Privacy Policy

1. Introduction

At Elvirax Café, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (www.elvirax.com) or our physical location. This policy complies with Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA).

2. Information We Collect

We may collect the following types of information:

Personal Information You Provide

• Contact Information: Name, email address, phone number, and mailing address when you contact us, sign up for our newsletter, or book services
• Booking Information: Details about workshop or event bookings, including preferences and special requests
• Payment Information: Credit card details or other payment information (processed securely through third-party payment processors)
• Correspondence: Information you provide when you contact us via email, phone, or our contact form
• Feedback: Reviews, comments, or other feedback you voluntarily provide

Automatically Collected Information

• Usage Data: IP address, browser type, device information, pages visited, time spent on pages, and referring website
• Cookies and Tracking: Information collected through cookies and similar technologies (see our Cookie Policy for details)
• Location Data: General geographic location based on IP address

3. How We Use Your Information

We use the information we collect for lawful business purposes, including:

• Processing and fulfilling orders, bookings, and reservations
• Communicating with you about your inquiries, bookings, or feedback
• Sending you newsletters, promotional materials, and updates (with your consent)
• Improving our website, services, and customer experience
• Analyzing website usage and trends to optimize performance
• Detecting and preventing fraud or security issues
• Complying with legal obligations and enforcing our terms
• Managing customer loyalty programs and special offers

4. Legal Basis for Processing

We process your personal information based on:

• Consent: You have given clear consent for us to process your information for specific purposes
• Contract: Processing is necessary to fulfill a contract we have with you (e.g., booking a workshop)
• Legal Obligation: Processing is necessary to comply with applicable laws
• Legitimate Interests: Processing is necessary for our legitimate business interests, provided your rights don't override these interests

5. Sharing Your Information

We do not sell your personal information. We may share your information with:

• Service Providers: Third-party companies that help us operate our business (e.g., payment processors, email service providers, hosting providers)
• Business Partners: Local suppliers or partners when necessary to fulfill services
• Legal Requirements: Law enforcement or regulatory authorities when required by law or to protect our rights
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner

All third parties are required to maintain the confidentiality and security of your information and may only use it for the purposes we specify.

6. Google Ads Policy Compliance

Elvirax Café's website and content comply with Google Ads policies. We do not engage in or promote:

• The sale or promotion of restricted or prohibited products
• Misleading or false claims about our products or services
• Content that violates intellectual property rights
• Deceptive practices or fraudulent schemes
• Harmful or dangerous content
• Unsubstantiated health claims or medical advice

We maintain honest and transparent advertising practices in all our communications and comply with applicable advertising standards.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure Socket Layer (SSL) encryption for data transmission
• Secure servers and encrypted databases
• Regular security assessments and updates
• Restricted access to personal information on a need-to-know basis
• Employee training on privacy and security practices

However, no method of transmission over the Internet is completely secure, and we cannot guarantee absolute security.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Typically:

• Contact form inquiries: Retained for 2 years
• Booking and transaction records: Retained for 7 years for accounting purposes
• Marketing communications: Until you unsubscribe or request deletion
• Website analytics: Aggregated and anonymized after 26 months

9. Your Privacy Rights

Under Canadian privacy law, you have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Withdrawal of Consent: Withdraw your consent for us to use your information for specific purposes
• Opt-Out: Unsubscribe from marketing communications at any time
• Data Portability: Request your data in a structured, commonly used format
• Complaint: Lodge a complaint with the Office of the Privacy Commissioner of Canada

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

10. Children's Privacy

Our website and services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly.

11. Third-Party Websites

Our website may contain links to third-party websites (such as social media platforms or partner sites). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

12. International Data Transfers

Your information may be transferred to and processed in countries other than Canada. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a new "Last Updated" date. Significant changes will be communicated via email or a prominent notice on our website. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Elvirax Café
Privacy Officer
9016 129b Ave NW
Edmonton, AB T5E 0P5
Canada
Email: [email protected]
Phone: +1 250-233-1024

15. Complaint Resolution

If you are not satisfied with our response to your privacy concern, you have the right to contact the Office of the Privacy Commissioner of Canada:

Office of the Privacy Commissioner of Canada
30 Victoria Street
Gatineau, Quebec K1A 1H3
Toll-free: 1-800-282-1376
Website: www.priv.gc.ca