Last updated:
1. Organization Responsible for Personal Information
Under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and comparable provincial laws where they apply, the organization responsible for your personal information is:
Restorevrbonesai
105 McBryan Dr, Hay River, NT X0E 0R6, Canada
Email: helpcenter@restorevrbonesai.world
Website: https://restorevrbonesai.world
2. Personal Data We Collect
We collect the following categories of personal data:
2.1 Information You Provide Directly
- Order form data: full name, email address, phone number (optional), and any message you include when placing an order.
- Consent records: records of your agreement to our Privacy Policy and Terms of Use.
- Communications: any correspondence you send to us via email.
2.2 Information Collected Automatically
- Technical data: IP address, browser type and version, operating system, device type, screen resolution.
- Usage data: pages visited, time spent on pages, referring URLs, click patterns.
- Cookie data: information collected through cookies and similar technologies as described in our Cookie Policy.
3. Purposes of Processing
We process your personal data for the following purposes:
- Order processing: to receive, process, and fulfill your orders for Digelora dietary supplement.
- Communication: to respond to your inquiries and provide customer support.
- Legal compliance: to comply with applicable laws, regulations, and legal processes.
- Website improvement: to analyze usage patterns and improve our website functionality and user experience (with your consent for analytics cookies).
- Marketing: to send relevant information about our products, only with your explicit consent.
4. Legal Basis for Processing
4.1 Canada (PIPEDA and applicable provincial law)
We collect, use, and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances and with meaningful consent where required. Depending on the situation, we rely on:
- Consent: when you place an order, subscribe to updates (where offered), accept non-essential cookies, or otherwise agree to specific uses of your information.
- Performance of a transaction: processing needed to fulfill your order, communicate about it, and provide support.
- Legal requirements: when we must retain or disclose information to comply with Canadian law, court orders, or lawful requests from authorities.
- Legitimate business purposes: where permitted by law, such as fraud prevention, security, and improving our services, in a manner proportionate and consistent with your reasonable expectations.
If you are in Quebec, the Act respecting the protection of personal information in the private sector (Law 25) may also apply, including rules on consent, transparency, and certain transfers.
4.2 European Union (GDPR)
If EU data protection law applies to you, we process personal data on the following bases under the GDPR:
- Consent (Article 6(1)(a)): when you provide explicit consent, such as agreeing to our terms when placing an order, or opting into marketing communications or analytics cookies.
- Contractual necessity (Article 6(1)(b)): when processing is necessary for the performance of a contract, such as fulfilling your order.
- Legal obligation (Article 6(1)(c)): when we are required to process data to comply with legal obligations.
- Legitimate interests (Article 6(1)(f)): when processing is necessary for our legitimate interests, such as improving our services, provided your rights do not override these interests.
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Order data: retained for 5 years from the date of the last transaction, as required by applicable tax and accounting laws.
- Communication records: retained for 2 years from the date of the last communication.
- Consent records: retained for the duration of the consent and for 3 years thereafter to demonstrate compliance.
- Technical and usage data: retained for up to 26 months from the date of collection.
- Cookie data: retained in accordance with the durations specified in our Cookie Policy.
When data is no longer required, it is securely deleted or anonymized.
6. Your Privacy Rights
6.1 Rights under Canadian law
Subject to applicable exceptions in PIPEDA or provincial statutes, you generally have the right to:
- Access: request access to the personal information we hold about you.
- Accuracy: request correction of inaccurate or incomplete information.
- Withdraw consent: where we rely on consent, you may withdraw it for future uses (subject to legal or contractual restrictions).
- Challenge compliance: ask how we use your information and raise concerns about our practices.
You may file a complaint with the Office of the Privacy Commissioner of Canada (OPC) if you are not satisfied with our response. The OPC’s website is priv.gc.ca. Depending on your province, you may also contact a provincial privacy commissioner (for example, British Columbia, Alberta, or Quebec) where applicable.
6.2 Rights under the GDPR (if applicable)
If EU data protection law applies to you, you may have the following rights:
- Right of access (Article 15): you can request a copy of your personal data that we hold.
- Right to rectification (Article 16): you can request correction of any inaccurate or incomplete personal data.
- Right to erasure (Article 17): you can request deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
- Right to restriction (Article 18): you can request that we restrict the processing of your personal data in certain circumstances.
- Right to data portability (Article 20): you can request your personal data in a structured, commonly used, machine-readable format.
- Right to object (Article 21): you can object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
- Right to withdraw consent: you can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
- Right to lodge a complaint: you have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.
To exercise any of these rights, please contact us at helpcenter@restorevrbonesai.world. We will respond within a reasonable time and, where the GDPR applies, within 30 days unless an extension is permitted by law.
6.3 Commercial Electronic Messages (CASL)
We comply with Canada’s Anti-Spam Legislation (CASL). We send commercial electronic messages (such as product or promotional emails) only where permitted by law—typically with your express or implied consent, with clear identification of the sender, and with a functional unsubscribe mechanism. You may withdraw consent to marketing messages at any time using the unsubscribe link in those messages or by contacting us at the email address above.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- HTTPS encryption for all data transmitted between your browser and our website.
- Secure storage of personal data with access limited to authorized personnel only.
- Regular security assessments and updates to our systems and processes.
- Data minimization: we only collect data that is necessary for the stated purposes.
8. Third-Party Sharing
We do not sell your personal data to third parties. We may share data with:
- Service providers: trusted third-party companies that assist with order fulfillment, payment processing, email delivery, and website analytics, bound by data processing agreements.
- Legal authorities: when required by law, regulation, or legal process.
All third-party service providers are contractually obligated to protect your data and use it only for the specified purposes.
9. International Data Transfers
We may use service providers located in Canada or other countries. When personal information is transferred outside Canada, we take steps that are reasonable in the circumstances to ensure a comparable level of protection, including contractual measures where appropriate. If EU data protection law applies, we also use mechanisms such as Standard Contractual Clauses approved by the European Commission where required.
10. Children’s Privacy
Our website and products are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. Any significant changes will be communicated by updating the “Last updated” date at the top of this page. We encourage you to review this policy periodically.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us:
Restorevrbonesai
105 McBryan Dr, Hay River, NT X0E 0R6, Canada
Email: helpcenter@restorevrbonesai.world