1. Accountability

Xaysi has designated a Privacy Officer who is responsible for ensuring compliance with PIPEDA and this Canada Regional Privacy Policy. Our Privacy Officer oversees data handling practices, staff training, and responds to your privacy inquiries.

Contact our Privacy Officer: privacy.canada@xaysi.ca

2. Identifying Purposes

We collect personal information only for identified purposes, including:

• Processing orders and payments for Canadian buyers.
• Providing customer support and resolving disputes.
• Improving marketplace safety, fraud prevention, and analytics.
• Complying with legal and regulatory obligations in Canada.
• Communicating transactional and promotional updates (with consent).

3. Consent

We obtain your express or implied consent before collecting or using your personal information. By registering, making a purchase, or using our Services, you consent to the practices described in this policy. You may withdraw consent at any time by contacting our Privacy Officer, subject to legal and contractual limitations.

For sensitive information (e.g., health-related data), we will obtain explicit consent.

4. Limiting Collection

We limit the collection of personal information to what is necessary for the purposes identified. We do not collect information indiscriminately. Examples include name, address, payment details, email, and transaction history.

5. Limiting Use, Disclosure & Retention

We do not use or disclose your personal information for purposes other than those for which it was collected, except with your consent or as required by law. We retain personal information only as long as necessary to fulfill identified purposes or meet legal requirements (e.g., tax records for 7 years). After that, data is securely anonymized or destroyed.

Disclosure to third parties: We may share data with service providers (payment processors, delivery partners) who are contractually bound to protect your information and use it only for authorized services.

6. Accuracy

We rely on you to provide accurate and up-to-date personal information. You can update your account details at any time. If we become aware of inaccuracies, we will take reasonable steps to correct them.

7. Safeguards

We protect your personal information with security measures appropriate to the sensitivity of the data, including encryption, access controls, secure servers, and regular security audits. All employees and contractors are trained on privacy obligations.

8. Openness & Transparency

This Canada Regional Privacy Policy is available on our website. We also provide clear information about our privacy practices in plain language. You may request a copy of our policies from our Privacy Officer.

9. Individual Access

Upon written request, we will inform you of the existence, use, and disclosure of your personal information and provide you with access to that information within 30 days. You may challenge the accuracy and completeness of your information and request amendments.

To request access: Email privacy.canada@xaysi.ca. A minimal fee may apply for administrative costs, which we will disclose in advance.

10. Challenging Compliance

If you have concerns about our compliance with PIPEDA, please contact our Privacy Officer. We will investigate and respond within a reasonable timeframe. If the issue is not resolved, you may file a complaint with the Office of the Privacy Commissioner of Canada (OPC).

OPC contact: www.priv.gc.ca | 1-800-282-1376