Privacy Policy

01 Introduction

MXE Retail Tech Ltd. ("Company", "we", "us", or "our") is committed to protecting the personal information of our customers, website visitors, and business partners. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information in connection with our online retail operations and digital storefronts.

This policy is governed by Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), the Consumer Protection Act, 2002 (Ontario), and other applicable provincial and federal legislation.

02 Who We Are

MXE Retail Tech Ltd. is a private corporation incorporated under the Business Corporations Act (Ontario) on March 12, 2026.

03 Information We Collect

We collect personal information only to the extent necessary to fulfill the purposes identified in this policy. The categories of information we may collect include:

Information you provide directly:

• Name, email address, phone number, and mailing or shipping address
• Order details, purchase history, and transaction records
• Communications you send to us (support requests, inquiries)
• Account credentials if you create an account on our platforms

Information collected automatically:

• IP address, browser type, and operating system
• Pages visited, time on site, and navigation behaviour
• Device identifiers and referral source URLs
• Cookie and tracking data (see Section 8)

Information from third parties:

• Payment verification and fraud-prevention data from payment processors
• Shipping and logistics data from fulfillment and courier partners
• Marketing audience data from digital advertising platforms, subject to their respective privacy policies

04 How We Use Your Information

We use personal information for the following purposes, in each case with a lawful basis under PIPEDA:

• To process, fulfill, and communicate the status of your orders
• To provide customer service and respond to your inquiries
• To operate, maintain, and improve our websites and e-commerce storefronts
• To send transactional communications (order confirmations, shipping notifications)
• To send marketing communications, where you have provided consent
• To detect, investigate, and prevent fraudulent transactions and unauthorized access
• To comply with our legal obligations under applicable Canadian law
• To enforce our Terms & Conditions and other contractual rights

05 Sharing of Information

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share information with the following categories of recipients, strictly as necessary:

• Payment processors — to securely process transactions and prevent fraud
• Shipping and logistics partners — to fulfill and deliver orders
• Digital advertising platforms — for customer acquisition and remarketing, subject to their own privacy policies
• Financial institutions and banking partners — as required for payment processing and treasury operations
• Professional advisors — legal counsel, accountants, and auditors, under confidentiality obligations
• Regulatory and law enforcement authorities — when required by applicable law, court order, or to protect our legal rights

All third-party service providers are contractually required to process personal information only as instructed by us and in compliance with applicable privacy laws.

06 Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, and reporting obligations.

• Transaction and order records are retained for a minimum of seven (7) years in accordance with the Income Tax Act (Canada) and applicable Ontario tax regulations
• Customer account data is retained for the duration of the account relationship and for a reasonable period thereafter
• Marketing and communications data is retained until you withdraw consent or request deletion
• Server logs and technical data are retained for up to 12 months unless required longer for security or legal purposes

When personal information is no longer required, it is securely deleted or anonymized.

07 Your Rights

Under PIPEDA and applicable Ontario privacy legislation, you have the following rights with respect to your personal information:

• Access — request a copy of the personal information we hold about you
• Correction — request correction of inaccurate or incomplete information
• Withdrawal of consent — withdraw consent for non-essential processing at any time
• Deletion — request deletion of your personal information, subject to legal retention obligations
• Complaint — file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca

To exercise any of these rights, contact us at info@mxeretail.com. We will respond within 30 days of receiving a verifiable request.

08 Cookies & Tracking

Our websites use cookies and similar tracking technologies to support functionality, analyze site performance, and enable digital marketing. The categories of cookies we use include:

• Strictly necessary cookies — required for core site functionality such as shopping cart and checkout
• Analytics cookies — used to understand how visitors interact with our site (e.g., page views, session duration)
• Marketing cookies — used to serve relevant advertising and measure campaign performance on third-party platforms

You may manage or disable cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of our websites. Where required by law, we obtain your consent before placing non-essential cookies.

09 Data Security

We implement commercially reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encrypted data transmission via TLS/HTTPS across all web properties
• PCI DSS-compliant payment processing through certified third-party processors
• Access controls limiting personal data access to authorized personnel only
• Regular review of data handling practices and third-party vendor agreements

No method of transmission over the internet or electronic storage is 100% secure. In the event of a data breach that poses a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required under PIPEDA.

10 Third-Party Links

Our websites may contain links to third-party websites and services. This Privacy Policy applies solely to MXE Retail Tech Ltd. and does not cover the practices of any third-party sites. We encourage you to review the privacy policies of any external sites you visit. We are not responsible for the content or privacy practices of third-party websites.

11 Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately at info@mxeretail.com and we will take steps to delete such information promptly.

12 Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or applicable regulations. When we make material changes, we will update the effective date at the top of this page. We encourage you to review this policy periodically. Continued use of our services following any update constitutes your acceptance of the revised policy.

13 Contact Us

For privacy-related inquiries, requests to exercise your rights, or concerns about our data practices, please contact our Privacy Officer: