Privacy Policy

Last updated: 3 April 2026

This Privacy Policy explains how Smryxellshchexao (“we”, “us”) handles personal information when you visit https://smryxellshchexao.world/ or contact our Alberta studio. As a private-sector organization operating in Canada, we begin with the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and the Alberta Personal Information Protection Act (PIPA) for information collected about our staff, contractors, and Alberta clients where provincial law applies. Where visitors access the site from other regions, we also respect comparable rights under GDPR, UK GDPR, or local statutes when offering goods or services abroad.

Data controller

Smryxellshchexao
1029 Banff Ave, Banff, AB T1L 1H8, Canada
Email: customer@smryxellshchexao.world
Phone: +1 888 338 0433

Categories of personal data

We may process:

Identity and contact data you submit (name, email address, message content).
Technical data such as browser type, device identifiers, and IP address collected through logs or analytics.
Preference data from cookie choices stored in your browser.
Communications metadata (timestamps, subject lines) needed to respond to you.

Purposes and legal bases

We process personal data to:

Respond to inquiries and provide requested general lifestyle information (contractual necessity or legitimate interest in serving our audience).
Operate, secure, and improve our website (legitimate interest; consent where required for non-essential cookies).
Comply with laws, including record-keeping for financial or regulatory obligations (legal obligation).
Send optional marketing communications only with your consent, where such communications are offered.

Data retention

Contact form submissions are retained for up to twenty-four months unless a longer period is required for unresolved disputes, legal claims, or accounting records. Server security logs typically rotate within ninety days. Analytics aggregates may be stored longer in depersonalized form. Cookie consent records are kept twelve months to demonstrate compliance.

Sharing and processors

We use trusted service providers for hosting, email delivery, analytics, and customer relationship workflows. Each provider processes data under written agreements that require confidentiality, security measures, and processing only on our instructions. We do not sell personal data.

International transfers

If data is transferred outside your region, we implement appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or equivalent mechanisms recognized under GDPR, UK GDPR, or PIPEDA guidance.

Security measures

We apply HTTPS encryption, access controls, least-privilege accounts, vendor due diligence, and staff training. No system is perfectly secure; if we detect a high-risk incident, we will notify regulators and affected individuals where the law requires.

Your rights

Depending on your location, you may have the right to:

Access the personal data we hold about you.
Rectify inaccurate information.
Erasure (“right to be forgotten”) where applicable.
Restrict or object to certain processing, including direct marketing.
Data portability where processing is automated and based on consent or contract.
Withdraw consent at any time without affecting the lawfulness of earlier processing.
Lodge a complaint with your supervisory authority.

Submit requests using the email address above. We may need to verify identity before disclosing information.

Canadian complainants

If you believe we mishandled personal information in a manner contrary to PIPEDA, you may contact the Office of the Privacy Commissioner of Canada (OPC). For matters governed exclusively by Alberta PIPA, you may reach the Office of the Information and Privacy Commissioner of Alberta (OIPC). Formal investigations belong to those regulators; emailing us first often resolves practical questions faster.

Breach notification

We maintain internal breach assessment procedures. Where the law requires, we notify the OPC, OIPC Alberta, or affected individuals when a breach creates a real risk of significant harm, documenting timelines and remedial steps as regulatory guidance evolves.

Children

Our content targets adults. We do not knowingly collect data from anyone under sixteen without parental authorization. If you believe we received child data inadvertently, contact us for deletion.

Changes

We update this Policy when practices change. Material updates will be posted here with a revised date and, where required, additional notice.