PRIVACY POLICY

In compliance with current applicable legislation, the OWNER of the Website (see the identity of the responsible party in the section below) commits to taking the necessary technical and organizational measures, according to the level of security appropriate to the risk of the data collected.

This privacy policy is adapted to the current Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and relevant regulations.

IDENTITY OF THE RESPONSIBLE PARTY FOR THE PROCESSING OF PERSONAL DATA

The party responsible for the processing of personal data collected on the Website is:

Samantha Vázquez Pérez. 960646743

(hereinafter, also referred to as the DATA CONTROLLER). Their contact information is as follows:

Address:

12612 hwy 50 unit #12A
Bolton
L7E1T6
Ontario
Canadá

REGISTRATION OF PERSONAL DATA

In accordance with applicable legislation, we inform you that the personal data collected by the DATA CONTROLLER through forms on our pages or external forms will be incorporated into our files and processed to facilitate, expedite, and fulfill the commitments established between the DATA CONTROLLER and the User or to maintain the relationship established in the forms filled out by the User, or to address a request or inquiry from the User. Additionally, in accordance with the legislation, we maintain a record of processing activities that specifies, based on its purposes, the processing activities carried out and the other circumstances established in the legislation.

PRINCIPLES APPLICABLE TO THE PROCESSING OF PERSONAL DATA

The processing of the User’s personal data will be subject to the following principles as set forth in the legislation:

  • Principle of lawfulness, fairness, and transparency: At all times, the User’s consent will be required, with fully transparent information about the purposes for which the personal data are collected.

  • Purpose limitation principle: Personal data will only be collected for specific, legitimate, and determined purposes.

  • Data minimization principle: Only the personal data necessary for the purposes for which they are processed will be collected.

  • Accuracy principle: Personal data must be accurate and kept up-to-date.

  • Storage limitation principle: Personal data will only be kept for as long as necessary to fulfill the purposes of processing.

  • Integrity and confidentiality principle: Personal data will be processed in a manner that ensures their security and confidentiality.

  • Accountability principle: The data controller will be responsible for ensuring that the above principles are complied with.

CATEGORIES OF PERSONAL DATA

The categories of data processed on the Website are:

  • Identification and contact data for processing orders, such as name, email address, phone number, and address.

  • Anonymous statistical data regarding website usage, such as the number of page visits, website navigation, IP address, device information, etc., which cannot be associated with a specific individual by the DATA CONTROLLER as they are collected anonymously.

No special categories of personal data are processed.

LEGAL BASIS FOR PROCESSING PERSONAL DATA

The legal basis for processing personal data is the User’s consent. The DATA CONTROLLER is committed to obtaining express and verifiable consent from the User for processing their personal data for one or more specific purposes.

For the collection of anonymous data for statistical purposes, the User can opt-out by closing the website.

The User has the right to withdraw their consent at any time. Withdrawing consent is as easy as giving it. As a general rule, the withdrawal of consent will not affect the use of the Website.

PURPOSES OF PERSONAL DATA PROCESSING

Personal data is collected and processed by the DATA CONTROLLER for the following purposes:

  • To facilitate, expedite, and fulfill commitments made between the Website and the User or to maintain the relationship established by the forms filled out by the User or to respond to inquiries or requests.

  • When purchasing from our store, we collect the necessary information to deliver products and provide customer service.

  • We may also use the data for marketing, personalizing services, statistics, and business development.

  • Additionally, the data will be used for commercial purposes such as personalization, statistics, and for marketing studies to improve the services provided to the User.

DATA RETENTION PERIODS

Personal data will be retained for the minimum time necessary for processing purposes and, in any case, for the following period: 10 years or until the User requests their deletion.

At the time of data collection, the User will be informed about the period for which their personal data will be retained, or the criteria used to determine this period.

RECIPIENTS OF PERSONAL DATA

Personal data will not be sold or rented to third parties. We may share information with authorized third-party service providers to carry out basic operational services or perform marketing activities on behalf of the DATA CONTROLLER but not for the exclusive benefit of other companies.

Our website is hosted by Webempresa, using WordPress and Stripe. They provide us with the e-commerce platform that allows us to sell products and services.

Payments:

  • If you choose a direct payment gateway to complete your purchase, Stripe will store your credit card data. This is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data will only be stored as long as necessary to complete the transaction. Once the transaction is completed, your purchase information will be deleted.

PERSONAL DATA OF MINORS

In compliance with applicable laws, only individuals over the age of 14 are able to give lawful consent for the processing of their personal data by the DATA CONTROLLER. For individuals under 14 years of age, parental or guardian consent is required for the processing of personal data, and it will only be considered lawful if they have granted authorization.

CONFIDENTIALITY AND SECURITY OF PERSONAL DATA

The DATA CONTROLLER is committed to adopting the necessary technical and organizational measures, according to the level of security appropriate to the risk of the data collected, to ensure the security of personal data and prevent its accidental or unlawful destruction, loss, alteration, or unauthorized access.

The Website uses an SSL (Secure Socket Layer) certificate, which ensures that personal data is transmitted securely and confidentially.

However, since the DATA CONTROLLER cannot guarantee the invulnerability of the internet or the total absence of hackers or others who may fraudulently access personal data, the DATA CONTROLLER commits to notifying the User without undue delay when there is a security breach that is likely to result in a high risk to the rights and freedoms of individuals.

RIGHTS ARISING FROM THE PROCESSING OF PERSONAL DATA

The User has the following rights regarding their personal data:

  • Right of access: The User has the right to obtain confirmation as to whether or not their personal data is being processed, and if so, to access the details of the data being processed.

  • Right to rectification: The User has the right to correct inaccurate or incomplete personal data.

  • Right to erasure (“right to be forgotten”): The User has the right to have their personal data erased under certain conditions.

  • Right to restrict processing: The User can request the limitation of processing under specific circumstances.

  • Right to data portability: The User can request their personal data in a structured, commonly used, and machine-readable format and transfer it to another data controller.

  • Right to object: The User can object to the processing of their personal data in certain circumstances.

  • Right not to be subject to automated decision-making: The User has the right not to be subject to decisions based solely on automated processing, including profiling.

Requests can be made by writing to the DATA CONTROLLER’s contact address or email.

THIRD-PARTY WEBSITE LINKS

The Website may include hyperlinks to third-party websites that are not operated by the DATA CONTROLLER. These websites have their own privacy policies, and the DATA CONTROLLER is not responsible for the data handling practices of those sites.

COMPLAINTS TO THE REGULATORY AUTHORITY

If the User believes there is an issue or violation of applicable law regarding the processing of their personal data, they have the right to file a complaint with a supervisory authority, particularly in the jurisdiction where they reside or work.

ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

By using the Website, the User agrees to this Privacy Policy. The DATA CONTROLLER reserves the right to update or modify this policy as necessary due to changes in legislation or company practices. Any changes will be explicitly communicated to the User.

This Privacy Policy was last updated on 11/04/2025 to comply with the current legislation.