PRIVACY POLICY

This Privacy Policy describes how your personal information is collected, utilised, and shared when you visit or make a purchase from www.coilcraftset.com (the “Site”). The operational framework of coilcraftset is grounded in statutory transparency and alignment with international data governance standards.

1. Data Controller
   For the purposes of the General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, and the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA), the legal entity responsible for processing your personal data is the Data Controller:
   Data Controller Name: [Insert Company Name]
   Registered Canadian Address: [Insert Company Address, Canada]
   Corporate Contact Telephone: [Insert Company Phone Number]
   Official Data Operations Contact: manual@coilcraftset.com
2. Personal Data Collected
   When you interact with the Site, specific categories of informational elements are required to facilitate your transaction and maintain corporate records:
   Device Information: Including web browser details, general location markers, time zone attributes, and technical routing identifiers transmitted during your access to the domain.
   Order Information: When a purchase of our manual egg roll maker is initiated, we collect specific fields required to fulfill the request, including customer name, billing address, shipping address, electronic mail reference, and telephone coordinates.
3. Purpose of Processing and Payment Facilitation
   Your personal data is handled under established lawful bases, primarily the performance of a commercial contract to fulfill transactions initiated on the domain. We share standard informational subsets with verified structural infrastructure providers necessary to complete consumer orders:
   Payment Processing via Stripe: All monetary transactions executed on this domain are processed directly by our external transactional partner, Stripe. To complete order transactions, necessary payment parameters and foundational identity data are securely routed through the Stripe infrastructure. Stripe manages, reviews, and stores this transactional information according to its independent regulatory compliance protocols and corporate privacy guidelines.
   Logistics Operations: Basic name and geographic address details are shared exclusively with our global postal and courier networks to allow delivery of physical items directly from our corporate facilities.
4. Data Retention Framework
   We preserve personal information only for the duration necessary to satisfy the commercial and statutory purposes for which it was originally gathered, in compliance with Canadian corporate regulations, PIPEDA, and European financial accountability frameworks:
   Transactional Records: Financial parameters, tax logs, and order histories linked to purchases are retained for a mandatory statutory baseline of seven (7) years to satisfy Canadian Revenue Agency (CRA) guidelines, fiscal audit obligations, and European Union corporate record-keeping requirements.
   Communication Data: Inquiries routed through manual@coilcraftset.com are maintained for a period of up to two (2) years from the resolution of the matter to preserve operational history and administrative continuity.
5. Rights of European and Canadian Data Subjects
   Depending on your geographic location, you possess distinct statutory entitlements under GDPR, UK GDPR, or PIPEDA, which may be exercised by contacting our administration via electronic mail:
   Access and Rectification: The right to request an extract of the personal records we hold, or to correct inaccuracies in your operational profile.
   Erasure and Restriction: The right to request the deletion or limitation of processing concerning your personal datasets, subject to prevailing statutory data retention mandates (such as tax and anti-fraud regulations).
   Data Portability: The right to obtain your provided data in a structured, standard electronic format.
6. Operational Safeguards
   We maintain systematic administrative and physical procedures appropriate to the nature of the data processed, aimed at mitigating unauthorized access, alteration, or disclosure. Operational procedures are periodically updated to reflect standard administrative practices. Data transmission over the internet utilizes industry-standard encryption protocols during transit.
7. Policy Amendments
   This statement may undergo regular updates to reflect operational changes, administrative adjustments, or legislative adaptations within Canadian and European jurisdictions. The updated version will be marked by the modification date displayed at the head of this document.