Privacy Policy

1. Introduction

Xiphrannauxla ("we", "us", "our") is committed to protecting the privacy and personal data of our website visitors and customers. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, how long we retain it, and what rights you have with respect to your data.

This policy applies to all personal data collected through xiphrannauxla.world and through any communications with us. Our practices comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), applicable provincial privacy laws, and the EU General Data Protection Regulation (GDPR) to the extent it applies.

2. Personal Data We Collect

We collect the following categories of personal data:

• Identity data: Full name provided when submitting an order enquiry.
• Contact data: Email address, telephone number, and delivery address.
• Message content: Any information you include in your order message or communications with us.
• Technical data: IP address, browser type and version, time zone, browser plug-in types, operating system, and platform, collected automatically when you visit our website.
• Usage data: Information about how you use our website, products and services.
• Cookie data: Data collected via cookies and similar technologies, as described in our Cookie Policy.

3. How We Collect Your Personal Data

We collect data through:

• Direct interactions — when you fill in the order form on our website, email us, or call us.
• Automated technologies — when you browse our website, we may automatically collect technical and usage data using cookies and similar tracking technologies.
• Third parties — we may receive data from analytics providers or advertising partners, subject to their own privacy policies.

4. Purposes and Legal Basis for Processing

We process your personal data for the following purposes:

• Order processing and fulfilment — to contact you and arrange delivery. Legal basis: performance of a contract / your consent.
• Customer communications — to answer enquiries and provide support. Legal basis: legitimate interests / consent.
• Website improvement — to analyse website usage and improve user experience. Legal basis: legitimate interests / consent.
• Legal compliance — to comply with applicable laws and regulations. Legal basis: legal obligation.
• Marketing — only where you have provided explicit consent. You may withdraw consent at any time.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• Order enquiry and communication data: up to 3 years from last contact.
• Technical and usage data: up to 26 months.
• Cookie-related data: as specified in our Cookie Policy.

Upon expiry of retention periods, data is securely deleted or anonymised.

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your data with:

• Delivery and logistics partners — to fulfil your order.
• IT service providers — who assist in operating our website and communications systems.
• Analytics providers — to understand website usage (where you have consented).
• Regulatory and law enforcement authorities — where required by law.

All third-party processors are required to handle your data securely and only for the specified purpose.

7. International Data Transfers

Where your personal data is transferred outside Canada or the European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by relevant authorities, or equivalent protective mechanisms.

8. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to request correction of inaccurate or incomplete data.
• Right to erasure — to request deletion of your personal data in certain circumstances.
• Right to restriction of processing — to request that we limit how we use your data.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent — where processing is based on consent, to withdraw it at any time without affecting prior processing.

To exercise any of these rights, please contact us at callbackask-@xiphrannauxla.world. We will respond within 30 days. You also have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC) or your local data protection authority.

9. Security Measures

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data is transmitted over HTTPS. Access to personal data is restricted to authorised personnel only.

10. Cookies

Our website uses cookies and similar technologies. For detailed information, please see our Cookie Policy.

11. Children's Privacy

Our website and products are intended for adults aged 18 and over. We do not knowingly collect personal data from children under 18. If you believe a child has submitted personal data to us, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us: