Privacy Policy

This privacy policy explains how Mersey Cloud Kft ("we", "us", "our") collects, uses, and protects personal data on leiluxx.com.

We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR — Regulation 2016/679) and Hungarian data protection law (Act CXII of 2011).

Data Controller

What Data We Collect

Analytics (Google Analytics 4)

If you accept cookies, we use Google Analytics 4 to collect anonymised usage data such as pages visited, time on site, device type, and approximate geographic location. This data helps us understand how our website is used and improve it.

• Legal basis: Consent (Art. 6(1)(a) GDPR)
• Data processor: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
• Retention: 14 months (Google Analytics default)
• Transfer: Data may be processed in the US under Google's Standard Contractual Clauses

If you decline cookies, no analytics data is collected.

Contact Information

When you contact us via email, we process your name and email address to respond to your enquiry.

• Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) — responding to your enquiry
• Retention: Until the purpose of the correspondence is fulfilled, or up to 3 years for business relationship records

Your Rights

Under the GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your personal data ("right to be forgotten")
• Restriction — request that we limit how we use your data
• Data portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interest
• Withdraw consent — withdraw analytics consent at any time by clearing your browser's local storage or using incognito mode

To exercise any of these rights, contact us at hello@leiluxx.com.

Data Security

This website is hosted on Amazon Web Services (AWS) infrastructure in the EU. All traffic is encrypted via HTTPS (TLS). No personal data is stored in databases by this website — analytics is handled entirely by Google's infrastructure.

Third-Party Services

Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Hungarian supervisory authority:

Changes to This Policy

We may update this policy from time to time. Changes will be published on this page with an updated revision date.

Last updated: February 2026