This Privacy Policy outlines how Canadian Learning Supply Inc. (hereafter referred to as the “Data Controller”, “we”, “us”, or “our”) collects, utilises, retains, and protects personal data when you interact with www.crystalstorebox.com. This document is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada and the General Data Protection Regulation (GDPR) in the European Union.
1. The Data Controller
For the purposes of data protection legislation, the Data Controller is: Canadian Learning Supply Inc. Registration Number: 1519886-1 701685349RC0001 101 Shawinigan Rd SW Calgary, AB T2Y 2N7 Canada Email: transparent@crystalstorebox.com Telephone: +1 4037071718
2. Information We Collect
To fulfil orders for our transparent plastic drawer storage boxes and provide customer support, we collect the following categories of personal data:
- Identity Data: First name and last name.
- Contact Data: Billing address, delivery address, email address, and telephone number.
- Transaction Data: Details regarding the items you have purchased from us.
- Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, operating system, and hardware details used to access www.crystalstorebox.com.
3. Payment Processing via Stripe
We utilise Stripe as our payment processing entity. When you finalise a purchase on www.crystalstorebox.com, your payment details are transmitted directly to Stripe via an encrypted connection.
We do not capture, process, or store your full payment card details on our internal servers. Stripe collects and processes this data in accordance with its own regulatory obligations as a financial institution. We only receive a secure token and a confirmation of the transaction outcome to allow us to dispatch your ordered goods.
4. How We Utilise Your Data
We process your personal data under the following lawful bases:
- Contractual Necessity: To process your order, arrange for delivery to European addresses, and manage post-purchase communications such as refunds or returns.
- Legal Obligation: To maintain accurate financial and tax records as mandated by Canadian and European regulatory authorities.
- Legitimate Interest: To analyse general website traffic, maintain operational integrity, and administer customer support.
5. Data Retention Periods
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Our retention schedule is as follows:
- Order and Transaction Data: Retained for a period of six (6) years following the end of the financial year in which the transaction occurred, to comply with Canadian Revenue Agency (CRA) and applicable European tax authority statutory requirements.
- Customer Communication Records: Retained for two (2) years after the resolution of an enquiry to ensure continuity of service.
- Technical and Usage Data: Retained for up to twelve (12) months for routine system administrative purposes before being aggregated or permanently deleted.
Upon the expiration of these retention periods, your personal data will be securely and permanently erased from our operational systems.
6. Cookie Policy
Our website utilises cookies to maintain fundamental site functionality and analyse visitor interactions. We deploy the following categories of cookies:
- Strictly Necessary Cookies: Essential for the operation of the website, including enabling you to add items to your shopping cart and proceed to checkout.
- Performance/Analytical Cookies: These cookies allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for efficiently.
- Marketing/Targeting Cookies: These cookies record your visit to our website, the pages you have visited, and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests.
You may manage your cookie preferences through the banner provided upon your first visit to www.crystalstorebox.com or via your browser settings.
7. Data Security
We implement commercially reasonable organisational and technical measures designed to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. While we employ rigorous protocols—including data encryption in transit and restricted internal access—no digital transmission or storage system can be wholly impervious to risk.
8. International Data Transfers
As Canadian Learning Supply Inc. is domiciled in Canada, the data collected from our European customers is transferred to and processed in Canada. Canada has been recognised by the European Commission as providing an adequate level of data protection (Adequacy Decision), ensuring your data remains subject to robust legal safeguards comparable to those mandated by the GDPR.
9. Your Statutory Rights
Under the GDPR and PIPEDA, you possess the following rights regarding your personal data:
- The Right to Access: You may request a copy of the personal data we hold about you.
- The Right to Rectification: You may request the correction of any inaccurate or incomplete data.
- The Right to Erasure: You may request the deletion of your personal data where there is no compelling legal or operational reason for its continued processing.
- The Right to Restrict Processing: You may request the suspension of data processing activities under specific circumstances.
- The Right to Data Portability: You may request the transfer of your data to another organisation in a structured, commonly used format.
To exercise any of these rights, please submit a formal request via email to transparent@crystalstorebox.com. We shall respond to all legitimate requests within thirty (30) days.