Privacy Policy – Deep cleaning—clean with a single brush.

This Privacy Policy describes how soakscrubmat (referred to herein as “we”, “us”, or “our”) collects, utilizes, processes, and stores personal information when you visit or make a purchase from www.soakscrubmat.com (the “Site”).

We operate as the primary Data Controller regarding your personal information. We are committed to managing consumer data responsibly and maintaining full compliance with applicable privacy frameworks across our transactional jurisdictions, including Canada, the United States, and the European Union (GDPR).

1. Data Controller Identity

For the purposes of applicable data protection regulations, the entity responsible for secure data management is:

Brand Name: soakscrubmat
Official Data Protection Contact: silicone@soakscrubmat.com

2. Personal Information We Collect

When you interact with the Site, we collect specific categories of information necessary to facilitate your commercial transactions:

Order Information: This includes names, billing addresses, delivery addresses, email addresses, payment configurations, and contact details.
Device Information: This includes IP addresses, general time zone configurations, cookie data, and structural identifiers associated with the browser utilized to access the Site.

3. Third-Party Data Processing & Financial Transactions

To fulfill retail orders and ensure transactional security, we share necessary data with trusted corporate service providers.

Payment Processing via Stripe: All financial transactions executed on this domain are processed directly by Stripe, our designated independent payment gateway provider.

Data Transmission Security: When you proceed to checkout, your financial variables (such as credit card numbers or banking details) are transmitted directly to Stripe via encrypted channels (SSL/TLS). soakscrubmat does not hold, view, or retain your raw financial credentials within our internal servers.

Stripe Privacy Governance: The utilization of your financial data by our payment provider is governed exclusively by Stripe’s own corporate privacy terms and operational rules.

4. Legal Basis and Purpose of Processing

We process personal information under the following legal frameworks:

Contractual Necessity: To execute, fulfill, and deliver the purchase agreements made via the Site.
Legal Obligation: To satisfy statutory corporate records, fiscal transparency requirements, and domestic commercial reporting laws.
Legitimate Interests: To maintain the structural functionality of our website, prevent fraudulent transactions, and monitor overall operational consistency.

5. Data Retention Periods

We do not retain personal information for longer than is required to satisfy the operational, legal, or statutory purposes for which it was originally collected.

Transactional & Fiscal Records: Information regarding purchases, fiscal invoices, and accounting variables is retained for a standard statutory duration of seven (7) years, in alignment with Canadian, European, and United States fiscal and revenue legislation.

General Customer Correspondence: Queries submitted via our contact forms or email channels are retained for up to twenty-four (24) months following the final communication interval to ensure appropriate administrative continuity and support.

6. International Data Transfers

As our operations serve consumers located throughout Europe and the United States, the personal data we collect may be transferred to, and processed within, our central facilities located in Canada.

Legal Note: Canada is formally recognized by the European Commission as providing an adequate level of data protection under GDPR frameworks. For transfers to associated jurisdictions outside the European Economic Area (EEA), we utilize standard contractual clauses (SCCs) to preserve strict data management standards.

7. Consumer Privacy Rights

Depending on your geographical residence, you possess specific legal rights regarding your personal data under regional regulations (including the GDPR and relevant American state privacy laws):

The Right of Access: The right to request formal confirmation and copies of the personal files held by the Data Controller.
The Right to Rectification: The right to request immediate amendments to incomplete or inaccurate records.
The Right to Erasure (“Right to be Forgotten”): The right to request the deletion of data, subject to overriding legal, anti-fraud, or fiscal retention duties.

To exercise any of these rights, please contact our administrative compliance team at silicone@soakscrubmat.com.

8. Structural Integrity and Protection Practices

We implement industry-standard administrative, physical, and electronic security protocols—including advanced encryption—intended to mitigate risks of unauthorized access, alteration, loss, or disclosure of consumer records. While we employ diligent efforts to maintain appropriate operational boundaries, no electronic transmission channel or digital framework can be represented as entirely impervious to external vulnerabilities.