Privacy Policy

Last updated:

1. Introduction

Chalvornaeshimal ("we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at https://chalvornaeshimal.world or make a purchase from us.

This policy complies with the General Data Protection Regulation (GDPR), the Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada, and Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Quebec Privacy Law).

2. Data Controller Information

The data controller responsible for your personal information is:

  • Company Name: Chalvornaeshimal
  • Address: 1250 René-Lévesque Blvd W, Montreal, QC H3B 4W8, Canada
  • Email: write-to-us@chalvornaeshimal.world
  • Website: https://chalvornaeshimal.world

3. Information We Collect

3.1 Personal Information You Provide

We collect information that you voluntarily provide to us when you:

  • Place an order through our website
  • Contact us via email or contact forms
  • Subscribe to our newsletter
  • Create an account on our website

This information may include:

  • Full name
  • Email address
  • Phone number (optional)
  • Shipping and billing address
  • Payment information (processed securely by third-party payment processors)
  • Order history and preferences
  • Communications with us

3.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information, including:

  • IP address
  • Browser type and version
  • Operating system
  • Device type and identifiers
  • Pages visited and time spent on each page
  • Referring website or source
  • Date and time of access

4. Legal Basis for Processing (GDPR)

Under the GDPR, we process your personal data based on the following legal grounds:

  • Contract Performance: Processing necessary to fulfill your orders and provide our services.
  • Consent: When you have given explicit consent for specific processing activities, such as receiving marketing communications.
  • Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services and preventing fraud, provided these interests do not override your rights.
  • Legal Obligation: Processing necessary to comply with applicable laws and regulations.

5. How We Use Your Information

We use the collected information for the following purposes:

  • Processing and fulfilling your orders
  • Sending order confirmations and shipping updates
  • Responding to your inquiries and providing customer support
  • Improving our website, products, and services
  • Sending promotional communications (with your consent)
  • Preventing fraud and ensuring website security
  • Complying with legal obligations
  • Analyzing website usage and performance

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy:

Data Type Retention Period
Order and transaction records 7 years (for tax and legal compliance)
Customer account information Until account deletion or 3 years of inactivity
Contact form submissions 2 years from submission
Marketing consent records Until consent is withdrawn
Website analytics data 26 months

After the retention period expires, we will securely delete or anonymize your personal information.

7. Data Sharing and Disclosure

We may share your personal information with the following categories of recipients:

7.1 Service Providers

  • Payment Processors: To securely process your payments
  • Shipping Companies: To deliver your orders
  • Email Service Providers: To send transactional and marketing emails
  • Analytics Providers: To analyze website performance
  • Hosting Providers: To host and maintain our website

All service providers are contractually obligated to protect your data and use it only for the purposes we specify.

7.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections.

8. International Data Transfers

Your personal information may be transferred to and processed in countries outside of Canada or the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions by the European Commission
  • Other legally recognized transfer mechanisms

9. Your Rights

Under GDPR, PIPEDA, and Quebec privacy laws, you have the following rights:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your personal data in certain circumstances.
  • Right to Restriction: Request restriction of processing in certain circumstances.
  • Right to Data Portability: Receive your data in a structured, machine-readable format.
  • Right to Object: Object to processing based on legitimate interests or for direct marketing.
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
  • Right to Lodge a Complaint: File a complaint with a supervisory authority.

To exercise any of these rights, please contact us at write-to-us@chalvornaeshimal.world. We will respond to your request within 30 days.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • SSL/TLS encryption for data transmission
  • Secure data storage with access controls
  • Regular security assessments and updates
  • Employee training on data protection
  • Incident response procedures

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.

11. Children's Privacy

Our website and products are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately so we can delete it.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a new "Last updated" date. We encourage you to review this policy regularly.

For significant changes, we will provide notice through our website or by email to registered users.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

  • Email: write-to-us@chalvornaeshimal.world
  • Address: 1250 René-Lévesque Blvd W, Montreal, QC H3B 4W8, Canada

15. Supervisory Authority

If you are located in the EU/EEA and believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority.

For Canadian residents, you may file a complaint with:

  • Office of the Privacy Commissioner of Canada - www.priv.gc.ca
  • Commission d'accès à l'information du Québec - www.cai.gouv.qc.ca (for Quebec residents)