Privacy Policy

1. Introduction

Xibnarexothar ("we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website at https://xibnarexothar.world or use our services.

This policy complies with the General Data Protection Regulation (GDPR), the Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada, and other applicable data protection laws.

By using our website and services, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller Information

The data controller responsible for your personal data is:

Xibnarexothar

Address: 50 Rideau St, Ottawa, ON K1N 9J7, Canada

Email: chat@xibnarexothar.world

Website: https://xibnarexothar.world

3. Personal Data We Collect

We collect different types of personal data depending on how you interact with our website:

3.1 Information You Provide Directly

• Contact Information: Full name, email address, phone number (optional)
• Order Information: Details provided when placing an order, including shipping address and payment information
• Communication Data: Messages, feedback, or inquiries you send to us

3.2 Information Collected Automatically

• Technical Data: IP address, browser type and version, operating system, device type
• Usage Data: Pages visited, time spent on pages, navigation paths, referring websites
• Cookie Data: As described in our Cookie Policy

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you have given explicit consent for specific processing activities (e.g., marketing communications)
• Contract: When processing is necessary to fulfill our contractual obligations to you (e.g., processing your order)
• Legitimate Interests: When processing is necessary for our legitimate business interests, provided these do not override your rights
• Legal Obligation: When we are required to process data to comply with legal requirements

5. Purposes of Data Processing

We use your personal data for the following purposes:

• To process and fulfill your orders
• To communicate with you about your orders and inquiries
• To provide customer support and respond to your requests
• To improve our website, products, and services
• To analyze website usage and optimize user experience
• To send marketing communications (with your consent)
• To comply with legal obligations and protect our legal rights
• To prevent fraud and ensure security

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Our retention periods are:

• Order Data: 7 years from the date of purchase (for tax and accounting purposes)
• Customer Account Data: Until you request deletion or close your account, plus 2 years
• Marketing Consent Records: Until consent is withdrawn, plus 2 years
• Website Analytics Data: 26 months
• Customer Support Communications: 3 years from resolution

After these periods, your data will be securely deleted or anonymized.

7. Data Sharing and Third Parties

We may share your personal data with:

• Service Providers: Third parties who help us operate our business (e.g., payment processors, shipping companies, email service providers)
• Analytics Providers: To analyze website usage patterns
• Legal Authorities: When required by law or to protect our legal rights

We require all third parties to respect your data's security and to treat it in accordance with applicable laws. We do not sell your personal data to third parties.

8. International Data Transfers

Your personal data may be transferred to and processed in countries outside your country of residence. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by relevant authorities
• Adequacy decisions recognizing the destination country's data protection standards
• Binding Corporate Rules for transfers within our organization

9. Your Rights

Under applicable data protection laws, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent at any time for consent-based processing
• Right to Lodge a Complaint: File a complaint with a supervisory authority

To exercise any of these rights, please contact us using the information provided below. We will respond to your request within 30 days.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit using SSL/TLS technology
• Secure storage with access controls and authentication
• Regular security assessments and updates
• Employee training on data protection
• Incident response procedures

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

11. Children's Privacy

Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately, and we will take steps to delete such information.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website with a new "Last Updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, or if you wish to exercise your rights, please contact us:

14. Supervisory Authority

If you are located in the European Union and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local Data Protection Authority.

For residents of Canada, you may contact the Office of the Privacy Commissioner of Canada:

Website: www.priv.gc.ca

Phone: 1-800-282-1376