Effective Date: March 24, 2026
Chax Tool, accessible at https://chaxtool.shop, is a commercial entity providing tools and equipment for professional and consumer use. This Privacy Policy establishes how we collect, process, store, and protect personal data in accordance with applicable data protection regulations.
Information Collection
We collect personal data necessary for the operation of our e-commerce services. This includes identity and contact information such as name, email address, telephone number, and physical addresses for billing and shipping purposes. Transaction data encompasses order details, purchase history, and payment confirmation records. We additionally collect technical data including IP addresses, browser specifications, device identifiers, and usage patterns to ensure platform security, prevent fraudulent activity, and optimize website performance. When users submit comments, reviews, or inquiries, we process the content provided alongside technical metadata to facilitate spam detection and content moderation. Users uploading visual content should be aware that embedded EXIF data, including geolocation tags, may remain accessible to other parties.
Cookies and Tracking Technologies
We employ cookies and similar technologies to maintain functionality and enhance user experience. Essential cookies enable core operations including session management, authentication, and shopping cart retention. Preference cookies store user-selected settings such as language and currency preferences. Analytics cookies collect aggregated usage statistics to inform platform improvements. Marketing cookies, where deployed, facilitate personalized promotional communications based on user consent. Users may manage cookie preferences through browser settings; however, disabling essential cookies may impair site functionality. Third-party embedded content, including videos and interactive media, operates under independent privacy frameworks and may implement separate tracking mechanisms.
Data Processing and Third-Party Disclosure
Personal data is processed exclusively for legitimate business purposes including order fulfillment, payment processing, delivery coordination, customer support provision, and regulatory compliance. Payment card data is processed through PCI DSS-compliant payment service providers and is not retained on our infrastructure. We disclose personal data to carefully selected processors including logistics providers for shipment execution, payment gateways for transaction authorization, and cybersecurity services for threat detection and prevention. We do not engage in the sale or unauthorized commercial transfer of personal data to external parties.
Data Retention Periods
We retain personal data only for durations justified by operational necessity and legal obligation. Transaction records are maintained for seven years to satisfy tax reporting and accounting requirements. Account information is preserved until the user submits a deletion request. Correspondence and review content may be retained indefinitely to preserve business records and maintain platform integrity. Technical logs are typically purged after ninety days unless required for security investigations.
Data Subject Rights
Individuals possess specific rights regarding their personal data. These include the right to access personal data held by us, request correction of inaccurate information, obtain erasure of data where no overriding legal basis for retention exists, restrict processing under specified circumstances, receive data in a structured machine-readable format for transfer to another controller, and object to processing based on legitimate interests or direct marketing. To exercise these rights, individuals should submit requests to our designated contact point. We undertake to respond to valid requests within thirty days of receipt.
Security Measures and Limitations
We implement technical and organizational security measures appropriate to the risk profile of the data processed. These measures include encryption protocols for data transmission, access control systems, regular security assessments, and contractual safeguards with third-party processors. Despite these precautions, absolute security cannot be guaranteed for internet-based data transmission or electronic storage systems.
International Data Transfers
Where personal data is transferred outside the jurisdiction of collection, we ensure appropriate transfer mechanisms are implemented, such as Standard Contractual Clauses or adequacy decisions recognized under applicable data protection law.
Policy Modifications
We reserve the right to amend this Privacy Policy to reflect changes in legal requirements, business operations, or data processing activities. Material modifications will be communicated through direct notification or prominent website publication. Continued use of our services following policy updates constitutes acceptance of revised terms.
Contact Information
For inquiries regarding this Privacy Policy, data subject requests, or privacy-related concerns, please contact: