Privacy Policy

1. Introduction and Scope

Chraxellllvakae ("we", "us", "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal data when you visit our website at https://chraxellllvakae.world ("Website") or purchase our products.

This policy applies to all personal data we process about visitors, customers, and other individuals who interact with us. It complies with the Personal Information Protection and Electronic Documents Act (PIPEDA), the General Data Protection Regulation (GDPR) where applicable to European residents, Canada's Anti-Spam Legislation (CASL), and applicable provincial privacy laws including the Personal Information Protection Act (PIPA) of Alberta and British Columbia.

By using our Website or purchasing our products, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our Website.

2. Personal Data We Collect

We collect personal data in the following categories:

2.1 Data You Provide Directly

• Identity data: Full name, title
• Contact data: Email address, telephone number (optional), postal address
• Order data: Products ordered, order history, delivery preferences, special instructions
• Communication data: Messages, enquiries, and correspondence you send us
• Consent records: Records of your consent to our terms, policies, and marketing communications

2.2 Data Collected Automatically

• Technical data: IP address, browser type and version, operating system, device type, screen resolution
• Usage data: Pages visited, time spent on pages, links clicked, referring URLs, exit pages
• Cookie data: Information stored via cookies and similar tracking technologies (see our Cookie Policy)
• Log data: Server logs, error reports, and access timestamps

2.3 Data from Third Parties

• Payment processors (transaction confirmation data — we do not store full payment card details)
• Shipping partners (delivery confirmation and tracking data)
• Analytics providers (aggregated website usage statistics)

3. Legal Bases for Processing

We process your personal data on the following legal bases:

• Contract performance: Processing necessary to fulfil your order, arrange delivery, and provide customer support.
• Legitimate interests: Improving our Website, preventing fraud, ensuring network security, and conducting internal analytics — where these interests are not overridden by your rights.
• Consent: For marketing communications and non-essential cookies, where you have given explicit, freely given, informed, and unambiguous consent. You may withdraw consent at any time.
• Legal obligation: Where processing is necessary to comply with applicable law, including tax, accounting, and consumer protection obligations.

4. Purposes of Processing

We use your personal data for the following purposes:

• Processing and fulfilling your orders, including payment verification and delivery coordination
• Sending order confirmations, shipping notifications, and tracking information
• Responding to your enquiries, complaints, and customer service requests
• Managing returns, refunds, and warranty claims in accordance with our Return Policy
• Maintaining accurate business records and complying with legal and regulatory obligations
• Detecting and preventing fraud, unauthorised access, and other security threats
• Improving the functionality, content, and user experience of our Website
• Conducting anonymised analytics to understand how our Website is used
• Sending marketing communications where you have provided explicit consent (CASL-compliant)
• Complying with applicable laws, court orders, and regulatory requirements

5. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy, or as required by law. Our standard retention periods are:

• Order and transaction records: 7 years from the date of transaction (required by Canadian tax law)
• Customer account data: For the duration of the customer relationship plus 3 years
• Marketing consent records: Until consent is withdrawn, plus 3 years for compliance records
• Website analytics data: 26 months from collection (anonymised after 14 months)
• Customer service communications: 3 years from the date of the last communication
• Cookie consent records: 1 year from the date of consent
• Security and access logs: 90 days

When data is no longer required, it is securely deleted or anonymised in accordance with our data destruction procedures.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data to third parties. We may share your data with:

6.1 Service Providers

We engage trusted third-party service providers who process data on our behalf under contractual data processing agreements. These include:

• Payment processors (for secure transaction processing)
• Shipping and logistics partners (for order fulfilment and delivery)
• Email service providers (for transactional and marketing communications)
• Website hosting and infrastructure providers
• Analytics and performance monitoring services
• Customer relationship management (CRM) software providers

6.2 Legal Requirements

We may disclose your personal data if required to do so by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect our legal rights, prevent fraud, or protect the safety of any person.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business assets, personal data may be transferred to the acquiring entity. We will notify you of any such change and the applicable privacy policy.

7. International Data Transfers

Our primary operations are based in Canada. Some of our service providers may be located outside Canada, including in the United States and the European Economic Area. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions by the relevant data protection authority
• Binding Corporate Rules where applicable
• Contractual obligations requiring equivalent data protection standards

8. Your Rights

Depending on your jurisdiction, you have the following rights regarding your personal data:

8.1 Rights Under PIPEDA (Canada)

• Right of access: Request a copy of the personal data we hold about you
• Right to correction: Request correction of inaccurate or incomplete data
• Right to withdraw consent: Withdraw consent to processing at any time (where processing is based on consent)
• Right to complain: File a complaint with the Office of the Privacy Commissioner of Canada

8.2 Additional Rights Under GDPR (EU/EEA Residents)

• Right to erasure ("right to be forgotten"): Request deletion of your personal data in certain circumstances
• Right to restriction: Request that we restrict processing of your data in certain circumstances
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests or for direct marketing
• Right not to be subject to automated decision-making: We do not use automated decision-making or profiling that produces legal or similarly significant effects

To exercise any of these rights, please contact us at contact@chraxellllvakae.world. We will respond within 30 days. We may need to verify your identity before processing your request.

9. Security Measures

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• SSL/TLS encryption for all data transmitted to and from our Website (HTTPS)
• Encryption of sensitive data at rest
• Access controls and role-based permissions for staff who handle personal data
• Regular security assessments and vulnerability testing
• Staff training on data protection and information security
• Incident response procedures for data breaches
• Secure data deletion procedures when data is no longer required

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay, as required by applicable law.

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our Website. For full details of the cookies we use, their purposes, and how to manage your preferences, please see our Cookie Policy.

11. Children's Privacy

Our Website and products are not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child under 18, please contact us immediately and we will take steps to delete such data promptly.

12. Marketing Communications

We will only send you marketing communications if you have provided explicit consent in accordance with Canada's Anti-Spam Legislation (CASL). You may withdraw your consent and unsubscribe from marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Contacting us at contact@chraxellllvakae.world
• Calling us at +1 833 781 5773

Unsubscribing from marketing communications will not affect transactional communications related to your orders.

13. Links to Third-Party Websites

Our Website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies. This Privacy Policy applies only to our Website.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the updated policy on this page with a revised "Last updated" date. For material changes, we will provide additional notice (such as a prominent notice on our Website or an email notification). We encourage you to review this policy periodically.

15. Supervisory Authorities

If you have concerns about how we handle your personal data that we have not resolved to your satisfaction, you have the right to lodge a complaint with:

• Canada: Office of the Privacy Commissioner of Canada — www.priv.gc.ca
• EU/EEA residents: Your local Data Protection Authority

16. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or our data processing practices, please contact our Privacy Officer: