program, where applicable;
• To send marketing communications, such as our newsletter, where you have opted in — you can unsubscribe at any time;
• To detect and prevent fraud, abuse, and security incidents;
• To comply with legal and tax obligations.

3. Payment Processing

All payments are processed by Midtrans, a licensed Indonesian payment gateway that is PCI-DSS compliant. When you check out, your payment details are transmitted directly to Midtrans over an encrypted connection; we only receive confirmation of payment status and a reference/transaction ID, which we use to fulfill your order.

4. Sharing Your Information

We share personal data only as necessary to operate the Service, with:

• Midtrans, to process payments;
• Our shipping and courier partners, to deliver your order and provide tracking;
• Service providers who help us operate the website, send communications, or provide customer support, under confidentiality obligations;
• Authorities, where required by law or to protect our legal rights.

We do not sell your personal data to third parties.

5. Cookies

We use cookies and similar technologies to keep you signed in, remember your cart, and understand how the Service is used. You can control cookies through your browser settings; disabling them may affect some site functionality.

6. Data Retention

We retain your personal data for as long as your account is active and as needed to fulfill orders, meet legal and tax obligations, resolve disputes, and enforce our agreements. You may request deletion of your account data at any time, subject to records we are legally required to keep.

7. Data Security

We use industry-standard technical and organizational measures — including encrypted connections (HTTPS), password hashing, and access controls — to protect your information from unauthorized access, alteration, or disclosure.

8. Your Rights

You may access, update, or request deletion of your personal information through your account settings, or by contacting us directly. You may also opt out of marketing emails at any time using the unsubscribe link included in each message.

9. Children's Privacy

The Service is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date at the top of this page.

11. Contact Us

For privacy-related questions or requests, please reach us via our Contact page.