Privacy Policy

Last updated:

1. Introduction

Xluzarinaz ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website xluzarinaz.world (the "Website") or make a purchase from us.

This policy complies with the General Data Protection Regulation (GDPR), the Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada, and other applicable privacy laws.

2. Data Controller Information

The data controller responsible for your personal data is:

Xluzarinaz
1000 Rue de la Gauchetière O
Montréal, QC H3B 4W5
Canada
Email: team@xluzarinaz.world

3. Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide Directly

  • Identity Data: Full name
  • Contact Data: Email address, phone number (if provided), shipping address
  • Transaction Data: Details of products you have purchased, payment information (processed securely by third-party payment processors)
  • Communication Data: Messages, inquiries, and correspondence with us

3.2 Information Collected Automatically

  • Technical Data: IP address, browser type and version, operating system, device information
  • Usage Data: Pages visited, time spent on pages, navigation paths, click patterns
  • Cookie Data: Information collected through cookies and similar technologies (see our Cookie Policy)

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Consent: Where you have given explicit consent for specific processing activities
  • Contract Performance: Where processing is necessary to fulfill our contractual obligations to you (e.g., processing orders)
  • Legal Obligation: Where processing is necessary to comply with applicable laws and regulations
  • Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights

5. Purposes of Data Processing

We use your personal data for the following purposes:

  • Processing and fulfilling your orders
  • Communicating with you about your orders and inquiries
  • Providing customer support and responding to your requests
  • Sending transactional emails (order confirmations, shipping updates)
  • Improving our Website, products, and services
  • Analyzing Website usage and performance
  • Preventing fraud and ensuring security
  • Complying with legal obligations
  • Marketing communications (only with your explicit consent)

6. Data Sharing and Disclosure

We may share your personal data with:

  • Service Providers: Third parties who perform services on our behalf (payment processors, shipping carriers, email service providers)
  • Professional Advisors: Lawyers, accountants, and auditors when necessary
  • Legal Authorities: When required by law, court order, or government request
  • Business Transfers: In connection with any merger, sale, or acquisition of our business

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not sell your personal data to third parties.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside of your country of residence. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses approved by relevant authorities
  • Adequacy decisions by the European Commission
  • Other legally recognized transfer mechanisms

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • Transaction Data: 7 years from the date of transaction (for tax and legal compliance)
  • Account Data: Until you request deletion or close your account
  • Marketing Data: Until you withdraw consent or unsubscribe
  • Technical/Analytics Data: Up to 26 months

After the retention period, we will securely delete or anonymize your personal data.

9. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), United Kingdom, or in jurisdictions with similar privacy laws, you have the following rights:

  • Right of Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten")
  • Right to Restrict Processing: Request limitation of how we use your data
  • Right to Data Portability: Receive your data in a structured, commonly used format
  • Right to Object: Object to processing based on legitimate interests or for direct marketing
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
  • Right to Lodge a Complaint: File a complaint with a supervisory authority

To exercise any of these rights, please contact us using the information provided below.

10. Your Rights Under Canadian Law (PIPEDA)

If you are a Canadian resident, you have rights under PIPEDA, including:

  • The right to access your personal information
  • The right to challenge the accuracy and completeness of your information
  • The right to withdraw consent (subject to legal restrictions)
  • The right to complain to the Privacy Commissioner of Canada

11. Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

  • SSL/TLS encryption for data transmission
  • Secure data storage with access controls
  • Regular security assessments and updates
  • Employee training on data protection
  • Incident response procedures

While we strive to protect your personal data, no method of transmission over the Internet is completely secure. We cannot guarantee absolute security.

12. Children's Privacy

Our Website is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected information from a minor, please contact us immediately.

13. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Xluzarinaz
1000 Rue de la Gauchetière O
Montréal, QC H3B 4W5
Canada
Email: team@xluzarinaz.world

16. Supervisory Authority

If you are located in the EEA and believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection supervisory authority.

For Canadian residents, complaints can be filed with the Office of the Privacy Commissioner of Canada.