Privacy Policy

Last updated: January 2025

Metaxia Multimedia ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our website (metaxia.media), use our e-commerce services, or interact with our portfolio and contact features.

Your Consent

By providing your personal information through our website forms, creating an account, or making a purchase, you explicitly consent to the collection, use, and processing of your data as described in this policy. You may withdraw your consent at any time by contacting us, though this may affect our ability to provide services to you.

Information We Collect

We collect the following categories of personal information:

• Account information: name, email address, and password (securely hashed) when you register for an account through Amazon Cognito
• Contact form submissions: name, email address, and any message content you provide
• Payment and transaction information: billing address, shipping address, and order details processed through Stripe (we do not store full credit card numbers)
• Web traffic data: IP address, browser type, pages visited, and access times (collected automatically through server logs)
• Local storage data: theme preferences and shopping cart contents stored on your device

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you submit our contact form, create an account, or opt in to marketing communications, you consent to us processing your information for the stated purposes
• Legitimate interests: We process basic web traffic data to maintain website security, prevent fraud, and improve our services
• Contract performance: When you make a purchase, we process your data as necessary to fulfill your order, process payment, and provide customer support

How We Use Your Information

We use your information for the following purposes:

• To process and fulfill your orders, including payment processing and shipping
• To create and manage your account
• To respond to your inquiries and provide customer support
• To send transactional emails about your orders and account
• To improve our website, products, and services based on usage patterns
• To maintain the security of our website and prevent fraud

Information Sharing

We do not sell, trade, or rent your personal information to third parties. In the preceding 12 months, we have not sold any personal information. We may share your information with service providers who assist us in operating our website and business:

• Amazon Web Services (AWS) for website hosting, content delivery, and authentication (Cognito)
• Stripe for secure payment processing
• Email service providers for transactional communications

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

International Data Transfers

Your personal information may be stored and processed on servers located outside your country of residence, including in the United States, through our use of cloud services. Specifically:

• Amazon Web Services (AWS) for hosting, content delivery, and Cognito authentication
• Stripe for payment processing (operates globally with data centers in multiple regions)

By providing your information, you consent to this transfer. These services operate under appropriate safeguards including Standard Contractual Clauses to ensure your data remains protected in compliance with applicable data protection laws.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected. Specifically:

• Server logs: Retained for 2 years for security monitoring, fraud prevention and detection, legal compliance, and business analytics
• Contact form submissions: Retained until your inquiry is resolved, plus 2 years for customer service and legal compliance
• Financial and transaction records: Retained for 7 years as required by tax regulations and accounting standards
• Anonymized data: When data is no longer needed in identifiable form, we may store it in anonymized or aggregated form for ongoing product improvement and analytics

You may request deletion of your personal data at any time by contacting us, subject to our legal retention obligations.

Cookies and Local Storage

Our website uses standard web server logs (through Amazon CloudFront) to collect basic traffic information. We use essential cookies for authentication and session management through Amazon Cognito. Your browser stores local preferences (such as theme settings) and shopping cart contents to improve your experience. This data remains on your device. We do not use third-party tracking cookies or advertising services.

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption in transit (HTTPS/TLS) for all data transmission
• Secure authentication through Amazon Cognito with password hashing
• PCI-compliant payment processing through Stripe (we never store full card details)
• Access controls limiting who can access personal data
• Regular security reviews and updates

Breach Notification: If a data breach occurs that may affect your rights and freedoms, we will notify you and relevant supervisory authorities within 72 hours as required by applicable law.

Your Rights

You have the following rights regarding your personal data:

• Right of access: Request a copy of the personal information we hold about you
• Right to rectification: Request correction of any inaccurate or incomplete information
• Right to erasure: Request deletion of your personal information (subject to legal retention requirements)
• Right to data portability: Request your data in a structured, machine-readable format
• Right to restrict processing: Request that we limit how we use your data
• Right to object: Object to our processing of your data, particularly for direct marketing
• Right to withdraw consent: Withdraw your consent at any time for processing based on consent
• Right not to be subject to automated decision-making: We do not use automated decision-making that significantly affects you

To exercise any of these rights, please contact us using the information below. We will verify your identity and respond to verified requests within 30 days (or 45 days for complex requests).

Right to Complain

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority. For EU residents, you can contact the data protection authority in your country of residence. For UK residents, you may contact the Information Commissioner's Office (ICO). We encourage you to contact us first so we can address your concerns directly.

Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. You will not be denied services, charged different prices, or provided a different level of service for exercising your rights under this policy.

Children's Privacy

Our services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. Our e-commerce services require users to be at least 18 years old or have parental consent. If we discover that a child under 13 has provided us with personal information without parental consent, we will promptly delete such information.

Third-Party Services

Our website integrates with third-party services that have their own privacy policies:

• Stripe for payment processing: stripe.com/privacy
• Amazon Web Services: aws.amazon.com/privacy

We recommend reviewing these policies to understand how these services handle your data.

Legal Disclosure

We may disclose your personal information if required by law or in response to valid legal requests by government authorities, such as a court order or subpoena. We will notify you of such requests where legally permitted.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Material changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal data, please contact us at: