Privacy Policy - Sheaxero

1. Introduction

At sheaxero.com (“Website”, “we”, “us”, or “our”), we are committed to protecting and respecting your privacy. This Privacy Policy outlines our dedication to safeguarding your personal information and explains how we collect, use, share, and protect your data when you access or interact with our Website. We operate with a privacy-first philosophy and process your data in full compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Scope of This Policy and Our Role as Data Controller

This Privacy Policy applies to all visitors, users, and others who access sheaxero.com. For purposes of data protection laws, sheaxero.com is the “data controller” of your personal data, which means we determine the purposes and means of processing your personal information when you interact with our Website or services.

3. Categories of Personal Data We Process

We collect and process various types of data to operate effectively and provide you with tailored services, including but not limited to:

a. Usage Data:
Includes information about how you use our Website, including IP address, browser type, device identifiers, geographical data, session duration, page views, and referring URLs.

b. Account Data:
Includes your name, email address, phone number, physical address, and other information necessary to create or maintain an account on sheaxero.com.

c. Profile Data:
Refers to your preferences, interests, purchase history, browsing behavior, and interactions with our content and services.

d. Communication Data:
Includes all correspondence sent between you and us, such as customer support messages, inquiries submitted through contact forms, and other communication records.

e. Technical Data:
Includes device type, operating system, system settings, screen resolution, and other similar technical information that helps optimize your experience.

f. Transaction Data:
Contains data related to purchases or orders made through our Website, including payment details (processed through secure third-party gateways), billing and shipping information.

g. Preference Data:
Involves your choices for receiving marketing communications from us, your product category interests, and your communication preferences.

4. Legal Bases for Processing Personal Data

We process your personal data under the following legal bases as permitted by GDPR and CCPA:

– Consent: Where you have explicitly agreed to the processing of your personal data for a specific purpose, including marketing communications and cookie usage.
– Contract Performance: Where processing is necessary to fulfill a contract with you, such as providing purchased services or products.
– Legitimate Interests: For purposes of improving the Website, preventing fraud, analyzing usage patterns, and maintaining security—unless overriding your fundamental rights.
– Legal Obligation: Where processing is required to comply with applicable laws or regulatory obligations.

5. Your Rights

Under the GDPR and CCPA, you are entitled to the following rights with respect to your personal data:

– Right of Access: Obtain confirmation of whether your data is being processed and access to your personal data.
– Right to Rectification: Request correction of inaccurate or incomplete personal data.
– Right to Erasure: Request deletion of your personal data under certain conditions.
– Right to Restriction: Limit processing of your data where specific grounds apply.
– Right to Portability: Request a structured, machine-readable copy of your data for transfer to another service provider.
– Right to Object: Withdraw consent or object to certain processing activities, including direct marketing.
– Right Not to Be Subject to Automated Decision-Making: We do not engage in profiling or automated decision-making that significantly affects users.

To exercise your rights, please contact us at [email protected]. We may request additional information to verify your identity before fulfilling your request.

6. Security Measures

We implement robust technical and organizational measures to protect your personal data, including but not limited to:

– Encryption of data at rest and in transit.
– Role-based access controls and authenticated system access.
– Secure data storage solutions with regular vulnerability assessments.
– Routine data backups and disaster recovery planning.
– Regular security training for team members and contractors.

7. International Data Transfers

Where your personal data is transferred outside the European Economic Area (EEA) or other regions with applicable data protection laws, we ensure adequate protections by:

– Entering into Standard Contractual Clauses approved by the European Commission.
– Implementing supplementary technical and organizational measures.
– Ensuring transfers only occur to jurisdictions with an adequate level of data protection.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. Typical retention periods include:

– Usage & Technical Data: Up to 12 months for analytics and system diagnostics.
– Account & Profile Data: Retained throughout the active period of your account and up to 6 years after closure.
– Communication Data: Retained for 2 years for support and service quality tracking.
– Transaction Data: Retained for 7 years to fulfill tax and accounting requirements.
– Preference Data: Deleted upon withdrawal of consent or inactivity for 24 months.

Upon expiration of these periods, data is securely deleted or anonymized.

9. Cookie Policy

sheaxero.com uses cookies and tracking technologies to enhance user experience and analyze website traffic. Categories of cookies used include:

– Essential Cookies: Necessary for the core functionality of the Website (e.g., login, shopping cart).
– Functional Cookies: Help remember user preferences and settings.
– Analytics Cookies: Collect aggregated data on user behavior to improve performance.
– Performance Cookies: Optimize load times and responsiveness.

10. Cookie Management and Compliance

In compliance with GDPR and CCPA, we obtain your consent before deploying non-essential cookies. You can manage your cookie preferences at any time through the cookie banner or your browser settings. Most browsers allow you to block or delete cookies; however, doing so may impact core functionality.

We honor “Do Not Track” signals and comply with other applicable opt-out mechanisms as required by regional data protection laws.

11. Children’s Privacy

Our services are not intended for use by children under the age of 13. We do not knowingly collect personal data from anyone under this age. If we become aware that we have inadvertently collected data from a child under 13, we will promptly delete such information. Parents or guardians who believe their child has provided us personal data may contact us at [email protected].

12. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our legal obligations, data processing practices, or Website functionality. Updated versions will be posted on this page and take effect upon publication. Material changes will be clearly communicated where feasible.

13. Contact Us

If you have any questions, comments, or concerns regarding this Privacy Policy, or wish to exercise your data protection rights, please reach out to us at:

Email: [email protected]
Website: https://sheaxero.com

We are committed to full compliance with the applicable data protection regulations and to resolving any issues or concerns you may have with transparency and respect for your privacy.