GLOBAL PRIVACY POLICY

This Global Privacy Policy explains how CLEAN Energy Solutions Inc., operating under the brand ENVEE, collects, uses, and protects personal data. The company acts as the data controller and is located at 266 Cornerstone Hts NE, Calgary, AB, T3N 1R8, Canada. This policy applies to all users worldwide who access our website, mobile platforms, or purchase our products. It is designed to comply with major privacy regulations, including GDPR in Europe, PIPEDA and Law 25 in Canada, and CCPA/CPRA in the United States.

We process personal data based on several legal grounds depending on the purpose. This includes contractual necessity to fulfill orders and deliver products, user consent for marketing communications such as emails and SMS (which can be withdrawn at any time), legal obligations related to tax, customs, and fraud prevention, and legitimate business interests such as improving our website, ensuring security, and analyzing user behavior.

We collect different categories of personal data to operate our services effectively. This includes identity and contact information such as name, address, email, and phone number provided during checkout or account creation. We also collect commercial and transactional data, including purchase history, preferences, and customer service interactions. Technical and device data is collected automatically through cookies and similar technologies, including IP address, browser type, location data, and browsing behavior. Additionally, we may generate profile and inference data based on user activity, such as identifying product interests.

Our store is hosted on Shopify, which automatically collects technical and transactional data necessary to operate the platform, including device information and browsing activity. We also use Klaviyo to manage email and SMS communications, which involves processing contact details, purchase history, and engagement data to personalize messaging. These service providers may process and store data in the United States or other jurisdictions.

We share personal data only when necessary to operate our business. This includes sharing with service providers such as Shopify, Klaviyo, Gorgias, and logistics partners. We may also share required information with customs authorities to comply with import regulations. Advertising partners such as Meta, Google, and TikTok may receive data through tracking technologies for marketing purposes. Within our corporate structure, ENVEE Holdings Inc. may process data for advertising verification, while ENVEE IP LLC currently does not process customer data. For order fulfillment, we partner with CJ Dropshipping in China, which coordinates shipping through carriers such as DHL, FedEx, and China Post. These carriers receive necessary delivery information and operate under their own privacy policies.

As part of our global operations, personal data may be transferred across multiple countries. Data may be processed in Canada, transferred to the United States for platform and marketing services, and to China for order fulfillment through CJ Dropshipping. For Canadian users, transfers are managed under PIPEDA to ensure comparable protection. For users in the European Union and the United Kingdom, transfers rely on Standard Contractual Clauses approved by the European Commission. For U.S. users, we comply with applicable state privacy laws when transferring data internationally.

We treat SMS consent separately from email consent to ensure transparency. Users who opt in to receive SMS communications can withdraw their consent at any time by replying “STOP.” Our communication providers are contractually restricted from using personal data for purposes beyond delivering these messages.

Depending on your location, you may have rights regarding your personal data. These rights may include requesting access to your data, correcting inaccuracies, requesting deletion (subject to legal obligations), and opting out of marketing communications or targeted advertising. California residents may also opt out of the sale or sharing of personal data and limit the use of sensitive information. We also recognize Global Privacy Control (GPC) signals sent by compatible browsers.

We use cookies and similar technologies to operate and improve our website. Essential cookies are required for basic functionality, while analytics and marketing cookies are optional and require user consent in regions where applicable, such as under GDPR. Users can manage their cookie preferences at any time through our cookie banner or browser settings.

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy. Order and tax records are typically retained for up to seven years to comply with legal obligations. Marketing data is retained until consent is withdrawn or after two years of inactivity. Customer service records are generally kept for up to three years.

If you have any questions about this policy or wish to exercise your privacy rights, you may contact us using the details below. Requests can be submitted via email or by mail to our designated privacy contact.