Privacy Policy

This Privacy Policy explains in detailed terms how EntropyXYZ collects, uses, discloses, processes, and secures the personal and non-personal information of individuals (“users,” “customers,” “visitors,” “clients”) who interact with, access, purchase from, or otherwise make use of our website, online shop, services, and related communications.

By continuing to browse, access, or transact on our website, you confirm that you have read, understood, and agreed to the terms of this Policy in its entirety.

1. Purpose and Scope

This Policy governs:

  • Data collected through entropy365.com and any affiliated subdomains, landing pages, or microsites.

  • Information exchanged during purchase of products or services, including physical goods, digital goods, and service-based offerings.

  • Communications via contact forms, project requests, customer support inquiries, and newsletters.

  • Passive data collection methods including but not limited to cookies, log files, analytics tools, tracking pixels, and third-party integrations.

This Policy does not apply to:

  • Websites, apps, or platforms operated by third parties.

  • Embedded third-party content such as videos, images, or interactive media.

  • Payment providers, shipping companies, or cloud providers, each of which maintains its own independent policies.

2. Categories of Data We Collect

We may collect, directly or indirectly, the following categories of information:

A. Information Provided Voluntarily

  • Full legal name, company name, email address, postal address, billing/shipping details.

  • Payment details (processed through third-party providers, not stored by us).

  • Order information (product type, service category, purchase date, delivery details).

  • Project-related files, instructions, or attachments provided during service engagements.

B. Automatically Collected Data

  • IP address, geolocation approximations, device identifiers, and user-agent strings.

  • Browser type, operating system, device model, connection type, time zone, language settings.

  • Pages visited, session duration, click activity, referral source, and navigation paths.

  • Cart activity including products viewed, added, or abandoned.

C. Data from Cookies, Pixels, and Tracking Tools

  • Session cookies for order processing.

  • Persistent cookies for remembering cart contents, preferences, and repeat visits.

  • Analytics identifiers (used by Google Analytics, Meta Pixel, or other marketing tools).

  • Security cookies to prevent fraudulent behavior.

D. Data from Third-Party Integrations

  • Embedded media from YouTube, Vimeo, or Instagram (subject to their own privacy terms).

  • Payment processors (Stripe, PayPal, credit card gateways).

  • Cloud hosting or email delivery services.

3. Purposes of Processing

We process collected information for the following purposes:

  1. Transaction Processing: to handle orders, fulfill purchases, and provide receipts or invoices.

  2. Service Provision: to deliver digital design, web services, or consulting services.

  3. Customer Communication: to respond to inquiries, send confirmations, provide updates.

  4. Accountability: to comply with business, tax, and regulatory requirements.

  5. Optimization: to improve site functionality, fix bugs, and enhance user experience.

  6. Marketing: to share offers, newsletters, or announcements (only with consent).

  7. Security: to prevent spam, detect fraud, enforce terms, and protect systems.

  8. Archival: to maintain historical records of transactions and interactions.

4. Legal Bases for Processing

Depending on your jurisdiction, data may be processed under one or more of the following legal bases:

  • Consent: when you actively agree (e.g., signing up for newsletters).

  • Contractual Necessity: to fulfill orders or deliver services you requested.

  • Legal Obligation: compliance with tax, accounting, or recordkeeping laws.

  • Legitimate Interests: business optimization, fraud prevention, analytics.

5. Data Sharing and Disclosure

We may disclose information to:

  • Payment Providers: Stripe, PayPal, and credit card processors to authorize and complete transactions.

  • Delivery & Logistics: postal services, couriers, or third-party shippers for order fulfillment.

  • Hosting & IT Providers: cloud storage, backup services, email delivery systems.

  • Analytics Providers: Google Analytics, Meta Ads, or similar platforms.

  • Regulatory Authorities: when legally required by courts, regulators, or law enforcement.

We never sell your personal information to unrelated third parties.

6. Data Retention

We retain personal data only as long as necessary for business and legal purposes:

  • Orders: retained for seven (7) years for tax and compliance.

  • Invoices/Receipts: retained per financial regulations.

  • Support Inquiries: retained until the case is resolved, then archived or deleted.

  • Marketing Data: retained until you unsubscribe or request deletion.

  • Cookies: expire automatically based on type (from 24 hours up to 2 years).

7. Data Subject Rights

You may have the right to:

  • Request access to your personal data.

  • Request correction of inaccurate data.

  • Request deletion (“right to be forgotten”).

  • Request restriction of processing.

  • Object to certain processing (e.g., marketing).

  • Request transfer of your data in machine-readable format (portability).

  • Withdraw consent at any time.

Requests should be submitted via our contact details (see Section 15).

8. Cookies and Tracking Technologies

Types of Cookies Used

  • Strictly Necessary Cookies: required for core site functionality.

  • Functional Cookies: remember preferences like language and region.

  • Performance Cookies: collect anonymous usage statistics.

  • Targeting Cookies: enable ad personalization and remarketing.

Managing Cookies

You can adjust cookie preferences in your browser. Disabling cookies may result in reduced functionality (e.g., cart reset).

9. Data Transfers Across Borders

Our servers, providers, or partners may process data in jurisdictions outside your country. By using our site, you consent to such transfers. Safeguards such as Standard Contractual Clauses (SCCs) or equivalent protections may apply.

10. Security Measures

We implement:

  • SSL/TLS encryption for all data in transit.

  • Firewalls and intrusion detection systems.

  • Regular monitoring, patching, and audits.

  • Restricted access to sensitive data on a need-to-know basis.

However, no system is entirely secure. Users share data at their own risk.

11. Third-Party Links and Services

Our site may link to third-party platforms. We are not responsible for their privacy practices. Users are encouraged to review external policies before engaging.

12. Minors

Our services are not intended for children under 13 (or equivalent local age). We do not knowingly collect data from minors.

13. Automated Decision-Making

Certain processes (e.g., spam filtering, fraud detection, marketing segmentation) may be partially automated. These do not have legal or significant effects on individuals.

14. Policy Updates

This Policy may be revised periodically. Material changes will be posted here with an updated “Effective Date.” Continued use of the site constitutes acceptance of updated terms.

Scroll to Top