1. Data Controller
Carstashpro is the data controller responsible for personal data collected through www.carstashpro.com, including information provided when placing an order, contacting customer service or browsing our website.
Business Name: Carstashpro
Address: 3170 Ridgeway Dr #15, Mississauga, ON L5L 5R4, Canada
Email: gear@carstashpro.com
Telephone: +1 905 824 4473
Website: www.carstashpro.com
We handle personal data in accordance with applicable Canadian privacy legislation and, where applicable, the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (GDPR) and related data protection laws.
2. Information We Collect
We may collect the following information:
- Contact details: name, email address, telephone number and delivery address.
- Order information: purchased items, order number, transaction amount, delivery details and refund records.
- Payment information: payment status, transaction references and related billing details. Card payments are processed by Stripe.
- Customer communications: messages and information submitted through our contact channels.
- Website information: IP address, browser details, device information and website usage data, where collected through cookies or similar technologies.
We collect information relevant to processing orders, providing customer service, maintaining business records and meeting applicable legal obligations.
3. How We Use Personal Data
Personal data may be used to:
- Process purchases, payments, returns and refunds.
- Communicate about orders and customer enquiries.
- Maintain transaction, accounting and tax records.
- Identify suspicious transactions and address potential misuse.
- Operate, maintain and improve our website.
- Meet legal obligations and establish, exercise or defend legal claims.
For individuals covered by the GDPR or UK GDPR, processing is based, as applicable, on contractual necessity, compliance with legal obligations, legitimate interests or consent. Where consent is the legal basis, it may be withdrawn at any time without affecting prior lawful processing.
4. Payments Processed by Stripe
We use Stripe to process payments made through our website. When you complete a purchase, relevant personal and transaction information may be provided to Stripe, including your name, email address, billing details, transaction amount, order information and payment method details.
Stripe processes payment information to facilitate transactions and, where applicable, to support payment verification, fraud detection, regulatory compliance and related services.
Depending on the processing activity, Stripe acts as our data processor or as an independent data controller for its own purposes. Stripe handles personal data in accordance with its own privacy terms.
For further information, please read the Stripe Privacy Policy.
5. Cookies and Website Usage
Our website may use essential cookies and similar technologies to support shopping functions, remember preferences and maintain website operation.
Where analytics, advertising or other non-essential cookies require consent, they will be used in accordance with applicable requirements. You may manage available cookie preferences through the website’s cookie settings or your browser.
6. Disclosure of Personal Data
We may share relevant personal data with service providers involved in payment processing, website hosting, order administration, customer communications, accounting and other necessary business operations.
Information may also be disclosed where required by law, to comply with a lawful request from a competent authority, or where reasonably necessary to establish or defend legal claims.
We do not sell personal data to third parties.
7. International Data Transfers
Personal data may be processed or stored in Canada or other countries where our service providers operate, including countries outside the European Economic Area or the United Kingdom.
Where applicable data protection law requires safeguards for an international transfer, appropriate transfer mechanisms will be used, such as an adequacy decision or approved contractual safeguards.
8. Data Retention
We retain personal data only for as long as necessary for the purposes described in this policy or for periods required by applicable law.
Our usual retention periods are:
- Order and customer service records: up to 24 months after completion of the relevant order, unless a longer period is required for a legal claim, unresolved enquiry or statutory obligation.
- Accounting, tax and transaction records: for the period required by applicable tax, accounting and business record-keeping laws. Where Canadian federal tax record rules apply, certain records generally must be retained for six years from the end of the relevant tax year.
- Payment records held by Stripe: retained in accordance with Stripe’s applicable retention practices, legal obligations and privacy terms.
- Marketing preferences and consent records: retained while relevant to the applicable marketing activity and for a reasonable period afterwards to record and respect your preferences.
- Website logs and cookie-related information: retained only for the period reasonably necessary for the relevant operational, analytical or legal purpose, subject to applicable consent requirements.
Where information is no longer required, it will be deleted, securely destroyed or anonymised, unless retention remains necessary under applicable law or for the establishment, exercise or defence of legal claims.
9. Your Privacy Rights
Depending on your location and applicable law, you may have the right to:
- Request access to personal data we hold about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of personal data where the legal conditions are met.
- Request restriction of processing in applicable circumstances.
- Object to processing based on legitimate interests.
- Request a copy of certain personal data in a portable format.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with the relevant data protection authority.
These rights are subject to applicable legal conditions and exceptions, including requirements to retain certain transaction or accounting records.
To submit a privacy request, contact gear@carstashpro.com. We may request information reasonably necessary to verify your identity before responding.
10. Data Protection
We apply administrative and organisational measures appropriate to the nature of the personal data we handle. Access to personal data is limited to circumstances relevant to our business operations and applicable obligations.
Where a personal data breach occurs, we will take the steps required by applicable law, including notifying relevant authorities or affected individuals where legally required.
11. Children’s Privacy
Our website is intended for general consumers and is not directed at children. We do not knowingly collect personal data from children in circumstances where parental authorisation or other legal requirements apply.
12. Changes to This Policy
We may update this Privacy Policy to reflect changes in our business practices, website functions or applicable legal requirements. The revised version will be published on this page with an updated revision date.
13. Contact for Privacy Matters
For questions, access requests, correction requests or other matters relating to personal data, please contact:
Carstashpro
3170 Ridgeway Dr #15
Mississauga, ON L5L 5R4
Canada
Email: gear@carstashpro.com
Telephone: +1 905 824 4473
Website: https://www.carstashpro.com