Scope and identity
This Privacy Policy applies to personal information connected with visits to this website, product and order requests submitted through the website, and communications about those requests. The website is presented under the Ah-Cykj name. The company information provided for the website is set out below.
This policy is intended to make the handling of personal information understandable before a visitor chooses to provide it. It explains what information may be collected, the purposes for which it may be used, when it may be disclosed, the choices available to visitors, and how questions about personal information can be raised.
Canadian privacy requirements can differ depending on the circumstances and the province or territory involved. This policy is intended to operate together with applicable privacy rights and does not reduce rights that cannot lawfully be limited by website terms.
Information we may collect
When you submit an order request, the information you choose to provide may include your name, email address, telephone number, selected product, quantity and any message entered in the form. When you contact the company separately, the information may include the contact details and message content you decide to provide.
The website is not designed to request payment-card numbers, passwords, government identification numbers or other authentication credentials through a general order or contact message. Visitors should not include such information unless it is specifically required and an appropriate transaction process has been provided for that purpose.
Ordinary website delivery can also generate technical information associated with a browser request. Depending on the systems used to host and secure the website, this can include information such as an IP address, browser or device characteristics, requested pages, date and time of a request, referring information and diagnostic or security records.
Information is not treated as outside the scope of privacy considerations merely because it is technical. Where technical information can be associated with an identifiable individual or linked with other information in a way that makes identification reasonably possible, it should be handled consistently with the privacy obligations that apply to that information.
How information is collected
Most information connected with an order request is collected directly from the visitor who chooses to complete a website form. The labels beside the form fields are intended to show what information is being requested before the form is submitted. Visitors can decide not to submit a request if they do not want to provide the required information.
Information may also arise from subsequent communications about the same request. For example, a visitor may provide clarification about the model selected, quantity, delivery question or another transaction detail. Information supplied later should be used in the context in which it was provided unless a new purpose is explained and any required consent or other lawful basis is addressed.
Technical information may be produced automatically as part of delivering and protecting a website. Cookie and similar browser technologies are addressed separately below and in the Cookie Policy so that optional tracking purposes are not hidden inside a general description of technical operation.
Why personal information may be used
Information submitted in an order request may be used to understand which product and quantity you selected, respond to the request, clarify information needed to continue the transaction, communicate about the requested purchase and maintain records reasonably connected with that interaction.
Information submitted with a product, website or policy question may be used to understand and respond to the question, follow up where more context is necessary, and maintain a reasonable record of the communication. Information should not be repurposed for a materially different activity without considering whether additional notice, consent or another lawful basis is required.
Technical information associated with website delivery may be used to provide pages requested by the visitor, maintain reliability, diagnose errors, protect the site against misuse, investigate security events and understand whether core site functions are operating correctly.
Where optional analytics or marketing technologies are used, their purposes should be described separately from essential website operation. Optional activities should not be described as essential simply because they are useful to the website operator.
Consent, transparency and visitor choices
Where consent is required, information about the relevant collection, use or disclosure should be provided in a form that a reasonable visitor can understand. Important points should not depend on a visitor discovering them only after personal information has already been submitted.
Website forms present the information requested at the point of collection. By choosing to submit a request, you provide the information shown in those fields for the purposes connected with responding to and administering that request. If the company seeks to use the same information for an unrelated purpose that is not reasonably apparent from the original interaction, that different purpose should be addressed separately where required.
You can choose not to send an order request or separate communication through the website. Where optional browser technologies are presented, the cookie notice provides choices described in the Cookie Policy. A choice relating to optional tracking should not be treated as consent to an unrelated use of information.
Consent may be withdrawn where the law permits, subject to legal, contractual or practical consequences that should be explained when relevant. Withdrawal does not necessarily require deletion of information that must still be retained for a lawful reason, but it should affect future handling to the extent required by applicable law.
Disclosure, service providers and legal requirements
Personal information may need to be handled by service providers that support functions such as website hosting, communications, security, transaction administration or other operational services actually used in connection with a request. A provider should receive only the information reasonably necessary for the function it performs and should handle that information subject to appropriate obligations.
This policy does not name a provider that has not been identified in the information supplied for this website. If a third-party service is introduced in a way that materially affects privacy, the relevant notice should be updated so visitors can understand the role of that service where required.
Information may also be disclosed where required by applicable law, a lawful process, or where disclosure is reasonably necessary to establish, exercise or defend legal rights. A general possibility of legal disclosure is not a reason to make personal information broadly available.
The website does not present visitor personal information as a product for sale. Any disclosure should remain connected with a stated purpose, a valid consent where required, an applicable legal requirement, or another basis permitted by law.
Retention and deletion
Personal information should be retained only for as long as reasonably necessary for the purpose for which it was collected, for related transaction administration, for legitimate record-keeping, to address disputes or questions, or where a longer period is required or permitted by applicable law.
Different categories of information can reasonably require different retention periods. A short-lived technical record used to diagnose a website error does not necessarily need to be retained for the same period as information connected with a completed transaction. Retention decisions should therefore be linked to the purpose and sensitivity of the information rather than a single universal period.
When information is no longer required, reasonable steps should be taken to delete it, anonymize it where appropriate, or otherwise prevent it from continuing to be used as identifiable personal information except where retention remains lawful and necessary.
Safeguards and responsible handling
Reasonable administrative and technical safeguards should be used to protect personal information against unauthorized access, use, alteration, loss or disclosure. The appropriate safeguards depend on factors such as the sensitivity of the information, the amount of information involved, how it is stored and the risks associated with the relevant systems.
Access to personal information should be limited to people or providers that need it for a legitimate function connected with the stated purpose. Information should not be made more widely available merely because it has been submitted through a website.
No internet transmission or storage environment can be described as completely risk-free. Visitors can reduce unnecessary exposure by avoiding the inclusion of passwords, payment credentials or other sensitive information in general enquiry fields when that information is not required for the purpose of the message.
If a privacy or security incident materially affects personal information, the response should be handled in accordance with the obligations that apply in the circumstances, including assessment, containment, documentation and notification where legally required.
Access, correction and privacy questions
You may use the company contact details shown on this website to ask about personal information associated with your website interaction, request access where applicable, ask for a correction of information you believe is inaccurate or incomplete, or raise a concern about how information has been handled.
A request should describe the information or interaction concerned with enough detail to be understood. The company may need to take reasonable steps to verify that the requester is entitled to receive or change the information involved before disclosing it. Verification should be proportionate to the request and should not require unnecessary sensitive information.
There may be circumstances in which access, correction or deletion is limited by applicable law, legal privilege, the rights of another person, record-retention requirements or another permitted reason. Where a request cannot be fulfilled in full, the handling of that request should be consistent with the legal requirements that apply.
Nothing in this policy prevents a visitor from using a complaint or oversight process available under applicable privacy law. The policy is intended to explain the website’s practices, not to replace statutory rights or remedies.
Changes to this policy and how to contact us
This Privacy Policy may be updated when website functions, the product-order process, privacy practices or applicable legal requirements change. The current version published on this page applies from the time it is posted unless a different effective arrangement is required by law.
A material change that affects the way personal information is collected, used or disclosed should be communicated in a manner appropriate to the significance of the change. Where renewed consent is required, publishing revised wording alone should not be treated as a substitute for the consent process required in the circumstances.
Privacy questions, access or correction requests, and concerns about this policy can be raised using the company telephone number or email address shown in the company information above. When contacting the company, provide only the information reasonably necessary to identify and address the request.