Privacy Policy

RICH OOFY FINTECH TLD · Version 1.1 · Effective date: 13 October 2026

1. Scope and data controller

RICH OOFY FINTECH TLD (the “Company”, “we”, “us”) is the data controller for the personal data described in this policy. Its registered office is at 535 Yates St, Victoria BC V8W 2Z6, Canada. This policy explains how the Company handles personal data collected through its website, through written correspondence, through trade enquiries and in the course of supplying goods. It applies to trade customers, prospective customers, suppliers and website visitors. It is issued for the purposes of the Personal Information Protection Act (British Columbia) and, where it applies, the Personal Information Protection and Electronic Documents Act (Canada). Where we handle personal data of individuals in the United Kingdom or the European Union, we also apply the UK GDPR or EU GDPR as relevant.

2. Data we collect

• Enquiry data submitted in writing: name, company name, contact details, product interest and the content of the enquiry.
• Order data entered on a product page: name, company, email address, telephone number, delivery address, the products ordered and any order notes, together with order history, invoices and payment references. The website does not collect or store card details.
• Correspondence: emails, messaging history, notes of telephone calls and meeting records.
• Technical data: IP address, browser type, device type, referring page and pages visited, limited to what is needed to serve and secure the website.
• Marketing data: contact details and preferences where you have asked to receive product updates.

We do not knowingly collect data from children. The website is directed at business users and is not intended for anyone under 16.

3. How we collect data

Data is collected when you place an order on the website, when you send us a written enquiry or correspondence, when we prepare a quotation or pro forma invoice, when an order is placed and fulfilled, and automatically through the technical operation of the website.

4. Purposes and lawful bases

• Responding to enquiries and preparing quotations — legitimate interests in operating a trade business and responding to business requests.
• Performing and administering a contract — performance of a contract with the customer.
• Delivery, invoicing, payment collection and after-sales support — performance of a contract.
• Warranty, claims and quality records — legitimate interests in managing product claims and product safety.
• Accounting, tax and customs records — compliance with a legal obligation.
• Security, fraud prevention and debt recovery — legitimate interests in protecting the business.
• Sending product and trade communications — consent, or legitimate interests for existing business contacts, with an opt-out in every message.

We have completed a Legitimate Interest Assessment where we rely on legitimate interests as our lawful basis for processing.

5. Who we share data with

• Carriers, freight forwarders and customs brokers, for delivery and export documentation.
• Banks and payment service providers, to receive payment.
• Manufacturers and suppliers, where an order is produced or drop-shipped.
• Accountants, auditors, insurers and legal advisers.
• IT, hosting and email providers.
• Public authorities, courts and regulators, where disclosure is required by law.

We do not sell personal data.

Some recipients are data processors acting on our instructions and required to keep the data confidential and secure. Others, such as carriers, freight forwarders, customs brokers and accountants, are independent data controllers who process personal data for their own separate legal purposes.

6. International transfers

The Company trades internationally and some manufacturers, suppliers and service providers are located outside Canada. Where personal data is transferred outside Canada, we use contractual and other means to give it a comparable level of protection while it is processed by the recipient, and it may be accessible to authorities in that country under local law. A description of the relevant safeguards may be requested by writing to our registered office.

7. How long we keep data

• Enquiries that do not lead to an order: up to 24 months from the last contact.
• Order, invoice, payment and customs records: 6 years from the end of the financial year to which they relate, as required by Canadian tax and accounting law.
• Warranty and claim records: 3 years from closure of the claim.
• Correspondence: up to 6 years where it forms part of the business record.
• Marketing contact data: until you unsubscribe or object, or after 24 months of no engagement.
• Technical and security logs: up to 12 months.

Data may be kept longer where required by law or where needed for a live legal claim.

8. Security

We use access controls, password protection, encrypted connections where available, secure storage of business records and restriction of access to staff who need it. No transmission over the internet can be guaranteed secure, but we take reasonable steps to protect personal data against loss, misuse, unauthorised access and disclosure. Where a personal data breach is likely to result in a risk to the rights and freedoms of individuals, we notify the relevant privacy regulator and the affected individuals as required by law.

9. Cookies and website technology

• Essential cookies and similar technologies used to display pages, remember preferences and protect forms from abuse.
• Analytics, where enabled, used to count visits and improve the site, with an option to refuse them.
• Third-party content such as fonts and images may be loaded from external providers, which receive your IP address as part of that request.

You can block or delete cookies through your browser settings. Disabling cookies may affect the operation of parts of the website.

10. Your rights

Subject to the privacy law that applies to you, you have the right to:

• be informed about how your data is used, as set out in this policy;
• access your personal data and receive a copy;
• have inaccurate or incomplete data corrected;
• have data erased where it is no longer needed or was collected unlawfully;
• restrict processing while a dispute or accuracy issue is resolved;
• object to processing based on legitimate interests, and to object at any time to direct marketing;
• receive data you provided in a portable format, where processing is based on consent or contract and carried out by automated means;
• withdraw consent at any time, where processing is based on consent;
• not be subject to a decision based solely on automated processing that has a legal or similarly significant effect.

We do not carry out automated decision-making or profiling that produces legal effects. To exercise any right, write to the Privacy Officer, RICH OOFY FINTECH TLD, 535 Yates St, Victoria BC V8W 2Z6, Canada. We respond within 30 days, or tell you within that period if an extension permitted by law is needed. We may ask for information to verify your identity.

11. Complaints

If you are unhappy with how we handle your data, please contact us first. You may complain to the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca) or the Office of the Privacy Commissioner of Canada (priv.gc.ca). Individuals in the United Kingdom or European Union may also complain to their local data protection authority.

12. Links to other websites

Links to other websites are provided for convenience. We are not responsible for their content or their privacy practices, and this policy does not apply to them.

13. Changes to this policy

We may update this policy. The current version is published on the Company's website with its effective date.