This Privacy Policy describes how soakscrubmat (referred to herein as “we”, “us”, or “our”) collects, utilizes, processes, and stores personal information when you visit or make a purchase from www.soakscrubmat.com (the “Site”).
We operate as the primary Data Controller regarding your personal information. We are committed to managing consumer data responsibly and maintaining full compliance with applicable privacy frameworks across our transactional jurisdictions, including Canada, the United States, and the European Union (GDPR).
1. Data Controller Identity
For the purposes of applicable data protection regulations, the entity responsible for secure data management is:
Registered Office Address: Suite 402, 1021 West Hastings Street, Vancouver, BC, V6E 2J3, Canada
Official Data Protection Contact: silicone@soakscrubmat.com
2. Personal Information We Collect
When you interact with the Site, we collect specific categories of information necessary to facilitate your commercial transactions:
Order Information: This includes names, billing addresses, delivery addresses, email addresses, payment configurations, and corporate contact lines.
Device Information: This includes IP addresses, general time zone configurations, cookie data, and structural identifiers associated with the browser utilized to access the Site.
3. Third-Party Data Processing & Financial Transactions
To fulfill retail orders and ensure transactional security, we share necessary data with trusted corporate service providers.
Payment Processing via Stripe: All financial transactions executed on this domain are processed directly by Stripe, our designated independent payment gateway provider.
Data Transmission Security: When you proceed to checkout, your financial variables (such as credit card numbers or banking details) are transmitted directly to Stripe via encrypted channels (SSL/TLS). soakscrubmat does not hold, view, or retain your raw financial credentials within our internal servers.
Stripe Privacy Governance: The utilization of your financial data by our payment provider is governed exclusively by Stripe’s own corporate privacy terms and commercial operational rules.
4. Legal Basis and Purpose of Processing
We process personal information under the following legal frameworks:
Contractual Necessity: To execute, fulfill, and deliver the purchase agreements made via the Site.
Legal Obligation: To satisfy statutory corporate records, fiscal transparency requirements, and domestic commercial reporting laws.
Legitimate Interests: To maintain the structural functionality of our website, prevent fraudulent transactions, and monitor overall operational consistency.
5. Data Retention Periods
We do not retain personal information for longer than is required to satisfy the operational, legal, or statutory purposes for which it was originally collected.
Transactional & Fiscal Records: Information regarding purchases, fiscal invoices, and corporate accounting variables is retained for a standard statutory duration of seven (7) years, in alignment with Canadian, European, and United States fiscal and revenue legislation.
General Customer Correspondence: Queries submitted via our contact forms or email channels are retained for up to twenty-four (24) months following the final communication interval to ensure appropriate administrative continuity and support.
6. International Data Transfers
As our operations serve consumers located throughout Europe and the United States, the personal data we collect may be transferred to, and processed within, our central facilities located in Canada.
Legal Note: Canada is formally recognized by the European Commission as providing an adequate level of data protection under GDPR frameworks. For transfers to associated jurisdictions outside the European Economic Area (EEA), we utilize standard contractual clauses (SCCs) to preserve strict data management standards.
7. Consumer Privacy Rights
Depending on your geographical residence, you possess specific legal rights regarding your personal data under regional regulations (including the GDPR and relevant North American state privacy laws):
The Right of Access: The right to request formal confirmation and copies of the personal files held by the Data Controller.
The Right to Rectification: The right to request immediate amendments to incomplete or inaccurate records.
The Right to Erasure (“Right to be Forgotten”): The right to request the deletion of data, subject to overriding legal, anti-fraud, or fiscal retention duties.
To exercise any of these structural rights, please contact our administrative compliance team at silicone@soakscrubmat.com.
8. Structural Integrity and Protection Practices
We implement industry-standard administrative, physical, and electronic security protocols—including advanced encryption—intended to mitigate risks of unauthorized access, alteration, loss, or disclosure of consumer records. While we employ maximum diligent efforts to maintain appropriate operational boundaries, no electronic transmission channel or digital framework can be represented as entirely impervious to external vulnerabilities.
This website uses cookies to improve your experience. By using this website you agree to our Privacy Policy.
