Privacy Policy
In view of the development of new communication tools and the implementation of stricter data protection laws (particularly Law 25 in Quebec), it is necessary to pay particular attention to the protection of private life. This is why we commit to respecting the confidentiality of the personal information we collect.
PERSONNEL INFORMATION PROTECTION OFFICER
The Personal Information Protection Officer is designated to ensure compliance with this policy.
Karine Goulet, President and Founder
Email: [email protected]
COLLECTION OF PERSONAL INFORMATION
We collect the following information:
- Last name and First name
- Mailing address (Billing and delivery)
- Postal code
- Email address
- Phone number / Fax number
The personal information we collect is gathered through forms (registration, order) and through the interactivity established between you and our Website. We also use, as indicated below, cookies and/or log files to gather information about you.
PURPOSES AND USE OF INFORMATION
We use the collected information for the following specific purposes:
- Order Management: Processing, shipping, and tracking of purchases.
- Customer Communications: Responding to requests and providing assistance.
- Marketing and Promotion: Sending information, promotional offers, and the newsletter (with consent).
- Improvement: Statistics and analysis to enhance user experience and offers.
- Advertising: Targeted advertising (only via cookies, see dedicated section).
SHARING OF PERSONAL INFORMATION
Kamelya Aromacosmétique commits not to sell, rent, or trade your personal information to third parties, except in the following cases and for the following purposes:
- Carriers: Your last name, first name, and address are transmitted to carriers (e.g., Canada Post, Purolator) for the execution of delivery.
- Service Providers: We use third-party services (e.g., payment platform, email newsletter platform **Cyberimpact**) that may have access to certain information, only for the provision of the required services.
TRANSFER OF INFORMATION OUTSIDE QUEBEC (LAW 25 COMPLIANCE)
Please note that some of the service providers we use (notably **Google Analytics** and **Meta Ads**) may have servers or process personal information outside of Quebec or Canada (mainly in the United States). Before communicating your personal information to these entities, Kamelya Aromacosmétique conducted a Privacy Factor Assessment (PFA) and ensures that these transfers benefit from adequate protection according to the requirements of Law 25. By accepting this policy, you consent to these transfers.
RIGHT OF ACCESS AND RECTIFICATION
We commit to recognizing a right of access and rectification for the concerned individuals wishing to consult, modify, or even strike out information concerning them. The exercise of this right will be done by communicating with the Personal Information Protection Officer:
Email: [email protected]
RIGHT TO OBJECT AND WITHDRAW
We commit to offering you a right to object and withdraw concerning your personal information:
- The right to object is understood as the possibility of refusing that your information be used for certain purposes (e.g., advertising).
- The right to withdraw is understood as the possibility of requesting that your information no longer appear, for example, in a mailing list (e.g., unsubscribing from the newsletter).
To exercise these rights, you may contact the Personal Information Protection Officer:
Email: [email protected]
SECURITY AND RETENTION PERIOD
The personal information we collect is stored in a secure environment. The people working for us are required to respect the confidentiality of your information. We use the following measures: Access Management – authorized person and User ID / Password.
We commit to maintaining a high degree of confidentiality by integrating the latest technological innovations. The site notably uses **SSL/TLS encryption (via HTTPS)** to secure transmitted data. Financial transactions are processed by the **Lightspeed** platform, which ensures **compliance with data security standards (PCI DSS)**. However, since no mechanism offers maximum security, a degree of risk is always present when using the Internet. It is important that your devices are secured when browsing the internet.
Retention Period:
Your personal information is kept for the time necessary to achieve the objectives described in this policy, and is then securely destroyed. Generally, order data is kept for a period of **7 years**, in accordance with legal and tax obligations.
COOKIES AND LOG FILES
We use cookies on our Website to improve user experience and for analysis purposes. A cookie is a small text file that is placed on your device to remember certain information.
Cookies allow us to:
- Personalize the site and save your preferences.
- Analyze site traffic and statistics (e.g., Google Analytics).
- Propose targeted advertisements.
Managing your consent: You have the option to accept or refuse non-essential cookies (those that are not necessary for the site to function) directly via the consent mechanism (banner) on our Website or by configuring your browser. Please note that disabling certain cookies may affect your browsing experience.
