PRIVACY POLICY

X Craft Motors Inc.

Last Updated on 2024-12-05 and effective to 2025-05-06.

As customers are always our priority, well-established privacy protection based on Privacy Act is extremely important to our customers and to us. Read our privacy policy carefully to understand how the process your personal information. This privacy policy will explain how our organization uses the personal data we collect from you when you use our website.

Topics:

• What data do we collect?
• How do we collect your data?
• How will we use your data?
• How do we store your data?
• Marketing
• What are your data protection rights?
• What are cookies?
• How do we use cookies?
• What types of cookies do we use?
• How to manage your cookies?
• Privacy policies of other websites
• Changes to our privacy policy
• How to contact us?
• How to contact the appropriate authorities?

WHAT DATA DO WE COLLECT

X Craft collects the following data:

Personal identification information (Name, email address, phone number, DOB)

• When you purchase an item that requires delivery, we will ask for shipping details
• When making purchases over $1200 USD, we will ask for proof of identification, in the interest of fraud prevention
• When taking payment, if you are paying via bank transfer or directly to the business not via the website, we may ask for your payment details where necessary to complete the transaction.

Website visitor behaviour, through cookies and tracking beacons

HOW DO WE COLLECT YOUR DATA

1. You directly provide X Craft with most of the data we collect. We collect data and process data when you:

• Register online
• Submit a form on our website
• Sign up for news or marketing material
• Contact us directly via email or phone
• Use or view our website via your browser's cookies
• Buy a product(s)
• Engage in one of our services
• Phone us to request a quote

2. X Craft may also receive your data indirectly from the following sources:

• Referrals from our clients, individuals or organisations we work with When collecting form submission data via the website, we use HTTP encrypted forms, which are stored securely on AWS servers.

HOW WILL WE USE YOUR DATA?

X Craft collects your data so that we can:

1. Contact you in accordance with your privacy preferences
2. Email you with various updates
3. Manage our database
4. Refer community members to one another
5. Advise you on services and relevant products
6. Understand customer and user behaviour on our website
7. Prevent cases of credit card fraud (hence, we ask for proof of identity when completing large purchases)
8. Process your payment and ensure that orders are fulfilled correctly
9. Deliver items to your chosen address

HOW DO WE STORE YOUR DATA

1. X Craft securely stores data collected via the website on our servers (which are hosted on AWS). This is typically forming submission information or payment information. Your data is stored in secure, state-of-the-art data centers that feature robust physical and digital security measures. These centers are designed to prevent unauthorized access, and our systems are maintained in compliance with internationally recognized standards such as ISO 27001.
2. Although payment information isn’t stored by us, it is moved through the site via Stripe, who are our chosen payment service provider, unless you opt to use PayPal or other payment platforms, in which case your payment data will be processed by them.
3. Personal information may in future be stored in an email service provider such as Mail Chimp servers, which is a third-party email client used to draft and send emails to our mailing lists.
4. Contact information may also be stored locally on our team's devices for the purpose of building, contacting and maintaining a good customer relationship.
5. X Craft will keep your personal information for as long as required. If you wish to have your personal information removed from our systems, please contact us requesting your GDPR Right to Erasure, stating which information you would like removed.
6. All personal data is encrypted both in transit and at rest using advanced encryption protocols. This ensures that your information remains protected from unauthorized access during transmission and while stored on our servers.
7. Access to personal data is strictly limited to authorized personnel who require it to perform their job responsibilities. We enforce strict access controls and regularly review user permissions to maintain confidentiality.
8. To safeguard your data, we continuously monitor our systems for vulnerabilities and perform regular security audits. We also update our security practices in line with new technological advancements and regulatory requirements.

MARKETING

X Craft would like to send you information about products and services of ours that we think you might like, as well as those of our partner companies.

• If you have agreed to receive marketing, you may always opt out at a later date.
• You have the right at any time to stop X Craft from contacting you for marketing purposes.
• If you no longer wish to be contacted for marketing purposes, please contact us, or unsubscribe using the button that may be present at the bottom of the emails you have received.

WHAT ARE YOUR DATA PROTECTION RIGHTS

X Craft would like to make sure you are fully aware of all your data protection rights. Every user is entitled to the following:

1. The right to access - You have the right to request X Craft for copies of your personal data. We may charge you a small fee for this service.
2. The right to rectification - You have the right to request that X Craft correct any information you believe is inaccurate. You also have the right to request X Craft to complete information you believe is incomplete.
3. The right to erasure - You have the right to request that X Craft erase your personal data, under certain conditions.
4. The right to restrict processing - You have the right to request that X Craft restrict the processing of your personal data, under certain conditions.
5. The right to object to processing - You have the right to object to X Craft's processing of your personal data, under certain conditions.
6. The right to data portability - You have the right to request that X Craft transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

WHAT ARE COOKIES

Cookies are text files placed on your computer to collect standard Internet log information and visitor behavior information. When you visit our websites, we may collect information from you automatically through cookies or similar technology. For further information, visit allaboutcookies.org.

HOW DO WE USE COOKIES

X Craft uses cookies in a range of ways to improve your experience on our website, including:

• Keeping you signed in
• Understanding how you use our website

WHAT TYPES OF COOKIES DO WE USE?

There are several different types of cookies, however, our website uses:

1. Functionality - X Craft uses these cookies so that we recognize you on our website and remember your previously selected preferences. These could include what language you prefer and location you are in. A mix of first-party and third-party cookies are used.
2. Advertising - X Craft uses these cookies to collect information about your visit to our website, the content you viewed, the links you followed and information about your browser, device, and your IP address. X Craft sometimes shares some limited aspects of this data with third parties for advertising purposes. We may also share online data collected through cookies with our advertising partners. This means that when you
3. Necessary cookies - required for basic website function.
4. Analytics cookies – X Craft has YouTube videos embedded on the site, and YouTube uses their own analytics on videos that are embedded. We also use Google Analytics, LinkedIn Insight Manager and Meta Business Suite to monitor activity on the website, but all information using these cookies is not personal information we can observe.
5. Advertisement - YouTube videos embedded on the site may be active if YouTube is tracking who is watching which adverts.

HOW TO MANAGE YOUR COOKIES?

You can set your cookie preferences locally on our website by using the cookie consent banner. Alternatively, you can disable cookies in your browser by managing your browser settings.

PRIVACY POLICIES OF OTHER WEBSITES

The X Craft website contains links to other websites. Our privacy policy applies only to our website. If you are directed to another website, you are encouraged to read their privacy policy to understand how they use data collected on their website.

CHANGES TO OUR PRIVACY POLICY

X Craft keeps its privacy policy under regular review and places any updates on this web page. This privacy policy was last updated on January 1st, 2025.

HOW TO CONTACT US

If you have any questions about X Craft's privacy policy, the data we hold on to you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us via the contact form on our contact page.

HOW TO CONTACT THE APPROPRIATE AUTHORITIES

Should you wish to report a complaint or if you feel that X Craft has not addressed your concern in a satisfactory manner, you may contact us at info@x-craft.ca.