Effective Date: September 9, 2026

Company: QX Company Group LLC, doing business as "MYDORAS"

Company Address: 75 E 3rd St, Sheridan, WY 82801, United States

Website: https://mydoras.com

Email: info@mydoras.com

1. Introduction and Scope

This Privacy Policy explains how QX Company Group LLC, doing business as "MYDORAS" ("MYDORAS," "we," "us," or "our"), collects, uses, discloses, and protects personal data when you visit https://mydoras.com (the "Site") or purchase our products. This Policy is written to reflect the requirements of applicable United States federal and state privacy laws, the EU General Data Protection Regulation ("GDPR"), the UK GDPR and Data Protection Act 2018, as applicable to your location. If you are located in the European Union or the United Kingdom, references in this Policy to "personal data" have the meaning given under the GDPR and UK GDPR respectively.

This Policy applies to personal data we collect through the Site, through customer service interactions, and in connection with the sale and delivery of our products. It does not apply to information collected by third parties, including through any website or service that may link to or be accessible from the Site.

2. Who We Are

For purposes of the GDPR and UK GDPR, QX Company Group LLC is the data controller responsible for the personal data described in this Policy. Our contact details are set out in Section 20 below.

3. Personal Data We Collect

We may collect the following categories of personal data:

Identity and Contact Data: name, billing and shipping address, email address, telephone number.

Order Data: products purchased, order history, order value, and related transaction details.

Payment Data: limited payment-related information necessary to process your order through our payment processors. We do not collect or store full payment card numbers; see Section 8 and our Payment Security page for further detail.

Communications Data: messages, inquiries, and correspondence you send to our customer service team.

Technical and Usage Data: IP address, browser type, device information, pages visited, and similar data collected automatically through cookies and similar technologies. See our Cookie Policy for further detail.

Marketing Preferences: your choices regarding receipt of marketing communications.

4. How We Collect Personal Data

We collect personal data: (a) directly from you, when you place an order, create an account, contact customer service, or otherwise interact with the Site; (b) automatically, through cookies and similar tracking technologies as you browse the Site; and (c) from third parties, such as our payment processor confirming a completed transaction, or shipping carriers providing delivery status updates.

5. How We Use Your Personal Data

We use personal data for the following purposes:

To process, fulfill, and deliver your orders, including communicating with you about order status, shipping, and delivery.

To provide customer service and respond to your inquiries.

To process payments and prevent fraudulent transactions.

To send marketing communications, where you have consented or as otherwise permitted by applicable law, and to allow you to opt out at any time.

To operate, maintain, and improve the Site, including through analytics.

To comply with applicable legal, tax, accounting, and regulatory obligations.

To enforce our Terms of Service and protect the rights, property, and safety of MYDORAS, our customers, and third parties.

6. Legal Bases for Processing (EU/UK Residents)

Where the GDPR or UK GDPR applies to our processing of your personal data, we rely on the following legal bases:

Performance of a contract (Article 6(1)(b)): to process and fulfill your order, and to provide customer service related to your order.

Legal obligation (Article 6(1)(c)): to comply with tax, accounting, and other legal requirements.

Legitimate interests (Article 6(1)(f)): to prevent fraud, maintain the security of the Site, improve our products and services, and, in limited circumstances permitted by applicable law, to market similar products to existing customers who have not opted out.

Consent (Article 6(1)(a)): for marketing communications where consent is required, and for the placement of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7. Cookies and Similar Technologies

The Site uses cookies and similar technologies to operate, secure, and improve the Site, and, where applicable, for analytics and marketing purposes. Details on the categories of cookies used, their purposes, and how to manage your preferences are set out in our Cookie Policy.

8. How We Share Your Personal Data

We share personal data with the following categories of recipients, solely as necessary for the purposes described in this Policy:

Payment processors, including Stripe, to process payments and prevent fraud. Payment processors handle and store full payment card data in accordance with their own security standards; we do not store full card numbers.

Shipping and logistics providers, to fulfill and deliver your order.

IT infrastructure, hosting, and software service providers who support the operation of the Site, acting under appropriate data protection terms.

Professional advisors and regulators, where necessary to comply with legal obligations or protect our legal rights.

A successor entity, in the event of a merger, acquisition, reorganization, or sale of some or all of our assets, subject to appropriate safeguards.

We do not sell personal data for monetary consideration. To the extent any use of advertising or analytics cookies constitutes a "sale" or "share" of personal data under applicable U.S. state law, you may exercise the choices described in Section 13 and our Cookie Policy.

9. International Data Transfers

MYDORAS is based in the United States, and personal data we collect, including personal data from individuals located in the European Union and United Kingdom, is processed and stored in the United States and may be accessed by service providers located in other countries. Where we transfer personal data originating in the EU or UK to a country that has not been recognized as providing an adequate level of data protection, we rely on appropriate safeguards recognized under applicable law, such as the Standard Contractual Clauses adopted by the European Commission and, for transfers from the United Kingdom, the UK International Data Transfer Addendum. You may request further information about these safeguards by contacting us using the details in Section 20.

10. Data Retention

We retain personal data for as long as necessary to fulfill the purposes described in this Policy, including the duration of any customer relationship, and thereafter for as long as required to comply with our legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Order and transaction records are generally retained for the period required under applicable tax and business record-keeping laws. When personal data is no longer needed, we take reasonable steps to delete, destroy, or anonymize it.

11. Data Security

We implement reasonable administrative, technical, and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, and destruction, including reliance on PCI-compliant third-party payment processors and encrypted connections (HTTPS) on the Site. No method of transmission or storage is completely secure, and we cannot guarantee absolute security of personal data.

12. Your Rights Under GDPR and UK GDPR

If you are located in the European Union or the United Kingdom, you have the following rights in relation to your personal data, subject to applicable exceptions and limitations:

The right to access the personal data we hold about you and to obtain a copy of it.

The right to rectification of inaccurate or incomplete personal data.

The right to erasure of your personal data in certain circumstances.

The right to restrict our processing of your personal data in certain circumstances.

The right to data portability, allowing you to receive certain personal data in a structured, commonly used, machine-readable format.

The right to object to processing based on legitimate interests, including for direct marketing purposes.

The right to withdraw consent at any time, where processing is based on consent.

You may exercise these rights by contacting us using the details in Section 20. You also have the right to lodge a complaint with the data protection supervisory authority in your country of residence, place of work, or the place of the alleged infringement. A list of EU supervisory authorities is available from the European Data Protection Board, and UK residents may contact the Information Commissioner's Office (ICO).

13. Your Rights Under U.S. State Privacy Laws

If you are a resident of California, you may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), including the right to know what personal information we collect, the right to request deletion, the right to correct inaccurate personal information, the right to opt out of the sale or sharing of personal information, the right to limit the use of sensitive personal information, and the right not to receive discriminatory treatment for exercising these rights. We do not sell personal information for monetary consideration.

Residents of certain other U.S. states with comprehensive consumer privacy laws may have similar rights. You may exercise any applicable rights by contacting us using the details in Section 20; we will respond in accordance with applicable law.

14. Marketing Communications and Opt-Out

Where you have opted in to receive marketing communications from us, you may opt out at any time by using the unsubscribe link included in our emails or by contacting us at info@mydoras.com. Please note that even if you opt out of marketing communications, we may continue to send you non-marketing communications, such as order confirmations and customer service messages.

15. Children's Privacy

The Site is not directed to, and we do not knowingly collect personal data from, children under the age of 16 in the European Union and United Kingdom or under the age of 13 in the United States. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete that information.

16. Do Not Track

Some browsers offer a "Do Not Track" signal. Because there is no accepted industry standard for recognizing and responding to such signals, the Site does not currently respond to Do Not Track signals.

17. Third-Party Websites and Links

The Site may contain links to third-party websites, including payment processors and shipping carriers. This Policy does not apply to, and we are not responsible for, the privacy practices of any third-party website. We encourage you to review the privacy policies of any third-party website you visit.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on the Site with a revised "Effective Date." Where required by applicable law, we will provide additional notice of material changes.

19. Complaints and Supervisory Authorities

If you have concerns about how we handle your personal data, we encourage you to contact us first at info@mydoras.com so that we can attempt to resolve the matter directly. EU and UK residents also have the right to lodge a complaint with their local data protection supervisory authority at any time.

20. Contact Us

If you have questions about this Privacy Policy or wish to exercise any of the rights described above, please contact us at:

QX Company Group LLC (MYDORAS)

75 E 3rd St, Sheridan, WY 82801, United States

Email: info@mydoras.com

Website: https://mydoras.com