Controller: Braxylonphep • 91 Rylander Blvd #7, Scarborough, ON M1B 5M5, Canada • Email: inquiry@braxylonphep.world • Phone: +1 888 372 2252
1. Introduction and Scope
This Privacy Policy describes how Braxylonphep ("we," "us," or "our"), operating the website at braxylonphep.world (the "Website"), collects, uses, discloses, and safeguards personal information in connection with the sale of the dietary supplement product Vita5Corex and related services.
We are committed to protecting personal information in accordance with applicable Canadian federal and provincial privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and its successor provisions under the Consumer Privacy Protection Act (CPPA), as well as the European Union's General Data Protection Regulation (GDPR) to the extent it applies to individuals located in the European Economic Area.
By accessing and using our Website and placing an order, you acknowledge that you have read, understood, and agree to the collection and use of your information as described in this Policy. If you do not agree, please discontinue use of the Website.
2. Information We Collect
We collect personal information that you voluntarily provide to us, as well as certain technical information automatically generated when you use our Website.
2.1 Information You Provide Directly
- Order and Contact Forms: Full name, email address, telephone number (optional), and delivery address or message content when you submit an order or enquiry through our Website forms.
- Communication Records: The content and metadata of communications you initiate with us by email, telephone, or any other channel, including questions, complaints, and feedback.
- Consent Records: A record of your consent to our Privacy Policy and Terms of Service at the time of order submission, including timestamp, IP address, and form identifier.
2.2 Information Collected Automatically
- Log Data: IP address, browser type and version, operating system, referring URL, pages visited, time and date of visit, and time spent on pages.
- Cookies and Tracking Technologies: Session and persistent cookies, local storage tokens, and similar technologies as described in our Cookie Policy.
- Device Data: Device type, screen resolution, and general geographic location derived from IP address (country/province level).
2.3 Information We Do Not Collect
We do not intentionally collect sensitive personal information such as health conditions, financial account details (payment processing is handled by third-party processors who do not share raw card data with us), racial or ethnic origin, religious beliefs, biometric data, or information from children under the age of 16.
3. How We Use Your Information
We rely on the following legal bases (under GDPR) and lawful purposes (under PIPEDA) for processing your personal information:
| Purpose | Data Used | Legal Basis (GDPR) | PIPEDA Basis |
|---|---|---|---|
| Order fulfillment and delivery | Name, email, phone, address | Performance of a contract (Art. 6(1)(b)) | Consent / Contractual necessity |
| Customer service and enquiry response | Name, email, message content | Legitimate interests (Art. 6(1)(f)) | Consent |
| Sending order confirmations and shipping updates | Name, email | Performance of a contract (Art. 6(1)(b)) | Contractual necessity |
| Legal and regulatory compliance | All applicable data | Legal obligation (Art. 6(1)(c)) | Legal obligation |
| Website analytics and improvement | Log data, cookies (if consented) | Consent (Art. 6(1)(a)) or Legitimate interests | Consent |
| Fraud prevention and security | IP address, log data | Legitimate interests (Art. 6(1)(f)) | Legitimate interests |
| Marketing communications (if opted in) | Name, email | Consent (Art. 6(1)(a)) | Express consent |
We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects on you without your explicit consent.
4. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information to third parties for their independent marketing purposes. We may share your information in the following limited circumstances:
4.1 Service Providers
We engage carefully selected third-party service providers who process data on our behalf under binding data processing agreements. These include:
- Payment processors (e.g., Stripe or equivalent) for secure transaction handling. Payment processors operate under PCI-DSS compliance and we do not retain raw payment card data.
- Shipping and logistics partners (e.g., Canada Post, courier services) who require your name and delivery address to fulfill your order.
- Email service providers for sending transactional emails and order notifications.
- Hosting and infrastructure providers for secure website operation.
- Analytics providers (only if you have consented to analytics cookies), such as anonymized aggregate traffic analysis tools.
4.2 Legal Disclosure
We may disclose personal information when required by applicable law, court order, or regulatory authority, or when necessary to protect the rights, property, or safety of Braxylonphep, its customers, or the public.
4.3 Business Transfers
In the event of a merger, acquisition, sale of assets, or corporate restructuring, your personal information may be transferred to the acquiring entity. We will provide notice before your personal information is transferred and becomes subject to a materially different privacy policy.
4.4 Cross-Border Data Transfers
Your personal information is primarily stored and processed in Canada. Some of our service providers may process data outside Canada, including in the United States or European Economic Area. Where such transfers occur, we ensure that adequate safeguards are in place, including Standard Contractual Clauses (SCCs) for transfers from the EEA, and equivalent mechanisms under PIPEDA. You may request information about the specific safeguards in place by contacting us.
5. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specific retention periods include:
| Data Category | Retention Period | Rationale |
|---|---|---|
| Order records (name, address, product, amount) | 7 years from order date | Canadian tax and accounting obligations (CRA requirements) |
| Customer service communications | 3 years from last interaction | Limitation periods for civil claims |
| Consent records (form submissions) | 3 years from collection | Demonstrating lawful basis for processing |
| Website log data (access logs) | 12 months | Security monitoring and fraud prevention |
| Analytics data (aggregated, anonymized) | 26 months maximum | Trend analysis (anonymized, no personal identifiers) |
| Marketing email lists (if consented) | Until withdrawal of consent | Consent-based; deleted promptly upon unsubscribe |
When retention periods expire, data is securely deleted or anonymized using industry-standard procedures.
6. Your Rights
Depending on your location and applicable law, you have the following rights regarding your personal information:
6.1 Rights Under PIPEDA (Canada)
- Right of Access: You may request a copy of the personal information we hold about you and information about how it is used.
- Right to Correction: You may request that inaccurate or incomplete personal information be corrected.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
- Right to Lodge a Complaint: You may file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca.
6.2 Additional Rights Under GDPR (EEA Residents)
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where there is no longer a lawful basis for retaining it.
- Right to Restriction of Processing: Request that we limit how we use your data in certain circumstances.
- Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format.
- Right to Object: Object to processing based on legitimate interests, including direct marketing.
- Right Not to be Subject to Automated Decision-Making: Not to be subject to decisions based solely on automated processing that significantly affect you.
- Right to Lodge a Complaint with a Supervisory Authority: You may contact the data protection authority in your EU member state.
To exercise any of these rights, please contact us at inquiry@braxylonphep.world. We will respond within 30 days of receipt of a verifiable request. In complex cases, this period may be extended by an additional 60 days (with notice). We may need to verify your identity before processing requests.
7. Cookies and Tracking Technologies
We use cookies and similar technologies on our Website to provide core functionality, analyze usage patterns (with consent), and support relevant content delivery (with consent). You can manage your cookie preferences at any time using the cookie consent banner or by contacting us.
For detailed information about the cookies we use, their categories, purposes, and durations, please review our Cookie Policy.
8. Security Measures
We implement appropriate technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, or destruction. Our security measures include:
- Transport Layer Security (TLS 1.2 or higher) for all data transmitted between your browser and our servers (HTTPS).
- Encryption of sensitive data at rest using industry-standard encryption algorithms (AES-256).
- Access controls ensuring that personal data is accessible only to authorized personnel who require it for legitimate business purposes.
- Regular security assessments, penetration testing, and vulnerability management procedures.
- Data minimization practices: we collect only the personal information necessary for the stated purposes.
- Staff training on data protection obligations and our internal data handling procedures.
- Incident response procedures to detect, investigate, and notify affected individuals and regulators of data breaches within required timeframes (72 hours under GDPR; as soon as feasible under PIPEDA).
While we implement robust safeguards, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, but we are committed to using reasonable and commercially appropriate measures to protect your information.
9. Children's Privacy
Our Website and products are intended for adults aged 18 and over. We do not knowingly collect personal information from individuals under the age of 16. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will delete such information promptly.
10. Third-Party Links
Our Website may contain links to third-party websites (for example, shipping carrier tracking pages or regulatory authority websites). We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of any third-party sites you visit.
11. Marketing Communications
We will only send you marketing or promotional emails if you have expressly consented to receive them. Each marketing email will contain a clearly labeled unsubscribe link. You may opt out at any time by clicking the unsubscribe link or by emailing us at inquiry@braxylonphep.world with "Unsubscribe" in the subject line. We comply with Canada's Anti-Spam Legislation (CASL).
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. The date of the most recent revision will always be shown at the top of this page. Where changes are material, we will provide prominent notice on our Website and, where appropriate, notify you directly by email. Continued use of the Website after the effective date of a revised Policy constitutes your acceptance of the changes.
13. Contact Us and Privacy Officer
If you have any questions, concerns, or requests related to this Privacy Policy or our data practices, please contact our Privacy Officer:
Braxylonphep – Privacy Officer
91 Rylander Blvd #7, Scarborough, ON M1B 5M5, Canada
Email: inquiry@braxylonphep.world
Phone: +1 888 372 2252
Hours: Monday to Friday, 9:00 AM – 5:00 PM ET
If you are not satisfied with our response, you have the right to contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca or your relevant EU supervisory authority if you are located in the EEA.