Your privacy matters at xoqra

1. Data controller and scope

The controller responsible for processing your personal data is:

xoqra.com
Website: www.xoqra.com
Email: [email protected]

This Privacy Policy applies to your use of our Website, including any account features, checkout, order management, and customer support communications.

2. Applicable laws and regional disclosures

We provide services to customers in Australia, Canada, the United States, and the Rest of World. Depending on where you live, privacy laws and rights may apply, including:

• United States: state privacy laws where applicable (e.g., California Consumer Privacy Act).
• Canada: PIPEDA and applicable provincial laws.
• Australia: Australian Privacy Principles (APPs).
• Rest of World: local data protection laws as applicable.

3. Shipping service locations

Our store ships to Australia, Canada, the United States, and the Rest of World. Shipping and delivery services are provided through logistics partners covering these regions.

4. Categories of personal data we collect

Depending on how you use our Website, we may collect and process the following categories of personal data:

• Contact and account data (e.g. name, email address, telephone number, billing and shipping address, account login details).
• Order data (e.g. goods purchased, order history, order status, delivery information, refunds/returns information).
• Communications (e.g. emails, messages, customer service requests, and related records).
• Device and usage data (e.g. IP address, browser type, device identifiers, operating system, access times, pages viewed, and referring URLs).
• Cookie and preference data (e.g. saved preferences, session identifiers, and similar technologies as described below).

5. Sources of personal data

• Directly from you when you place an order, create an account, subscribe to communications, or contact us.
• Automatically when you use the Website (e.g. through server logs, cookies, and similar technologies).
• From service providers that help us operate the Website and fulfil orders (e.g. payment and shipping service providers).

6. How we use your personal data

We use personal data for the following purposes:

• To operate the Website and provide core functionality (e.g. shopping cart, account login, order checkout).
• To process and fulfil orders, including shipping and delivery.
• To provide customer service and respond to requests, returns, exchanges, and other support inquiries.
• To send service-related messages (e.g. order confirmations, shipping updates, policy or notice changes).
• To improve our Website, prevent fraud, and maintain the security of our systems.
• Where permitted, to send marketing communications. You can opt out at any time.

7. Cookies and similar technologies

We use cookies and similar technologies to enable core site functions (such as maintaining your cart and login session), remember preferences, and help us understand how the Website is used. You can manage cookies through your browser settings. Some cookies are essential for the Website to function properly.

8. Payments and third-party payment processing

Our online store uses secure payment gateways (e.g., Stripe, PayPal). When you pay, your payment details are provided directly to the payment processor through encrypted connections. We do not store any full payment information, including complete card numbers, security codes, or bank account details. We may receive limited payment-related information (payment status, transaction reference, and amount) to confirm your payment and manage your order.

9. When we share personal data

We may share personal data with the following categories of recipients as needed to operate our services:

• Payment processing: Stripe, PayPal, or similar to process payments and prevent fraud.
• Shipping and logistics: carriers and logistics partners to deliver orders to Australia, Canada, USA, and Rest of World.
• Website operations: hosting providers and technical service providers (e.g. infrastructure, maintenance, email delivery).
• Legal and compliance: authorities or professional advisers where required to comply with law or protect our rights.

We share data only as necessary for the purposes described in this Policy and take steps to ensure service providers use appropriate safeguards.

10. International data transfers

Your personal data may be processed in countries other than where you live because we and our service providers may operate in multiple locations. Where applicable, we take reasonable steps to ensure appropriate protections are in place for such transfers.

11. Data retention

We keep personal data only as long as necessary for the purposes described in this Policy, including providing services, meeting legal obligations, resolving disputes, and enforcing agreements. Order and transaction records are retained for as long as needed to meet accounting, tax, and legal requirements. When data is no longer required, we delete it or anonymise it in a reasonable and secure manner.

12. Data security

We use technical and organisational measures designed to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction. Security measures may include, as appropriate: SSL/TLS encryption for data transmission; restricted access controls; account authentication protections; routine software and security updates; monitoring for suspicious activity; and backup and recovery procedures. While we take reasonable steps to protect your information, no method of transmission over the internet or electronic storage is completely secure.

13. Your choices and rights

You may request access to, correction of, or deletion of certain personal data where applicable. You may also opt out of marketing communications at any time by using the unsubscribe link (if provided) or by contacting us. To exercise your privacy-related requests, please contact us at [email protected]. If you are a resident of certain jurisdictions, you may have additional rights under applicable law, such as the right to know, access, delete, or correct personal information, and to opt out of certain processing where required.

14. Children’s privacy

Our Website and services are not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us so we can take appropriate action.

15. Third-party links

Our Website may contain links to third-party websites. We do not control and are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any information.

16. Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. The updated version will be posted on this page.

17. Contact us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Email: [email protected]