Privacy notice
Last updated October 5, 2026
This notice explains what personal information ELXR collects, why, and what your rights are. We collect as little as possible.
1. Who is responsible
Yusuf Sulayman, trading as ELXR, is the controller of your personal information.
3940 Pender St, Burnaby, BC V5C 2L6, Canada
Privacy contact: [email protected]
2. What we collect and why
- When you buy: your name, email address, billing country and postal code, order details and, where required, tax information. We use this to deliver your download, send updates, provide support, handle refunds and keep accounting and tax records. Card and PayPal details are entered directly with the payment provider. We never see or store them.
- When you email us: your email address and whatever you include in the message, used to reply and help you.
- When you visit the site: we use Cloudflare Web Analytics, which counts visits without cookies and without tracking you across sites. Our host, Cloudflare, processes your IP address to deliver pages and protect the site from attacks. The site loads fonts from Google Fonts, which receives your IP address to serve them.
We don't sell your personal information, and we don't use it for advertising.
3. Legal basis
We process your information to perform our contract with you (delivering what you bought and supporting it), to meet legal obligations (tax and accounting records), and for our legitimate interests (running and securing the site, answering your messages). Where the law requires consent, we'll ask for it, and you can withdraw it at any time.
4. Who we share it with
- Paddle.com (our reseller and Merchant of Record), which processes payments, calculates and collects sales tax and VAT, and sends receipts. See Paddle's privacy notice.
- Payhip (our previous checkout platform) and its payment processors Stripe and PayPal, for orders placed through Payhip. See Payhip's privacy policy.
- Cloudflare, which hosts the site and provides analytics.
- Google, which provides our email (Gmail) and the site's fonts.
- Authorities or advisers, where the law requires it.
5. International transfers
These providers may store and process information in Canada, the United States, the EU, the UK and other countries. When information leaves your country, we rely on safeguards such as standard contractual clauses and the providers' own data-protection commitments.
6. How long we keep it
Order records: as long as needed to let you re-download and receive updates, and at least as long as Canadian tax law requires (generally six years). Support emails: up to two years after our last contact. Analytics: aggregated counts only.
7. Your rights
Depending on where you live (including under Canada's PIPEDA, BC's PIPA, the EU and UK GDPR, and US state privacy laws), you can ask to:
- access the personal information we hold about you;
- correct it;
- delete it, where we don't need to keep it by law;
- restrict or object to how we use it;
- receive a copy in a portable format;
- withdraw consent, where we rely on it.
Email [email protected]. We'll respond within one month. You can also complain to your local data-protection authority, for example the Office of the Privacy Commissioner of Canada, or the authority in your EU country or the UK ICO.
8. Cookies
The site itself doesn't use tracking or advertising cookies. The checkout window may set cookies that are needed to process payments securely.
9. Security
The site is served only over HTTPS. Payments are handled by established, PCI-compliant payment providers, and we limit who can access order information.
10. Children
ELXR products are not directed at children under 13, and we don't knowingly collect their information.
11. Changes
We'll update this notice if anything changes. The date at the top shows the latest version.
ELXR