Effective date: [DATE]
Last updated: [DATE]
[LEGAL NAME OF THE COMPANY], operating as [TRADE NAME] (“we”), respects your privacy. This policy explains how we collect, use, disclose and protect personal information when you visit [DOMAIN], create an account, make a purchase or contact us.
1. Privacy Officer
- Company: [LEGAL NAME]
- Address: [BUSINESS ADDRESS]
- Privacy Officer: [NAME OR TITLE]
- Email: [PRIVACY EMAIL]
- Phone: [PHONE]
2. Information we collect
Depending on how you use the store, we may collect:
- Name, mailing address, email address and phone number.
- Billing and shipping addresses.
- Information about orders, returns, warranties and customer service.
- Account information and preferences.
- Payment information processed by our payment providers. We [DO NOT STORE/STORE] full card details.
- IP address, device, browser and browsing data.
- Marketing preferences and consent records.
- Information obtained through cookies and similar technologies.
- Any information you choose to provide to us.
3. How we collect information
We collect information:
- Directly from you when you buy, create an account or fill in a form.
- Automatically through cookies and browsing tools.
- From providers involved in the transaction, such as payment processors, e-commerce platforms and carriers.
- From advertising platforms or social networks, when you have authorized that communication.
4. What we use the information for
We may use it to:
- Process payments, orders, deliveries, returns and warranties.
- Create and manage accounts.
- Provide customer service.
- Detect fraud and protect the store.
- Meet tax, accounting and legal obligations.
- Improve our products, services and website.
- Carry out usage analytics.
- Personalize content or advertising, where appropriate and with the required consent.
- Send commercial communications in accordance with Canada's anti-spam legislation.
We will only collect, use or disclose personal information for purposes that a reasonable person would consider appropriate in the circumstances.
5. Consent
We will ask for consent clearly and understandably when it is needed.
The form of consent will depend on the sensitivity of the information, the purpose and the user's reasonable expectations. We will ask for express consent for uses that are not necessary to provide the service, such as certain advertising or profiling activities.
You may withdraw your consent, subject to legal or contractual restrictions and reasonable notice. Withdrawal may prevent us from providing certain services.
6. Providers and disclosure of information
We may share information with providers that help us operate the store, including:
- [E-COMMERCE PLATFORM]
- [PAYMENT PROCESSOR]
- Shipping and logistics companies.
- Hosting and security services.
- Email and customer service providers.
- Analytics and advertising services, where authorized.
- Accounting, legal or professional advisors.
We may also disclose information when required by law, to protect our rights, or as part of a legally permitted sale, merger or business reorganization.
We do not sell personal information for money. If we use information for interest-based advertising, we will say so and offer the corresponding controls.
7. Processing outside Canada
Some providers may store or process information outside your province or outside Canada, including in [COUNTRIES].
In those cases, the information may be subject to the laws and authorities of the place where it is processed. We apply reasonable contractual and organizational measures to protect it.
You can request additional information by writing to [PRIVACY EMAIL].
8. Retention
We keep information only for as long as necessary for the stated purposes, to meet legal obligations and to handle possible claims.
Specific periods depend on the type of information. For example, transaction records may be kept for the applicable tax and accounting periods.
When information is no longer needed, we delete, anonymize or securely destroy it.
9. Security
We apply reasonable administrative, technical and physical measures to protect information against loss, theft, and unauthorized access, use or disclosure.
No system is completely secure. When a privacy incident occurs, we will investigate and notify individuals and authorities where the law requires.
10. Your rights
Depending on the applicable law, you may:
- Request access to your personal information.
- Request correction of inaccurate information.
- Withdraw a consent.
- Submit a question or complaint.
- Request information about our providers and practices.
- Request portability, de-indexing or deletion in the cases recognized by applicable law.
To exercise these rights, write to [PRIVACY EMAIL]. We may ask for information to verify your identity.
If we do not resolve your complaint satisfactorily, you can contact the Office of the Privacy Commissioner of Canada or the relevant provincial authority.
11. Commercial communications
We will only send emails, text messages or other commercial communications when we have the required consent or a legal exception applies.
Each communication will include our identification, contact information and a way to unsubscribe. We will process unsubscribe requests within the applicable legal period, which is currently ten business days under CASL.
12. Cookies and tracking
We use cookies and similar technologies to operate the store, remember preferences, analyze traffic and, when you have given your consent, personalize advertising.
You can find out more and manage your preferences in our Cookie Policy.
13. Minors
Our services are not directed at minors under [AGE]. We do not knowingly collect information from minors without the consent required by applicable law.
In Québec, collecting information directly from children under 14 may require the consent of a parent or guardian.
14. Changes
We may update this policy to reflect legal, technological or business changes. We will publish the updated version and state its effective date.
Where appropriate, we will notify you of important changes and ask for new consent.
15. Contact
For questions, requests or complaints:
Privacy Officer
[LEGAL NAME OF THE COMPANY]
[ADDRESS]
[EMAIL]
[PHONE]