Privacy Policy

Shrexxonzelmaron.world ("we", "us", "our") is committed to protecting your personal data and upholding the highest standards of privacy. This comprehensive Privacy Policy explains in detail how we collect, use, store, transfer, and protect your information in accordance with the General Data Protection Regulation (GDPR), the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA), the California Consumer Privacy Act (CCPA), and other applicable international data protection laws.

1. Data Controller and Contact Information

Shrexxonzelmaron.world
50 Bloor St W, Toronto, ON M4W 1A2, Canada
Email: admin@shrexxonzelmaron.world

As the data controller, we are responsible for deciding how your personal data is processed and for ensuring that such processing complies with all applicable data protection legislation. If you have any questions regarding this policy or wish to exercise your data protection rights, please contact us using the details above.

2. Categories of Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity data: Your full name, title, and any identifier that you provide when creating an account or placing an order.
• Contact data: Your email address, telephone number, postal address, and any other contact information you furnish for communication purposes.
• Communication data: Messages you send to us via our contact forms, email, or other channels, including inquiry content and any attachments.
• Technical data: Your IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system, device information, and other technology on the devices you use to access our website.
• Usage data: Information about how you use our website, including pages visited, time spent on pages, navigation paths, clickstream data, and page interaction information.
• Cookie and tracking data: Data collected through cookies and similar technologies as described in our Cookie Policy.
• Transaction data: Details of purchases you make, including product information, order history, payment method (without storing full payment card details), and delivery address.

3. Purpose and Legal Basis for Processing

We process your data for the following purposes and under the stated legal bases:

• To respond to inquiries and provide customer support: Legitimate interest and, where applicable, consent.
• To process and fulfill orders: Performance of a contract.
• To send transactional communications: Performance of a contract and legal obligation.
• To improve our website, products, and services: Legitimate interest.
• To prevent fraud and ensure security: Legitimate interest and legal obligation.
• To comply with legal and regulatory obligations: Legal obligation.
• To send marketing communications: Consent only.

4. Data Retention Periods

We retain your data only for as long as necessary to fulfill the purposes for which it was collected:

• Inquiry and order data: up to 7 years for legal, accounting, and tax purposes.
• Marketing data: until you withdraw consent or unsubscribe, plus a short period for suppression lists.
• Technical and access logs: up to 12 months.
• Cookie data: as specified in our Cookie Policy.
• Unsuccessful job application data: up to 12 months, unless you consent to longer retention.

5. Your Rights Under GDPR, PIPEDA, and CCPA

You have the following rights in relation to your personal data:

• Right of access: Request a copy of your personal data and information about how it is processed.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data in certain circumstances ("right to be forgotten").
• Right to restriction of processing: Request that we limit how we process your data in specific situations.
• Right to data portability: Receive your data in a structured, commonly used, machine-readable format and transmit it to another controller.
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of processing before withdrawal.
• Right to lodge a complaint: Lodge a complaint with a supervisory authority in your country of residence.

To exercise any of these rights, please contact us at admin@shrexxonzelmaron.world. We will respond within 30 days. You also have the right to opt out of the sale of personal information (where applicable under CCPA). We do not sell personal data.

6. Data Security Measures

We implement robust technical and organizational measures to protect your data:

• HTTPS/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data at rest where appropriate.
• Secure storage with role-based access controls and multi-factor authentication for administrative access.
• Regular security assessments, vulnerability scans, and penetration testing.
• Staff training on data protection and secure handling of personal information.
• Incident response procedures in the event of a data breach.

7. Data Sharing and Third Parties

We do not sell your personal data. We may share data with the following categories of recipients:

• Service providers (payment processors, shipping carriers, email service providers, analytics providers) who act as data processors under contractual agreements.
• Professional advisers (lawyers, accountants, auditors) where necessary.
• Regulatory authorities, law enforcement, or other parties when required by law or to protect our rights.

8. International Data Transfers

If we transfer data outside the European Economic Area (EEA) or Canada, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, adequacy decisions, or binding corporate rules. You may request details of these safeguards by contacting us.

9. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes via email or a prominent notice on our website. We encourage you to review this policy periodically.