Privacy Policy

Last updated: April 2026

1. Who We Are

Xplorama is a digital downloads store based in Manitoba, Canada. We sell STL files, PDF guides, and digital art assets for instant download. For privacy inquiries, contact us at noreply@xplorama.ca.

2. Personal Data We Collect

When you visit our website or make a purchase, we may collect the following personal information:

• Name and email address — provided at checkout for order processing and delivery
• Billing address and postal code — required for payment processing
• Payment information — processed securely through Stripe or PayPal; we do not store your card numbers on our servers
• IP address — collected automatically for security, fraud prevention, and analytics
• Browser and device information — collected via cookies and analytics tools
• Purchase history and download activity — retained for order management and support

3. How We Use Your Data

Your personal information is used solely for the following purposes:

• Processing and fulfilling your digital download orders
• Delivering download links and order confirmation emails
• Providing customer support and responding to inquiries
• Sending transactional emails related to your purchase
• Analyzing website usage and improving our services via Google Analytics
• Preventing fraud and ensuring platform security
• Complying with legal obligations under Canadian law

4. Cookie Policy

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device. We use:

• Essential cookies — required for the website and shopping cart to function
• Analytics cookies — via Google Analytics to understand how visitors use our site
• Payment cookies — set by Stripe and PayPal during checkout

You can control cookie preferences through your browser settings. Disabling essential cookies may affect site functionality.

5. Third-Party Services

We use the following third-party services to operate our store. Each has its own privacy policy:

• PayPal — payment processing (paypal.com/privacy)
• Stripe — payment processing (stripe.com/privacy)
• Google Drive — secure file storage and delivery
• Google Analytics — website analytics and traffic reporting
• Make.com — automation of order fulfillment and email delivery workflows

These services may process your data in accordance with their own privacy policies. We only share the minimum data necessary for each service to function.

6. Data Retention Policy

We retain your personal data for the following periods:

• Order records — 7 years, as required by Canadian tax law
• Email records — 2 years for transactional history
• Analytics data — 26 months (Google Analytics default)
• Download logs — 90 days after link expiry

After the applicable retention period, your data is securely deleted or anonymized.

7. PIPEDA Compliance

Xplorama operates in full compliance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). Under PIPEDA, we are accountable for the personal information in our possession. We collect only the information necessary for identified purposes, obtain meaningful consent, and protect your information with appropriate safeguards.

8. Your Rights

As a resident of Canada or the EU, you have the following rights regarding your personal data:

• Right of Access — request a copy of the personal data we hold about you
• Right to Correction — request correction of inaccurate or incomplete data
• Right to Deletion — request deletion of your personal data, subject to legal retention requirements
• Right to Withdraw Consent — withdraw consent for non-essential data processing at any time

To exercise any of these rights, contact us at noreply@xplorama.ca with your name, email address, and the nature of your request. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. All data transmitted through our site uses SSL/TLS encryption. Payment data is handled exclusively by PCI-DSS compliant processors (Stripe and PayPal).

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Continued use of our website after changes are posted constitutes acceptance of the revised policy.

11. Contact for Privacy Requests