Summary
We publish general lifestyle content about resting poses. We process personal data to respond to messages, run the website, and comply with law. We do not sell personal data. Optional analytics or marketing cookies are used only if you consent through our cookie banner where required.
Not medical advice
This website provides general lifestyle information only and does not constitute professional or medical advice. Privacy questions are separate from health questions; for health matters, contact an appropriate qualified professional.
Canadian privacy laws
For individuals in Canada, we handle personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA), where it applies to our commercial activities. In provinces that have enacted substantially similar private-sector privacy laws (including British Columbia and Alberta), comparable provincial rules may apply to some or all of our processing.
We do not use this policy to override rights granted under Canadian law. You may contact us first with questions or requests. You may also complain to the Office of the Privacy Commissioner of Canada or a provincial privacy commissioner where applicable, using the processes published on their official websites.
Commercial electronic messages sent to Canadian addresses, if any, follow Canada’s anti-spam legislation (CASL) where it applies, including consent and unsubscribe requirements for promotional content.
1. Controller, scope, and roles
Phefxiremychik is the data controller for processing described here, unless we state that another entity acts as controller for a specific service. This Policy applies to visitors who access pages on phefxiremychik.world, submit the contact form, email us, or interact with cookie and analytics tools we describe in the Cookie Policy.
We provide editorial content and contact channels. We are not a clinic, insurer, or emergency service. If you send urgent health information, we may not monitor inboxes continuously and you should seek appropriate help through proper channels.
2. Definitions
Personal data means information relating to an identified or identifiable person.
Processing means any operation on personal data, including collection, storage, alteration, disclosure, or deletion.
EEA means the European Economic Area.
Consent means a freely given, specific, informed, and unambiguous indication of agreement, where required by law.
3. Categories of personal data
Depending on your interaction, we may process:
- Identity and contact data: name, email address, and similar details you type into the contact form or include in email.
- Message content: the body of your inquiry, attachments if your mail system sends them, and internal notes we add to handle your request.
- Consent records: timestamps and categories of consent for cookies or marketing where applicable.
- Technical data: IP address, approximate location derived by networks, device identifiers, browser type, operating system, referring URL, date and time, and pages viewed.
- Communication metadata: delivery status, SMTP headers your provider attaches, and spam scores from filters.
We do not ask you to upload health records through this site. If you voluntarily disclose health-related details in a message, we treat that content only to respond and in line with this Policy, and we do not use it to build medical profiles.
4. Purposes and legal bases
Under GDPR, we rely on one or more of the following legal bases, as applicable:
- Consent (Art. 6(1)(a) GDPR): where you accept optional cookies, subscribe to certain communications if offered, or tick the contact form consent box.
- Contract and pre-contract steps (Art. 6(1)(b)): where processing is necessary to respond to your request before a contract exists.
- Legitimate interests (Art. 6(1)(f)): securing the site, preventing abuse, understanding aggregated usage, improving navigation, and internal training, balanced against your rights.
- Legal obligation (Art. 6(1)(c)): tax, accounting, or regulatory duties when they apply to our operations.
We process personal data for purposes that include: delivering pages; authenticating administrative access; operating email inboxes; measuring site performance when permitted; documenting consent; defending legal claims; and cooperating with lawful requests from public authorities when required by law and after appropriate review.
5. Retention periods
We keep personal data only as long as necessary for the purposes collected:
- Contact threads: typically up to twenty-four months after the last message, unless litigation or compliance requires longer retention.
- Server and security logs: often ninety days, with extensions for active investigations.
- Marketing lists: until you withdraw consent or we end the program, subject to suppression lists where required.
- Accounting and tax records: as mandated by applicable statutes of limitation.
When retention expires, we delete or irreversibly anonymize data where feasible. Backup systems may retain encrypted copies for a short technical window before rotation.
6. Recipients and subprocessors
We may share personal data with service providers who host infrastructure, transmit email, detect spam, or provide analytics when you consent. They process data under instructions and contractual clauses that require confidentiality and security.
We may disclose information if required by subpoena, court order, or regulatory demand, or to protect the rights, safety, and integrity of our visitors and systems, subject to applicable law.
We do not sell personal data as defined by typical U.S. state privacy laws, and we do not share it for cross-context behavioral advertising except where you consent to marketing cookies and partners honor your choices.
7. International transfers
Our team is located in Canada. Our providers may process data in Canada, the European Union, the United States, or other regions. When we transfer personal data from the EEA, Switzerland, or the United Kingdom to countries not deemed adequate by the relevant authority, we use Standard Contractual Clauses, supplementary measures where appropriate, or another approved mechanism.
You may request a summary of safeguards by contacting us. We will respond subject to confidentiality obligations toward vendors.
8. Security measures
We implement administrative, technical, and organizational measures suited to the risk, including HTTPS for this site, access controls, least-privilege accounts, vendor review, and incident response steps. No online transmission is perfectly secure; you should protect your devices and use unique passwords where you maintain accounts with us or our vendors.
9. Your privacy rights
Depending on your location, you may exercise rights that include access, rectification, erasure, restriction, portability, objection to certain processing, and withdrawal of consent. You may also lodge a complaint with a supervisory authority in your country of residence or work.
To submit a request, email us from the address involved when possible so we can verify ownership. We may ask for reasonable identity proof. We will respond within statutory timelines, typically within one month for GDPR requests, subject to extensions for complex cases.
10. Personal data breaches
If we become aware of a breach that risks your rights, we will assess notification duties under applicable law, inform regulators where required, and communicate with affected individuals when high risk is likely, alongside recommended mitigation steps.
11. Children
The site is not directed to children under sixteen. We do not knowingly collect their personal data. Parents or guardians who believe we have collected such information should contact us for deletion.
12. Profiling and automated decisions
We do not make decisions based solely on automated processing that produce legal or similarly significant effects. Analytics may aggregate behavior, but it does not determine eligibility for essential services on this site.
13. Changes to this Policy
We may update this Policy to reflect new practices or legal requirements. The revised version will appear here with an updated date. Continued use after changes constitutes acceptance where permitted by law; material changes may be highlighted on the homepage.
14. Contact
Privacy inquiries: touch@phefxiremychik.world. Postal address: Phefxiremychik, 8322 130 St, Surrey, BC, Canada.