Privacy Policy

1. Information we collect

We collect the information needed to operate a social media services website: account details, order details, public destination URLs, checkout details, wallet records, support conversations, security logs, device/session information, and communication preferences.

We do not ask for social media passwords. Orders are intended for public URLs only, such as public posts, videos, reels, channels, pages, or profiles depending on the service purchased.

• Account data: name, email address, phone number when provided, country, password hash, email verification state, two-factor settings, and trusted-device records.
• Order data: selected service, package quantity, public URL, customer note, payment method selection, wallet usage, coupon use, internal delivery references, delivery progress, and order status.
• Support data: tickets, chat replies, attachments, cancellation/refund requests, refill requests, delivery issue reports, and administrator notes required to resolve a request.
• Technical data: IP address, browser/device information, session identifiers, security events, page interactions, and cookie choices.

2. Why we use personal data

Canadian Brand Forge uses personal data to provide the website, process orders, create and secure customer accounts, send order updates, detect fraud or abuse, provide support, manage refunds and wallet activity, improve the website, and comply with legal, tax, accounting, and security obligations.

• Contract: to create an account, process orders, submit fulfillment requests, show delivery progress, provide invoices, manage wallet balances, and answer support tickets.
• Legitimate interests: to keep the website secure, prevent abuse, improve the customer experience, maintain business records, and understand performance in a privacy-conscious way.
• Consent: to use optional non-essential cookies, send promotional messages where required, and remember choices such as trusted-device preference.
• Legal obligation: to retain records required for tax, accounting, fraud prevention, dispute handling, or regulatory compliance.

3. Processors and operational systems

To deliver an order, Canadian Brand Forge processes the minimum required order details. That usually means the selected Canadian Brand Forge service, quantity, and public URL. Payment processors, hosting providers, email providers, analytics tools, and security tools may also process information on our behalf when those services are connected.

We require operational partners to use information only for the purpose of delivering or supporting Canadian Brand Forge services. We do not sell customer personal data.

4. Cookies and similar technologies

Essential cookies and local storage are used for sessions, security, cart behavior, cookie preferences, and core website functionality. Analytics or marketing cookies are optional and should only run after consent through the cookie banner or the customer preference area.

You can revisit cookie choices at any time from the footer Cookie settings link or from the Cookie Policy page.

5. Retention

We keep account, order, invoice, support, security, and wallet records for as long as they are needed to provide services, maintain business records, resolve disputes, prevent fraud, comply with legal duties, and protect the platform. If a deletion request is approved, active personal profile data is removed or anonymized after the applicable review and grace period unless retention is required by law or legitimate security reasons.

6. Data lifecycle, deletion, and anonymization

Canadian Brand Forge uses data-minimization controls so exports exclude passwords, raw tokens, recovery secrets, and sensitive session identifiers. Account deletion disables login, revokes sessions and persistent login credentials, schedules deletion or anonymization after the recovery window, and keeps only records required for tax, accounting, dispute handling, fraud prevention, security, or other legitimate legal needs.

Where a record cannot be fully deleted because it is tied to an order, payment, security audit, dispute, or legal hold, Canadian Brand Forge may anonymize personal profile fields while retaining minimized operational records.

7. International transfers and regional storage

Canadian Brand Forge may use technology systems and processors located outside the visitor or customer country. Where GDPR transfer rules apply, the business should use appropriate safeguards such as contractual protections, due diligence, and other legally recognized transfer mechanisms.

Customer region and storage preferences may be recorded so the business can prefer EU, UK, US, or default processing locations when compatible providers are connected.

8. Youth and parental consent

Where age or region makes parental or guardian consent appropriate, Canadian Brand Forge can restrict ordering and wallet features until a parent or guardian confirms consent through a secure link. The confirmation page requires an explicit user action and does not approve consent merely because an email link was opened.

9. Your privacy rights

Depending on your location, including the European Economic Area and United Kingdom, you may have rights to be informed, access your data, correct inaccurate data, request deletion, restrict processing, object to certain processing, request portability, withdraw consent, and complain to a supervisory authority.

Logged-in customers can use the dashboard data-rights tools. Anyone can submit a request from the GDPR Rights Center.

10. Public URLs and order privacy

A public destination URL is used so Canadian Brand Forge can identify the profile, page, channel, post, video, Reel, Short, story, or other public destination selected by the customer. The URL is connected to the order record, support record, and fulfillment review for that item.

Customers should not place private account details, passwords, recovery codes, private messages, or unrelated personal information in the order field. If support needs a correction, provide the order number and the corrected public URL only.

11. Account security data

Security records may include login attempts, email verification events, password reset events, two-factor events, trusted-device choices, IP address, user agent, risk flags, and account recovery activity. These records help protect customer accounts, wallet balances, invoices, order history, and support conversations.

Security logs are reviewed when an account owner reports unauthorized access, a charge dispute, suspicious ordering, failed verification, or other account-risk issue. Access to these records should be limited to people who need them for security, support, fraud prevention, or legal review.

12. Order, wallet, and invoice records

Order, wallet, and invoice records are kept because they show what was purchased, which destination was submitted, what amount was paid, whether wallet balance was used, and what support action was taken. These records are needed for customer service, accounting, tax, fraud prevention, and dispute handling.

A deletion request does not automatically erase every order or payment record. Where records must be kept, Canadian Brand Forge can limit active profile details and keep the minimum record needed for business, security, accounting, or legal reasons.

13. Marketing and service emails

Transactional emails are sent for account verification, password recovery, order receipts, invoices, wallet activity, support replies, security notices, and service updates connected to an active order or account. These messages are part of operating the service.

Marketing emails are separate. Customers can opt out of optional promotional messages from account preferences or by using an unsubscribe link where one is provided. Opting out of marketing does not stop required security, order, payment, or support messages.

14. Data export limits

A data export is meant to provide customer-readable account, order, support, wallet, consent, and privacy-request information. It should not expose password hashes, raw tokens, recovery secrets, private admin notes, supplier credentials, fraud logic, or security controls that could put the website or other customers at risk.

If an export appears incomplete, the customer can contact privacy support with the account email and the missing category. Canadian Brand Forge may need to verify identity before providing more detail.

15. Contact and complaint path

Privacy questions should be sent to privacy@canadianbrandforge.ca or support@canadianbrandforge.ca. Include the account email, order number when relevant, and a clear description of the data question or rights request.

Where GDPR or similar law applies, customers may also have the right to contact a supervisory authority. Canadian Brand Forge should be given enough information to review the request before a complaint is escalated.