Privacy policy

Effective: July 13, 2026 · Last updated: July 13, 2026

This policy explains how WW.CX handles personal information on ww.cx, the WW.CX store, product dossiers, administrator services, and affiliated project or campaign sites that link to this policy. WW.CX is operated by Spirit Creek Gardens Inc. for itself and participating project brands shown on the site, including Christmas Island Worldwide and Wild Freedom Works, unless a particular service identifies a different operator.

1. Information we collect

Depending on how you interact with us, we may collect:

• Contact and account information, such as name, email address, telephone number, username, organization and communication preferences.
• Order and transaction information, such as products, quantities, prices, delivery address, invoice details, payment status, refunds, tax information and shipping or tracking records. Complete payment-card details are handled by the payment provider rather than stored by WW.CX.
• Communications, including messages, support requests, submissions, feedback and records of our responses.
• Technical and usage information, such as IP address used for security or short-lived processing, date and time, requested pages, referring domain, browser and device characteristics, language, time zone, screen size, diagnostic events and security logs.
• Preferences and browser storage, including shopping-cart contents, privacy choices and similar settings stored on your device.
• Administrative and business records, including authorized-user activity, audit records, agreements, vendor and professional-service information, and records needed for accounting, compliance, fraud prevention, disputes or business continuity.

2. How information is collected

We collect information directly from you, automatically from your browser or device when you use a service, from payment, delivery, hosting, security and communications providers, and from lawful public or business sources when reasonably necessary for an identified purpose.

3. How we use information

We may use personal information to:

• provide, administer, personalize and support websites, stores, accounts, content, communications, products and services;
• create carts, process transactions, issue invoices or refunds, calculate tax, arrange delivery and provide order or tracking updates;
• authenticate users, maintain records, diagnose problems, secure systems, prevent fraud or abuse, enforce terms, and protect people, property and legal rights;
• respond to inquiries, maintain relationships, conduct research, measure performance, understand demand, improve existing offerings and develop new offerings;
• send operational messages and, where consent or applicable law permits, news, promotions or other marketing communications;
• comply with tax, accounting, regulatory, court, law-enforcement and other legal requirements;
• establish, exercise or defend legal claims, manage insurance and professional advice, and carry out audits, reorganizations, financing, due diligence or a genuine sale, merger or transfer of a business or asset; and
• use information for another compatible purpose that is reasonably connected with the circumstances, or for a new purpose after providing any notice or consent required by law.

We limit collection, use and disclosure to purposes that are reasonable and appropriate in the circumstances. Optional activities are kept separate from services that require information to function.

4. Cart storage, cookies and analytics

The public store saves selected products and quantities in your browser’s local storage so the cart can remain available across catalog and dossier pages. This storage is essential to the cart and is not used for cross-site advertising.

WW.CX offers optional first-party analytics after a visitor chooses to allow them. Analytics may record page views and broad events such as viewing a product, opening the cart, adding an item or beginning checkout, together with referring domain and broad device information. The public analytics system does not store raw IP addresses; it uses a short-lived cryptographic identifier designed to change daily. The default analytics retention period is 90 days, subject to administrator settings and legitimate security or legal needs.

The private administrator area uses an essential secure session cookie. Service providers such as Stripe may use their own essential or permitted technologies when you enter a provider-hosted service. WW.CX honours supported privacy signals, including Global Privacy Control and Do Not Track, by keeping optional WW.CX analytics disabled.

5. When information is disclosed

We may disclose information to service providers and other parties that need it for the purposes described above, including payment processors, hosting and infrastructure providers, email or communications services, shipping carriers, tax and accounting services, security and fraud-prevention providers, insurers, lawyers, auditors and other professional advisers. We may also disclose information when required or permitted by law, to protect rights or safety, or in connection with a genuine business transaction.

Service providers are expected to use information only for contracted or legally permitted purposes and to apply appropriate safeguards. Their own privacy notices may also apply when you interact directly with them.

6. International processing

Some providers may process or store information outside your province or country. Information in another jurisdiction may be subject to that jurisdiction’s laws and lawful access by courts, law-enforcement or national-security authorities.

7. Sale, advertising and automated decisions

WW.CX does not sell or rent personal information for money and does not currently disclose personal information for third-party cross-context behavioural advertising on the public WW.CX site. We do not currently make decisions producing legal or similarly significant effects solely through automated processing. We will update this policy and provide any required choices before materially changing these practices.

8. Retention

We keep personal information only as long as reasonably needed for the purposes described in this policy, including fulfilment, customer service, warranties, accounting and tax requirements, fraud prevention, security, disputes, limitation periods, legal holds, backups and business continuity. Retention periods vary by record type. Information that is no longer required is deleted, anonymized or securely isolated in accordance with operational and legal requirements.

9. Security

We use administrative, technical and physical safeguards appropriate to the sensitivity and context of the information. These include access controls, private storage for sensitive operational records, secure transport, logging, backups and separation of public website files from private store data. No system can be guaranteed completely secure, and visitors should use reasonable care when communicating or choosing account credentials.

10. Your choices and rights

You may use the Privacy choices control on public pages to allow or refuse optional WW.CX analytics. You may unsubscribe from promotional email through the message instructions or by contacting us. Subject to applicable law, you may ask to access or correct personal information, withdraw consent for future optional processing, or request deletion or restriction where available. Some information may need to be retained to complete transactions, maintain security, comply with law or establish legal rights.

11. Children

WW.CX services are intended for a general audience and are not designed to solicit personal information from children. Where information about a minor is involved, we take steps appropriate to the person’s age, the sensitivity of the information and applicable consent requirements.

12. Other websites

This policy applies only where it is posted or linked. Third-party sites and services have their own practices. A related WW.CX project may provide an additional notice when its activities require more specific information.

13. Changes to this policy

We may update this policy as services, providers or legal requirements change. The current version will be posted on this page with its effective date. We will provide additional notice or obtain consent when required for a material new use or disclosure.

14. Contact and complaints

Questions, access or correction requests, consent withdrawals and privacy complaints may be sent to the WW.CX privacy contact at orders@ww.cx. Please describe the request and the WW.CX service involved. We may need to verify identity before disclosing or changing a record.