Privacy Policy

Cardigan helvetica sriracha, portland celiac truffaut woke

Swastik Elegance Privacy Policy

Last Updated: [01st July 2025]
Applicable Laws: Quebec Law 25, GDPR, CCPA, PIPEDA

1. Data Controller

Swastik Elegance
📍 Blainville, QC, Canada
📞 +1 438-930-0389
📧 support@swastikelegance.ca

2. Information We Collect

CategoryExamplesPurposeLegal Basis
Identity DataName, billing/shipping addressOrder fulfillmentContractual necessity
Contact DataEmail, phone numberOrder updates, fraud preventionLegitimate interest
Financial DataLast 4 digits of payment cards (processed via Woocommerce Payments)Transaction processingLegal obligation
Technical DataIP address, browser typeAnalytics, securityConsent (cookie banner)
Marketing DataEmail open ratesPersonalized ads (if opted-in)Consent

3. How We Use Your Data

  • Order Processing: Share with Shopify, Canada Post/FedEx (address only).

  • Marketing: Only with opt-in consent (unsubscribe anytime).

  • Security: Fraud screening via Shopify’s tools.

4. International Data Transfers

Your data may transit through:

  • USA (Shopify’s servers – protected by SCCs).

  • EU/UK (If you’re located there).

We ensure compliance via:
✓ Standard Contractual Clauses (SCCs)
✓ Data Minimization (Only necessary data shared)

5. Your Rights

RightHow to ExerciseResponse Time
AccessEmail support@swastikelegance.ca30 days
DeletionSubmit via customer portal30 days
CorrectionEdit in account settingsImmediate
PortabilityRequest data export30 days
Opt-Out of MarketingUnsubscribe link or email us48 hours

Quebec-Specific: Right to request anonymization of data under Law 25.

6. Data Retention

Data TypeRetention Period
Order records7 years (tax compliance)
Marketing consentsUntil withdrawal
Cookies30 days to 2 years (see below)

7. Cookies & Tracking

Essential Cookies (Cannot opt-out):

  • _session_id (Shopify checkout)

  • cart (2 weeks)

Analytics Cookies (Opt-out via banner):

  • Google Analytics (anonymized IPs)

8. Children’s Privacy

❌ We do not knowingly collect data from users under 16. Parents may request deletion of minors’ data.

9. Security Measures

  • Encryption: AES-256 for stored data, SSL for transmissions.

  • Access Controls: Role-based staff permissions.

  • Breach Protocol: Notify affected users within 72 hours if risk is high.

10. Third-Party Processors

ProviderPurposePrivacy Policy
ShopifyHosting, paymentsView
Canada PostShippingView
KlaviyoEmail marketing (if used)View

11. Policy Updates

  • Minor changes: Posted on this page.

  • Major changes: Email + site banner for 30 days.

12. Contact & Complaints

For Data Requests:
📧 support@swastikelegance.ca
✉️ Quebec, Canada

Complaints:
Quebec residents may contact the CAI.