Data controller: Xibnarexsmyx, 701 W Georgia St, Vancouver, BC V7Y 1G5, Canada. Primary contact: assist@xibnarexsmyx.world. Telephone: +1 604-688-7235.
Summary in plain language. We collect only what we need to answer your questions, run the site securely, and respect your cookie choices. We do not sell personal data. You can ask for access, correction, or deletion subject to legal exceptions, and you may withdraw consent for optional tools.
Scope and material scope
This policy applies to personal data processed through https://xibnarexsmyx.world and related electronic communications that reference this policy. It does not govern information you provide to unrelated third parties, even if those parties are mentioned on our pages. In-person visits may involve additional notices posted at the facility; where those notices conflict with this document for on-site processing, the on-site notice prevails for that context.
If you are located in the European Economic Area, Switzerland, or the United Kingdom, you benefit from the rights described under “Your rights” below, including the right to lodge a complaint with a supervisory authority. If you reside in Canada, you may exercise similar access and correction rights under applicable provincial or federal law, subject to the same lawful limitations.
Categories of personal data
Depending on how you interact with us, we may process the following categories:
| Category | Examples | Source |
|---|---|---|
| Identity and contact | Name, email address, telephone number if you provide it | You, when submitting forms or writing to us |
| Message content | Free-text questions, scheduling preferences, feedback | You |
| Technical usage | IP address, user agent, coarse geolocation from IP, timestamps | Automatically collected in server and security logs |
| Cookie preferences | Analytics or marketing consent flags stored locally | Your browser’s storage when you use the cookie banner |
| Optional analytics identifiers | Pseudonymous identifiers if you enable analytics tools | Analytics scripts subject to your consent |
Purposes and legal bases
We process personal data for specific purposes and only where a valid legal basis exists. The table below maps common processing activities to GDPR-style bases. Equivalent grounds exist under other frameworks.
Responding to inquiries
We use contact details and message content to reply to you. Basis: performance of pre-contractual steps at your request and, where relevant, legitimate interests in operating a responsive studio inbox.
Security and abuse prevention
We monitor logs for unusual traffic to protect infrastructure. Basis: legitimate interests in maintaining confidentiality, integrity, and availability of our systems.
Optional analytics
If you opt in, we measure aggregate traffic patterns. Basis: consent under Article 6(1)(a) GDPR, which you may withdraw through the cookie settings control without affecting the lawfulness of prior processing.
Optional marketing measurement
If you opt in, we may attribute visits to campaigns. Basis: consent. We do not use this category to profile children or to make solely automated decisions with legal effects.
Retention periods
Contact form records are retained for up to twenty-four months from the last substantive message in a thread, unless accounting, taxation, litigation, or regulatory obligations require a longer period. Invoices and payment evidence, if applicable, may be kept for seven years consistent with Canadian record-keeping norms.
Server and security logs are generally rotated within ninety days unless an incident investigation requires a narrowly scoped extension. Cookie preference strings remain on your device until you clear site storage or update preferences through our banner.
Security measures
We implement administrative and technical measures appropriate to the risk, including access restrictions on mailboxes that receive form submissions, transport encryption for connections that support HTTPS, separation of production and test environments, and periodic review of hosting configuration. No method of transmission over the Internet is completely secure; we mitigate common risks but cannot warrant absolute security.
International transfers
Data may be stored or processed in Canada. Our infrastructure providers may process data in other countries. Where GDPR applies and data is transferred outside the EEA or UK, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions issued by relevant authorities.
Your rights
Subject to applicable law, you may have the right to:
- Obtain confirmation as to whether we process your personal data and receive a copy.
- Request rectification of inaccurate data or completion of incomplete data.
- Request erasure where no overriding legal ground requires continued processing.
- Object to processing based on legitimate interests, stating grounds relating to your situation.
- Restrict processing in specific circumstances, such as while verifying accuracy.
- Data portability for data you provided where processing is automated and based on consent or contract.
- Withdraw consent for optional processing at any time without affecting prior lawful processing.
- Lodge a complaint with a supervisory authority in your country of habitual residence or work.
To exercise rights, email assist@xibnarexsmyx.world with the subject line “Privacy request.” We may ask proportionate questions to confirm identity before disclosing information.
Automated decision-making
We do not use the information collected through this website to make decisions that produce legal or similarly significant effects solely by automated means. If that changes, we will update this policy and provide meaningful information about logic and consequences.
Children
This site is directed at adults arranging visits. We do not knowingly solicit personal data from children without verifiable parental authority. If you believe we received a child’s data in error, contact us so we can delete it promptly.
Canadian residents
We follow Canada’s federal private-sector privacy law, the Personal Information Protection and Electronic Documents Act (PIPEDA), and substantially similar provincial statutes where they apply. If you are in Canada, you may request access to personal information we hold about you and ask us to correct inaccuracies, subject to legal exceptions. You may raise concerns with the Office of the Privacy Commissioner of Canada at priv.gc.ca.
Advertising and measurement
If you consent through our cookie banner, we may use third-party technologies to measure how visitors reach this site and whether advertising campaigns are effective (for example, Google Ads conversion tags or remarketing tools, where we enable them). Those providers may process technical data such as device identifiers, truncated IP addresses, and interaction events. You may withdraw consent at any time via Cookie settings or your browser. You may also manage ad personalization through Google Ads settings and, where available, industry opt-out pages such as the Network Advertising Initiative at optout.networkadvertising.org.
We do not use advertising or measurement tools on this site to profile children or to make solely automated decisions with legal or similarly significant effects about you.
Changes to this policy
We may revise this policy to reflect legal, technical, or organizational changes. The reference date at the top of the page helps you see when the text was last aligned with our practices. Continued use of the site after updates constitutes acceptance where permitted by law; material changes to processing will be brought to your attention when required.