Effective date:
Privacy Policy
This Privacy Policy explains how Brizelonchex.world collects, uses, discloses, and protects personal data when you visit our website, request information about Viona, or interact with our team. We align our practices with the EU General Data Protection Regulation where it applies, the UK GDPR where relevant, and Canadian private-sector privacy statutes including the Personal Information Protection and Electronic Documents Act as applicable.
Who we are
The operator of this website and the data controller for personal data described here is Brizelonchex.world, located at 10 Lower Jarvis Street, Toronto, ON M5E 1Z2, Canada. You can reach our privacy office at talk@brizelonchex.world. When we say “we,” “us,” or “our,” we mean this operator unless we identify another entity as a joint controller or processor.
Scope of this policy
This policy applies to personal data processed through https://brizelonchex.world, email correspondence directed to our published addresses, and forms that collect contact details for Viona orders or inquiries. It does not govern third-party platforms that we link to but do not control; those services maintain their own notices.
If you apply for a role with us in the future, a separate applicant privacy notice may apply and will be provided at collection.
Categories of personal data
Depending on your interaction, we may process:
- Identity and contact details: full name, email address, telephone number if provided, billing or shipping address when you place an order, and similar identifiers.
- Transaction data: order references, product selections, payment status flags, and delivery confirmations as transmitted by payment partners.
- Communications: free-text messages you submit through forms, chat transcripts if offered, and email threads with our support team.
- Technical and usage data: IP address, device type, browser version, operating system, approximate region derived from IP, referring URL, pages viewed, and timestamps.
- Preference and consent records: cookie choices, marketing opt-ins or opt-outs, and newsletter subscriptions where available.
- Fraud and security signals: hashed identifiers, failed login counts if accounts exist, and abuse reports.
We avoid collecting sensitive categories of data unless you voluntarily include them in a message and such collection is permitted by law. Please do not send health information unless we explicitly request it for a specific, lawful purpose.
Purposes and legal bases under the GDPR
Where the GDPR applies, we rely on the following bases:
- Contract (Article 6(1)(b)): processing necessary to respond to purchase requests, deliver products, and provide customer support tied to an order.
- Legitimate interests (Article 6(1)(f)): securing our website, understanding aggregate usage, improving content, enforcing terms, and preventing fraud, balanced against your rights.
- Consent (Article 6(1)(a)): non-essential cookies, marketing emails where required, and optional surveys.
- Legal obligation (Article 6(1)(c)): tax, accounting, and regulatory record-keeping.
Canadian law requires identified purposes and consent or implied consent where appropriate; the purposes above satisfy that standard for comparable activities.
How we use personal data in practice
We route inquiries to the right team, confirm orders, and issue transactional emails.
We may contact you about recalls or label updates when regulators or our quality team requires outreach.
Aggregate statistics help us prioritize content updates and detect broken pages.
We retain records needed to establish, exercise, or defend legal claims.
Cookies and similar technologies
We use cookies as described in our Cookie Policy. Essential cookies operate the site and remember your consent banner choice. Optional analytics or marketing cookies load only when permitted. You can adjust browser settings and revisit our banner choices at any time.
Disclosures to recipients
We share personal data with:
- Infrastructure and hosting providers that store website files and databases under written agreements.
- Email and ticketing services that deliver messages on our behalf.
- Payment processors that handle card or wallet transactions; their privacy notices apply to payment fields.
- Logistics partners that print shipping labels and track parcels.
- Professional advisers such as accountants or lawyers when confidentiality duties apply.
- Authorities when required by lawful requests, court orders, or public safety obligations.
We require service providers to use data only for contracted services and to apply appropriate security measures.
International transfers
Your data may be processed in Canada, the United States, the European Economic Area, or the United Kingdom depending on our vendors. Where the GDPR applies and data leaves the EEA or UK, we implement Standard Contractual Clauses or other approved mechanisms, supplemented by technical and organizational measures such as encryption in transit and access minimization.
Retention
Marketing and consent logs
Kept for up to twenty-four months after your last interaction unless a longer period is needed to prove consent.
Order and accounting records
Retained for the period required by tax and commercial law, commonly six to seven years in many jurisdictions.
Support emails
Typically retained up to thirty-six months after closure unless litigation or regulatory review requires longer storage.
Security logs
Often rotated within ninety days unless an investigation extends retention.
Security measures
We implement HTTPS, role-based access, least-privilege credentials, vendor due diligence, and staff training on phishing and data handling. While we strive to protect your information, no online transmission is perfectly secure; please use unique passwords and report suspicious messages claiming to be from us.
Your rights
Depending on your location, you may have rights to access, rectify, erase, restrict, or port your personal data, to object to certain processing, and to withdraw consent where processing is consent-based. You may also lodge a complaint with a supervisory authority in the EU or UK, or with the Office of the Privacy Commissioner of Canada for matters under PIPEDA.
To exercise rights, email talk@brizelonchex.world with “Privacy request” in the subject line. We may need to verify your identity before responding within the timelines required by law.
Children
Our website is not directed to children under sixteen. We do not knowingly collect personal data from children. If you believe we have received such data, contact us and we will delete it as required.
Automated decision-making
We do not make solely automated decisions that produce legal or similarly significant effects about you. Scoring or filtering of support tickets, if introduced, will involve human review.
Changes to this policy
We may update this Privacy Policy to reflect operational, legal, or technical changes. The effective date at the top will change when revisions are material. Continued use after posting constitutes notice of updates where permitted; where consent is required, we will seek it separately.