Privacy Policy

This Privacy Policy describes how Thorxianvorx ("we", "our", or "the Company"), located at 11-5016 47 Ave, Red Deer, AB T4N 3P7, Canada, collects, uses, discloses, and protects personal information you provide through the website thorxianvorx.world (the "Site"). This policy applies to all visitors and persons who submit information through the Site.

By using this Site, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Site.

1. Data Controller

The data controller responsible for your personal information is:

2. Information We Collect

We collect the following categories of personal information when you interact with our Site:

• Identification data: full name, email address, telephone number.
• Communication data: messages or enquiries you submit through our order form.
• Technical data: IP address, browser type, operating system, referring URLs, pages visited, and time spent on the Site (collected via cookies and similar technologies).
• Consent records: records of your cookie preferences and GDPR consent.

We do not collect payment card information directly. Order processing is handled through secure third-party channels.

3. Legal Basis for Processing (GDPR / PIPEDA)

We process your personal data based on the following lawful grounds:

• Contractual necessity: to process and fulfil your order request.
• Consent: where you have given explicit consent (e.g., by ticking the GDPR checkbox, accepting analytics cookies).
• Legitimate interests: to improve the Site, detect fraud, and maintain the security of our systems.
• Legal obligation: where we are required by law to retain certain records.

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), we obtain consent for collection, use, and disclosure of personal information and allow you to withdraw that consent at any time, subject to legal or contractual restrictions.

4. How We Use Your Information

We use collected personal information for the following purposes:

• To respond to your order enquiries and process requests.
• To communicate with you about your order status.
• To send operational communications (e.g., order confirmations).
• To analyse Site performance and improve user experience (with consent).
• To comply with our legal and regulatory obligations.
• To prevent fraud and ensure website security.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

5. Data Sharing and Disclosure

We may share your information with:

• Service providers: trusted third-party vendors who assist in operating our website and business (e.g., web hosting, email delivery, order fulfilment), bound by confidentiality obligations.
• Legal authorities: where required by applicable law, court order, or governmental authority.
• Business transfers: in the event of a merger, acquisition, or asset sale, your data may be transferred to the successor entity.

6. International Data Transfers

Your data is primarily processed in Canada. If any data is transferred outside Canada (e.g., to service providers in the EU or US), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) where required under GDPR, and equivalent mechanisms under PIPEDA.

7. Data Retention

Data Category	Retention Period
Order enquiry / contact form data	3 years from last contact
Technical / analytics data	26 months
Cookie consent records	1 year
Legal / compliance records	7 years (as required by Canadian law)

After the applicable retention period, data is securely deleted or anonymised.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your personal data, subject to legal obligations.
• Right to restrict processing: request that we limit how we use your data.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to object: object to processing based on legitimate interests.
• Right to withdraw consent: withdraw any consent previously given at any time.

To exercise any of these rights, contact us at the details in Section 1. We will respond within 30 days. If you are in the EU/EEA, you also have the right to lodge a complaint with your local data protection supervisory authority.

9. Cookies

We use cookies and similar tracking technologies. For full details, please refer to our Cookie Policy.

10. Children's Privacy

Our Site is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has submitted personal data to us, please contact us and we will promptly delete it.

11. Security

We implement industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include HTTPS encryption, access controls, and regular security assessments. However, no method of electronic transmission or storage is 100% secure.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised version on this page with an updated effective date. We encourage you to review this page periodically. Continued use of the Site after changes constitutes acceptance of the updated policy.

13. Contact Us