Privacy Policy

1. Who We Are

CAMEROND ("we", "us", "our") operates this website. Our Privacy Officer, responsible for personal information protection, can be reached at cscamerond@gmail.com.

2. Information We Collect

You provide:

• Account data: username, password (hashed), optional name
• Order data: shipping address, billing address, phone, email
• Payment data: handled by Shopify Payments / Stripe — we never store card numbers
• Communications: emails and support messages you send us

Collected automatically:

• Technical: IP address, browser type, device, OS
• Usage: pages visited, products viewed, session duration

3. Purpose of Collection

We collect personal information only for specific, legitimate purposes:

• Fulfill orders: process payments, ship products, communicate shipping status
• Account management: authenticate you, maintain your profile, sync cart/wishlist
• Customer support: respond to inquiries, handle returns and refunds
• Security: prevent fraud, enforce our Terms, audit logs
• Legal compliance: tax records, dispute resolution, regulatory obligations
• Marketing (opt-in only): newsletters, new product alerts, promotions

4. Legal Basis

Processing is based on: (a) contract performance for order processing; (b) your consent for marketing communications; (c) legitimate interest for security and fraud prevention; and (d) legal obligation for tax and compliance records.

5. Sharing with Third Parties

We share limited data only with:

• Shopify Inc. — e-commerce infrastructure, payment processing
• Neon / Databricks — database hosting
• Vercel Inc. — website hosting
• Shipping carriers (Canada Post, USPS, UPS, FedEx) — delivery fulfillment
• Resend — transactional email delivery

We never sell your personal information. We do not share your data for advertising purposes without explicit consent.

6. Cross-Border Data Transfers

Our providers store data in Canada and the United States. We rely on standard contractual clauses and industry-standard protections. By using our services, you acknowledge that your personal information may be processed in either country.

7. Your Rights

Depending on your jurisdiction, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete data
• Delete your account and associated data
• Portability: receive your data in a structured, machine-readable format
• Withdraw consent for marketing at any time (unsubscribe links)
• Object to certain processing activities
• California residents have additional rights under the CCPA/CPRA, including the right to opt out of the sale or sharing of personal information (we do not sell or share).

To exercise your rights, email cscamerond@gmail.com. You can also delete your account directly from Settings, or request a full data export. We will respond within 30 days.

8. Data Retention

We keep your data only as long as necessary for the stated purposes or as required by law:

• Account data: until you delete your account
• Order records: 7 years (tax/accounting requirement)
• Support communications: 2 years
• Marketing consent: until withdrawn
• Anonymous analytics: 26 months

9. Security Measures

We apply industry-standard safeguards including:

• HTTPS encryption in transit (TLS 1.3)
• Passwords hashed with bcrypt
• Payment data tokenized by Shopify / Stripe (PCI-DSS Level 1)
• Two-factor authentication (2FA) available for all accounts
• Rate limiting and bot protection on API endpoints
• Regular security audits and vulnerability scanning

In the event of a data breach affecting your personal information, we will notify affected customers and relevant authorities as required by applicable law.

10. Children

Our services are not directed to children under 13 (US) or under 14 (Canada). We do not knowingly collect data from minors. If you believe a minor has provided us with personal information, contact cscamerond@gmail.com for immediate deletion.

11. Policy Updates

We may update this policy. Material changes will be communicated by email or a prominent site notice at least 30 days before taking effect.

12. Contact

All privacy inquiries: cscamerond@gmail.com