PRIVACY POLICY

At Editoronto, your data belongs to you — not us. This policy explains exactly how, when, and why we handle it — and what power you hold at every step.

How We Collect Data

We gather personal data directly from you when you create an account, contact our team, participate in a survey, use our online help or chat tools, or make a purchase. In those cases, we collect information such as billing and shipping details, contact information, authentication credentials, and payment data — including credit or debit card numbers and related card information. We also collect technical and usage data automatically when you interact with our services: your device type, operating system, browser, IP address, unique device identifiers, diagnostic logs, location signals (where available and permitted), and patterns of engagement. These inputs help us understand how our services are used — never to build profiles for unrelated purposes.

Why We Process It

We process your data solely to deliver, maintain, and improve our products and services. This includes verifying accounts, preventing fraud, investigating suspicious activity, supporting customer requests, and ensuring service reliability. Where required by law — especially if you reside within the European Economic Area (EEA) — our processing is grounded in Article 6(1) of the General Data Protection Regulation (EU) (“GDPR”) when consent is necessary. We do not process data beyond what’s strictly needed to fulfill these purposes. Every use aligns with a defined objective — never speculative or secondary exploitation.

Who Receives It & Why

We share personal data only with strategic partners who help us operate, enhance, or promote our services — for example, logistics providers, payment processors, or analytics platforms. In all cases, sharing serves a direct functional need: fulfilling orders, securing transactions, or measuring campaign effectiveness. It will not be shared with third parties for their own marketing purposes without your prior express consent. We may also disclose data when legally compelled:

• law, legal process, litigation, and/or requests from public and governmental authorities;
• merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business;
• to protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users;
• national security, law enforcement, or other issues of public importance.

How Long We Keep It

We retain your personal data for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement, unless a longer retention period is required or permitted by law. Once those purposes are met — and no legal obligation extends the requirement — we securely erase or anonymize the data.

How We Protect It

We safeguard your data using reasonable technical, administrative, and physical security measures. These include access controls, encryption-in-transit for sensitive transmissions, staff training on confidentiality, and regular review of internal protocols. While no system is immune to risk, we commit to maintaining protections proportionate to the sensitivity and volume of data handled.

What Control You Have

You control your data — fully and at every stage. You have the right to:

• access, correct, or delete your personal data;
• restrict or object to its further processing;
• receive your personal data in a structured and standard format;
• lodge a complaint with the competent data protection authority.

To exercise any of these rights, you may withdraw your consent by contacting us — for any uses requiring prior express consent. We’ll respond to your request in less than 30 days. Please note: there are instances where applicable laws or regulatory requirements allow or require us to refuse to provide or delete some or all of the personal data. If we learn that we have collected the personal data of a child under 16, or the equivalent minimum age depending on the jurisdiction, we will take steps to delete the data as soon as possible.

What Happens If Laws Change

We update this statement to reflect evolving legal standards, technological capabilities, and operational needs. Any material change will be communicated clearly — and your continued use of our products and services after the effective date signifies acceptance of the revised terms. If you disagree with the updated statement, you may discontinue use and contact us to close your account. You’re always in control. Whether you want to review, update, export, or erase your data — or simply ask questions — our team responds within 30 days. Reach out anytime at cs@editoronto.com.