SECURE INTEL HANDLING PROTOCOL

1. INTEL WE COLLECT (INFORMATION GATHERING)

• Personal Identification Intel: Name, billing/shipping address, email, phone number (collected during checkout or account creation).
• Transaction Logs: Order history, payment method (processed via PCI-compliant third-party gateways—we never store full credit card details), purchase amounts, and timestamps.
• Digital Footprints: IP address, browser type, device info, pages visited, time spent on site, and referral URLs (collected via cookies and analytics tools).
• Communication Records: Emails, chat logs, or support tickets submitted to Support@Qirexynor.com (retained for quality assurance and issue resolution).
• Voluntary Submissions: Product reviews, survey responses, or participation in Free Trial programs (collected with explicit consent).

2. DEPLOYMENT OF INTEL (HOW WE USE YOUR DATA)

• Order Fulfillment: Process transactions, ship gear, send order confirmations/tracking updates, and manage returns/warranties.
• Account Management: Create/maintain your Qirexynor account, enable order history access, and personalize your shopping experience.
• Compliance & Security: Prevent fraud, enforce our Terms of Service, and comply with legal obligations (e.g., tax reporting, regulatory requests).
• Mission Enhancement: Analyze browsing behavior to improve site functionality, optimize product offerings, and troubleshoot technical issues.
• Opt-In Communications: Send promotional emails (new gear drops, exclusive discounts) only if you’ve subscribed. Every marketing email includes an “unsubscribe” link—no exceptions.

3. INTEL SHARING & DISCLOSURE (THIRD-PARTY ACCESS)

• Logistics Providers: Shipping carriers (e.g., USPS, FedEx) to deliver your gear (limited to address/contact info).
• Payment Processors: PCI-DSS compliant gateways (e.g., Shopify Payments, PayPal) to secure transactions.
• Service Providers: Analytics (Google Analytics), email marketing (Klaviyo), and customer support platforms (Zendesk)—bound by strict confidentiality agreements.
• Legal Compliance: Disclose data if required by law (e.g., court order, government investigation) or to protect Qirexynor’s rights, safety, or property.
• Business Transfers: In the event of a merger, acquisition, or asset sale, data may transfer to the successor entity (with continued protection per this policy).

4. DATA SECURITY PROTOCOLS (PROTECTING YOUR INTEL)

• Encryption: SSL/TLS encryption for all data transmitted between your device and our servers (visible as “https://”in your browser).
• Access Controls: Strict internal protocols limit employee access to personal data—only authorized personnel with a “need-to-know” for specific missions.
• Regular Audits: Periodic security assessments, vulnerability scans, and penetration testing to identify and patch risks.
• Data Minimization: Retain personal data only as long as necessary (e.g., order records for 7 years per tax laws, inactive accounts after 2 years).
• Breach Response: In the unlikely event of a data breach, we will notify affected users and relevant authorities within 72 hours, as required by law.

5. YOUR DATA RIGHTS (OPERATOR CONTROLS)

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct inaccurate or incomplete intel (e.g., update shipping address).
• Erasure (“Right to Be Forgotten”): Request deletion of your data (subject to legal retention requirements, e.g., tax records).
• Restriction: Limit how we process your data (e.g., opt out of marketing communications).
• Data Portability: Receive your data in a structured, machine-readable format (e.g., CSV file).
• Objection: Object to data processing for legitimate interests (e.g., direct marketing).
• Withdraw Consent: Revoke permission for data processing (e.g., unsubscribe from emails).
• Non-Discrimination: Exercise these rights without facing discriminatory pricing or service levels.

6. COOKIE & TRACKING TECHNOLOGIES

• Essential Cookies: Enable core site functions (e.g., add-to-cart, checkout)—cannot be disabled.
• Performance Cookies: Track site usage (e.g., Google Analytics) to optimize speed and functionality.
• Marketing Cookies: Remember your preferences (e.g., language, currency) and deliver personalized ads (opt-in only).
• Third-Party Cookies: Embedded content (e.g., YouTube videos, Instagram feeds) may set their own cookies—governed by their respective policies.

7. INTERNATIONAL DATA TRANSFERS

• Standard Contractual Clauses (SCCs): EU-approved contracts ensuring data protection standards.
• Adequacy Decisions: Transfers to countries deemed “adequate” by the EU Commission.
• Binding Corporate Rules: Internal policies governing cross-border data flows.

8. MINORS’ DATA PROTECTION

9. POLICY UPDATES

10. CONTACT THE INTEL OFFICER