Privacy Policy

1. Who we are

This policy explains how CABIN FLUX® COMPANY Ltd. ("CABIN FLUX", "we", "us"), based at 302 Queen Street West, Toronto, Ontario, Canada, handles your personal data when you visit cabinflux.com, place an order, or contact us. We are the data controller responsible for your information.

We handle personal data in line with Canada's PIPEDA and, where it applies, the EU/UK GDPR.

2. What data we collect

We only collect data you give us or that's needed to provide our service:

• Contact form. Your name, email address, subject and message when you write to us.
• Orders. Your name, shipping and billing address, email, phone number and order details. Payment card data is handled directly by our payment provider — we never see or store full card numbers.
• Newsletter. Your email address, if you choose to subscribe.
• Site usage. Limited technical data such as your device type, browser and pages viewed, collected via cookies and analytics (see below).

3. How we use your data

We use your personal data to:

• Process, fulfil and deliver your orders, and handle returns, exchanges and warranty claims
• Respond to your enquiries and provide customer support
• Send order and shipping updates
• Send marketing emails and news — only where you've opted in, and you can unsubscribe at any time
• Improve our website, products and service
• Prevent fraud and meet our legal and accounting obligations

We rely on the legal bases of performing our contract with you, your consent (for marketing), and our legitimate interests in running and improving the business.

4. Cookies & analytics

We use cookies and similar technologies to make the site work, remember your cart, and understand how the site is used through privacy-respecting analytics. Essential cookies are needed for the site to function; analytics and marketing cookies are optional. You can manage or block cookies through your browser settings at any time, though some features may not work without the essential ones.

5. Third parties we share data with

We never sell your personal data. We share it only with trusted providers who help us run the shop, and only as far as they need it to do their job:

• Payment processors — to take payment securely
• Shipping & courier partners (UPS, DHL, FedEx) — to deliver your order
• Email & newsletter tools — to send order updates and, if you opt in, marketing
• Analytics providers — to understand and improve site performance

These providers are bound to protect your data and use it only for the services we've engaged them for. Some may process data outside your country; where they do, we take steps to ensure appropriate safeguards are in place.

6. Data retention

We keep your personal data only for as long as we need it: order and transaction records for as long as required by tax and accounting law; contact enquiries for as long as needed to resolve them and for reasonable follow-up; and newsletter data until you unsubscribe. When data is no longer needed, we securely delete or anonymise it.

7. Your rights

You have the right to:

• Access the personal data we hold about you
• Correct data that's inaccurate or incomplete
• Delete your data, where we're not required to keep it
• Object to or restrict certain processing, including direct marketing
• Withdraw consent at any time, and unsubscribe from marketing via the link in any email
• Request portability of the data you've provided to us

To exercise any of these rights, contact us using the details below. We'll respond within the timeframes set by applicable law.

8. Security

We use appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access, including encryption in transit and restricted access to personal information. No method of transmission over the internet is completely secure, but we work hard to keep your information safe.

9. Privacy contact

For any privacy question or to exercise your rights, please reach us through our Contact page or write to CABIN FLUX® COMPANY Ltd., 302 Queen Street West, Toronto, ON, Canada. If you're in the EU or UK and believe we haven't handled your data properly, you also have the right to complain to your local data-protection authority.