GLOBAL PRIVACY POLICY

This Global Privacy Policy ("Policy") defines the framework for how CLEAN Energy Solutions Inc., doing business as ENVEE ("Company", "we", "us"), collects, processes, and safeguards personal data.

Data Controller: CLEAN Energy Solutions Inc.
266 Cornerstone Hts, NE, Calgary, AB, T3N 1R8, Canada
Contact: support@enveeofficial.com

Scope: This policy applies globally to all users accessing our website (enveeofficial.com), mobile interfaces, or purchasing our products. We have designed this framework to meet the highest standards of global privacy laws, including GDPR (Europe), PIPEDA (Canada), and CCPA/CPRA (USA).

We collect data in structured categories to ensure clarity and compliance.

A. Identity & Contact Information

What: Name, shipping address, billing address, email address, and phone number.

Source: Provided directly by you at checkout or newsletter signup.

B. Commercial & Transactional Data

What: Products purchased, order history, sizing preferences, and customer service interactions.

Payment Note: We do not store raw credit card numbers. Payments are tokenized and processed securely by third-party gateways (e.g., Shopify Payments).

C. Technical & Device Data (Cookies & Tracking)

What: IP address, browser type, time zone, geolocation, and "clickstream" data.

Mechanism: Collected automatically via Cookies, Pixels, and Log Files.

Essential Cookies: Required for the site to function (e.g., keeping items in your cart).

Marketing & Automation Technologies: We use third-party cookies (from our email/SMS providers and ad partners) to recognize your device and send personalized reminders (like abandoned cart notifications).

D. Profile & Inference Data

What: Inferences drawn from your shopping behavior (e.g., "Interested in Activewear") to personalize your experience.

We do not sell personal data for cash. To operate a global brand, we share data with trusted partners in the following Operational Categories:

Service Providers (Processors):

• Infrastructure: Shopify (hosts our store).
• Communication Platforms: Third-party vendors that manage our email campaigns, SMS messaging, and customer relationships (CRM).

Logistics Network (Fulfillment):

• Warehouses: Third-Party Logistics (3PL) providers who pick and pack your order.
• Carriers: DHL, FedEx, Canada Post, and others who physically deliver your package.

Customs & Tax Authorities (DDP Compliance):

Requirement: As we offer Delivered Duty Paid (DDP) shipping, we are legally required to transmit your Name, Address, and Order Value to customs brokers and government agencies in your destination country to clear goods and pay taxes on your behalf.

Advertising Partners (Targeting):

Activity: We use third-party tracking technologies (e.g., Meta Pixel, Google Tags) to serve relevant ads. Under US state laws (like CCPA), this data collection may be defined as "sharing" for cross-context behavioral advertising.

Global Flow: Your data is processed in Canada (our HQ) and may be transferred to the United States (where key infrastructure like Shopify is hosted) or to the country where our warehouse is located.

Protection: We rely on recognized legal mechanisms (such as Standard Contractual Clauses or Adequacy Decisions) to ensure your data remains protected regardless of where it is processed.

To comply with strict telecommunications standards (10DLC/TCPA) and ensure your messages are delivered:

Strict Non-Sharing: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Service Administration: We disclose mobile data to our messaging platform providers strictly for the purpose of sending our messages to you. These providers are contractually prohibited from using your data for their own purposes.

Isolation: SMS consent is treated separately from email. You may opt-out of SMS at any time by replying "STOP" to any message.

We extend these core rights to all users, harmonizing global standards:

Right to Access: Request a copy of the personal data we hold about you.

Right to Correction: Fix inaccurate data.

Right to Erasure: Request we delete your data (subject to mandatory tax retention periods, typically 7 years).

Right to Opt-Out:

• Marketing: Click "Unsubscribe" in emails or reply "STOP" to SMS.
• Targeted Ads: You may opt-out of ad tracking via your device settings or the Digital Advertising Alliance.

Global Privacy Control (GPC): We honor browser-based GPC signals. If your browser broadcasts a "Do Not Sell/Share" signal, our system will automatically limit tracking cookies for your session.