Privacy Policy
1. Introduction
CanMex Imports (“we,” “us,” or “our”) is committed to maintaining your privacy and safeguarding your personal information in accordance with applicable privacy regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). We respect your right to privacy and are dedicated to protecting the personal data you share with us, whether you are browsing canmeximports.com or engaging with our services in other ways.
2. Scope of the Policy and Data Controller
This Privacy Policy applies to all personal data collected through our website, canmeximports.com, and any related services where this policy is referenced. CanMex Imports is the data controller with respect to the personal information you provide, meaning we determine the purposes and means of processing your personal data.
3. Categories of Data Processed
We collect several categories of personal data through your interactions with our website, communications, and transactions:
– Usage Data: This includes information about how you use canmeximports.com, such as IP address, browser type, browsing behavior, session duration, page views, and referring URLs.
– Account Data: Information you provide when creating an account or registering with us, such as your full name, mailing address, email address, and telephone number.
– Profile Data: Preferences, behavioral insights, purchase history, and any other details you choose to add to your user profile.
– Communication Data: Includes correspondence through email or support services, records of your communications with our team, or when you use any onsite contact forms.
– Technical Data: Device type, operating system, system language, time zone, and other system configuration data.
– Transaction Data: Payment and billing information, order history, card or bank information (processed securely via third-party processors), and shipping details.
– Preference Data: Information related to your marketing preferences, product interests, and consent settings.
4. Legal Bases for Processing
We rely on the following legal bases for processing your personal data:
– Consent: When you’ve given us express consent (e.g., to receive newsletters or accept cookies).
– Contractual Necessity: When processing is necessary to fulfill a contract (e.g., product orders).
– Legal Obligation: Where we are legally required to retain or disclose data.
– Legitimate Interest: In cases where processing is necessary for our legitimate business interests and does not override your privacy rights (e.g., fraud prevention, site analytics, marketing improvements).
5. Your Data Protection Rights
Under the GDPR and CCPA, you have certain rights regarding your personal information:
– Right of Access: To obtain confirmation of whether we process personal data about you and, if so, to receive a copy of that data.
– Right of Rectification: To request correction of inaccurate or incomplete data concerning you.
– Right to Erasure (“Right to be Forgotten”): To request deletion of your personal data where the legal basis for processing no longer applies.
– Right to Restriction: To limit the processing of your data under certain conditions.
– Right to Data Portability: To receive your data in a structured, commonly used, machine-readable format and the right to transmit it to another controller.
If you wish to exercise any of your rights, please contact us at [email protected].
6. Security Measures
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, disclosure, or destruction. These include but are not limited to:
– Encryption of data at rest and in transit.
– Access controls and user authentication.
– Daily system backups and secure hosting.
– Employee training on privacy and data protection.
7. International Transfers
Where personal data is transferred outside of the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as the use of Standard Contractual Clauses (SCCs), adequacy decisions, or other lawful mechanisms, to ensure that your data is handled in a manner consistent with EU and other applicable laws.
8. Data Retention
We retain your personal data based on the type of information and the purpose of processing:
– Account and Profile Data: Retained while your user account remains active or as necessary to provide services.
– Transactional Data: Stored for a minimum of seven years in accordance with financial and accounting legal obligations.
– Communication Data: Retained for up to three years after your last contact with us.
– Usage and Technical Data: Maintained for up to 12 months for analytics purposes unless legally required for longer retention.
– Preference Data: Held until you revoke consent or update your preference settings.
Once data is no longer needed for its intended purpose, it will be securely deleted or anonymized.
9. Cookie Policy
canmeximports.com uses cookies and similar technologies to enhance user experience, perform analytics, and manage marketing efforts. Cookies are categorized as follows:
– Essential Cookies: Necessary for the basic operation of our website and services.
– Functional Cookies: Enable enhanced personalization and remember your site preferences.
– Performance and Analytics Cookies: Help us analyze site usage to improve functionality and design.
– Marketing Cookies: Track interactions with our marketing materials and product interests.
10. Cookie Management and Compliance
Upon your first visit to canmeximports.com, a cookie consent banner allows you to manage your preferences and accept or reject optional cookies. You may also adjust your cookie preferences at any time through your browser settings or by revisiting our cookie settings page. We honor Do Not Track (DNT) signals and offer opt-out mechanisms in compliance with CCPA and GDPR.
11. Children’s Privacy
Our website and services are not directed to children under the age of 13, and we do not knowingly collect personal data from individuals in this demographic. If we become aware that we have inadvertently collected data from a child under 13, we will take prompt steps to delete such information. Parents or legal guardians concerned about data related to their children should contact us at [email protected].
12. Policy Updates and Notifications
We reserve the right to revise or update this Privacy Policy from time to time to reflect changes in legal requirements, our business operations, or privacy practices. Users will be notified of any significant material changes through prominent notices on canmeximports.com or through direct communication, where appropriate. Continued use of our services indicates your acceptance of the updated policy.
13. Contact Us
For questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us at:
Email: [email protected]
Website: https://canmeximports.com
We are committed to maintaining the highest standards of privacy compliance and encourage users to reach out to us with any privacy-related concerns or data access requests.