Privacy & Personal Information Policy

1.1 Registered Entity & Data Controller:
SHEERNOX TECHNOLOGY GROUP
A sole proprietorship registered in the Province of British Columbia, Canada
Business Number: 732754924
Registered Business Address: 1-1885 Grasslands Blvd, Kamloops, BC, V2B 0B8, Canada
Contact Email: support@sheernox.com
Direct Client Portal: https://my.sheernox.com

2.1 Direct Account Information: When registering for Sheernox services or opening support tickets, we collect: full name, corporate name, email address, telephone number, physical mailing address, billing details, and login credentials.

2.2 Technical & Usage Telemetry: When navigating our websites and client dashboard, we collect standard server logs, IP addresses, browser user-agent strings, referring URLs, operating system signatures, and session timestamps.

2.3 Payment Information: Credit card and banking transactions are tokenized and processed through PCI-DSS Level 1 certified gateways (Stripe, PayPal). Sheernox does not store full credit card numbers or CVV codes on our local servers.

4.1 Domain Name Registrations: To register and maintain domains, registrant contact data is transmitted to accredited ICANN registrars and registry operators. WHOIS privacy masking is enabled by default where supported.

4.2 Email Hosting & SPAM Filtering: Outbound and inbound email transmissions pass through automated spam and virus inspection filters. Message headers and routing logs are maintained for thirty (30) days for deliverability diagnostics.

4.3 DNS & CDN Edge Networks: DNS queries and CDN proxy traffic pass through global edge nodes (including Cloudflare and Anycast networks) to mitigate volumetric DDoS attacks and accelerate asset delivery. Edge logs cache IP requests temporarily for security telemetry.

4.4 Storage & Disaster Recovery Backups: Backups are handled according to the service: web hosting and email hosting accounts are backed up daily to a separate backup server in Canada; Website Care plans keep daily off-site backups of the cared-for website for thirty (30) days; and the Managed Backup service under Storage & Backup Solutions keeps off-site copies, locked against change for an agreed retention period, in storage locations agreed with Client (in Canada where Client's data must stay in Canada). Backup copies are accessible only to authorized Sheernox personnel and the systems that perform restores.

4.5 Website Care & Maintenance Retainers: When performing CMS updates and plugin maintenance, authorized Sheernox engineers may access client staging or production administrative dashboards under strict non-disclosure obligations.

4.6 Managed Google Workspace: When Sheernox provides Google Workspace as a managed service, Sheernox holds administrator access to Client's Workspace organization to create and manage users, licences, and domain settings. User names, email addresses, and licence details are shared with Google LLC and an authorized Google Workspace distributor to provision and bill the service. Mail, files, and other content in Google Workspace are stored and processed by Google under Google's own privacy terms.

4.7 Managed AI Services: When Sheernox sets up or manages artificial intelligence tools for Client, authorized Sheernox personnel may access the administration settings of those tools and the business data Client chooses to use in configuring automations. Content Client submits to an AI tool is processed by that tool's vendor under the vendor's terms. Before Client's team starts using an approved tool, Sheernox reviews the vendor's current terms and sets the data retention and sharing options the tool offers.

4.8 IT Services & Remote Support: During on-site, bench, or remote IT work, Sheernox technicians may see personal information stored on Client's devices, networks, and accounts. Technicians access only what the requested work requires, connect remotely only with Client's permission for each session, and do not copy Client data except where the work (such as a data recovery or migration) requires it.

4.9 Domain Search: Domain names entered in the domain search on sheernox.com are sent to the Sheernox client portal and the registrar platform to check availability and suggest alternatives. Searches are not linked to an identified person unless the visitor goes on to place an order.

5.1 Cross-Border Transfers & US CLOUD Act Disclosure: Sheernox Technology Group is headquartered in British Columbia, Canada. While we endeavor to host data within Canadian or European data centers where requested, certain infrastructure partners (including Microsoft Corporation, Google LLC, The Constant Company [Vultr], Amazon Web Services, Inc., Cloudflare, Inc., Stripe, Inc., and PayPal, Inc.) are corporate entities organized under the laws of the United States. Pursuant to foreign legal frameworks (including the United States Clarifying Lawful Oversight of Use of Data (CLOUD) Act, 18 U.S.C. § 2713, and foreign intelligence surveillance authorities), data stored or processed on systems operated by US-headquartered providers may be subject to lawful production orders, search warrants, or subpoenas issued by foreign law enforcement or judicial authorities, without invoking the Canada-United States Mutual Legal Assistance Treaty (MLAT). To mitigate cross-border exposure, Sheernox encourages and supports client-side encryption (including TLS 1.3 in transit, LUKS/BitLocker storage encryption, and client-managed cryptographic keys) so that underlying filesystem data remains unreadable ciphertext.

6.1 Essential Cookies: Required for authentication in the Sheernox Client Portal, CSRF security verification, and shopping cart persistence during checkout. These cannot be disabled without breaking portal functionality.

6.2 Performance & Analytics: Aggregated, anonymized analytics measuring site speed, error rates, and popular navigation routes to improve system responsiveness.

6.3 Preferences Stored in Your Browser: sheernox.com remembers the price currency you choose (CAD, USD, or EUR) in your browser's local storage under the key sheernox_currency, so prices stay in that currency on later visits. It is never sent to Sheernox, and you can clear it at any time by deleting site data in your browser.

7.1 Security Architecture: We implement modern administrative, technical, and physical safeguards: TLS 1.3 encryption in transit, strict role-based access control, SSH key authentication, automated intrusion detection, and multi-factor authentication for administrative personnel.

7.2 Retention Schedule: Upon account termination, hosted server content and database records are purged within thirty (30) days. Invoices and financial accounting transaction histories are retained for seven (7) years to satisfy statutory revenue audits.

8.1 Core Rights:

• Right of Access & Transparency: Request written confirmation of whether we hold personal information concerning you, the purposes for which it has been used, and any third-party sub-processors to whom it has been disclosed.
• Right of Rectification: Request correction of inaccurate, outdated, or incomplete personal data via our portal or by notifying our Privacy Officer.
• Right to Withdraw Consent: Withdraw consent for non-essential data processing at any time, subject to legal or contractual restrictions.
• Right to Erasure & Deletion: Request deletion of your personal data upon closure of your account, subject to statutory 7-year financial audit retentions.
• Right to Data Portability: Obtain a structured, machine-readable export of account records and customer data.

8.2 Regulatory Oversight & Complaints: If you are dissatisfied with our response to a privacy request, you have the statutory right to lodge a complaint with:

• Office of the Information and Privacy Commissioner for British Columbia (OIPC BC): PO Box 9038 Stn Prov Govt, Victoria B.C. V8W 9A4 • www.oipc.bc.ca
• Office of the Privacy Commissioner of Canada (OPC): 30 Victoria Street, Gatineau, Quebec K1A 1H3 • www.priv.gc.ca

9.1 Age Restriction: Sheernox technology services are designed strictly for adult commercial operators, businesses, and individuals aged eighteen (18) or older. We do not knowingly solicit or collect personal information from anyone under the age of eighteen (18). If we learn that we have collected personal information from a person under 18, we will delete it promptly, subject to statutory retention obligations.

10.1 Privacy Inquiries Contact:
Data Protection & Privacy Inquiries
Sheernox Technology Group
Email: support@sheernox.com (Attn: Data Privacy Officer)
Client Support Portal: https://my.sheernox.com