Privacy Policy

1. Introduction and Data Controller
   Acrylicsteps (“we,” “us,” or “our”) operates the website www.acrylicsteps.com (the “Site”) and is committed to protecting the privacy and personal data of our users and customers. For the purposes of applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (GDPR), and the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA), www.acrylicsteps.com is the Data Controller responsible for the processing of your personal data.

This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our Site or purchase our clear shoe box products. Our commercial operations are registered in Canada, and our sales activities are directed exclusively to customers located within Europe.

2. Information We Collect
   We collect personal data necessary to fulfil your orders, manage account registration, and provide a functional browsing experience. This information includes:

Identity Data: First name and surname.

Contact Data: Billing address, delivery address, email address, and telephone number.

Transaction Data: Details concerning products purchased from us and payments processed.

Technical Data: Internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types, operating system, and platform.

3. Legal Basis and Purpose of Data Processing
   We process your personal data under the following lawful bases:

Performance of a Contract: To process, fulfil, and deliver your orders, and to manage updates regarding your transactions.

Legal Compliance: To comply with statutory accounting, tax, and corporate obligations in Canada and Europe.

Legitimate Interests: To maintain the functionality, performance, and commercial viability of our Site, ensuring a reliable interface for consumers.

4. Data Sharing and Third-Party Processors
   To complete transactions and maintain operations, we share specific elements of your personal data with trusted service providers.

All financial transactions are handled securely by our external payment processing partner, Stripe. When you proceed to checkout, your payment details are provided directly to Stripe, whose use of your personal information is governed by their respective privacy standards.

We also transfer necessary contact and shipping details to our dedicated logistics providers to manage fulfillment and delivery from our regional storage facilities to your designated European address.

5. International Data Transfers
   As a Canadian-based entity serving European consumers, your data will be transferred to and processed within Canada. Canada has been formally recognized by the European Commission as providing an adequate level of data protection under the statutory provisions of PIPEDA. Any subsequent transfers to service providers operating in other jurisdictions are executed under approved legal mechanisms, including Standard Contractual Clauses (SCCs).
6. Data Retention
   We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including the satisfaction of any legal, accounting, tax, or statutory reporting requirements.

Transaction and Order Records: Retained for a standard period of 7 years following the completion of the contract, in compliance with applicable corporate, tax, and revenue laws.

General Enquiries: Retained for up to 2 years from the date of the last communication to ensure continuous support.

Upon the expiration of the retention period, personal data is permanently deleted or irreversibly anonymized.

7. Data Security
   We implement appropriate technical and organizational measures to safeguard personal data against unauthorized access, alteration, disclosure, or destruction. While we utilize industry-standard protocols aligned with modern commercial practices to mitigate risks, no method of transmission over the internet or electronic storage can be deemed entirely impenetrable. We maintain systematic review protocols to manage and address potential vulnerabilities.
8. Your Statutory Rights
   Depending on your residency within Europe or Canada, you possess specific legal rights regarding your personal information:

Right of Access: The right to request copies of the personal data we hold about you.

Right to Rectification: The right to request the correction of inaccurate or incomplete information.

Right to Erasure: The right to request the deletion of your personal data, subject to statutory retention overrides (e.g., ongoing tax or legal obligations).

Right to Restrict or Object to Processing: The right to limit how we process your data under specific statutory conditions.

Right to Data Portability: The right to request the transfer of your data to another organization.

To exercise any of these rights, please contact us using the verified email address provided below.

9. Contact Details
   For any enquiries regarding this Privacy Policy, your data protection rights, or the handling of your personal information, please contact our data compliance officer:

Company Name: [XXX]

Corporate Email: transparent@acrylicsteps.com

Registered Address: [XXX]

Telephone Number: [XXX]

Registration Number: [XXX]