Collection of Personal Information

When you visit the site, we collect certain information about your device, your interaction with the site and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, we refer to "personal information" as any information that uniquely identifies an individual (including the information below). See the list below for more information on what personal information we collect and why.

Information on the scheme

• Examples of personal information collected include: web browser version, IP address, time zone, cookie information, the sites or products you visit, search terms and how you interact with the site.
• Purpose of collection: to accurately load the site for you, and to perform site usage analysis to optimize our site.
• Source of collection: Automatically collected when you access our site using cookies, log files, web beacons, tags or pixels [ADD OR SUBSTITUTE ANY OTHER TRACING TECHNOLOGY USED].
• Commercial Disclosure: shared with our Shopify processor [ADD ANY OTHER VENDOR YOU SHARE THIS INFORMATION WITH].

Order information

• Examples of personal information collected: name, billing address, shipping address, payment information (including credit card numbers [INSERT ANY OTHER ACCEPTED PAYMENT TYPE]), e-mail address and telephone number.
• Purpose of collection: to provide you with products or services to fulfill our contract, to process your payment information, to arrange shipping and provide you with invoices and/or order confirmations, to communicate with you, to review our orders for potential risks or fraud, and, where consistent with your preferences, to provide you with information or advertisements regarding our products or services.
• Collection source: collected from you.
• Disclosure for Marketing Purposes: shared with our Shopify processor [ADD ANY OTHER VENDOR WITH WHOM YOU SHARE THIS INFORMATION. E.G. SALES CHANNELS, PAYMENT GATEWAYS, SHIPPING AND FULFILLMENT APPLICATIONS].

Customer support information

• Examples of personal information collected: [CHANGES TO THE INFORMATION LISTED ABOVE OR ADDITIONAL INFORMATION IF NECESSARY]
• Purpose of collection: to provide customer support.
• Collection source: collected from you.
• Disclosure for commercial purposes : [ADD ANY VENDOR USED TO PROVIDE CUSTOMER SUPPORT].

[INSERT ANY OTHER INFORMATION YOU COLLECT: OFFLINE DATA, PURCHASED MARKETING DATA/LISTINGS]

[INSERT NEXT SECTION IF AGE RESTRICTION IS REQUIRED].

Minors

The site is not intended for persons under the age of [INSERT AGE]. We do not intentionally collect personal information from children. If you are the parent or guardian and you believe that your child has provided us with personal information, please contact us at the address below to request its deletion.

Sharing Personal Information

We share your personal information with service providers to help us provide our services to you and fulfil our contracts with you, as described above. For example:

• We use Shopify to power our online shop. You can find out more about how Shopify uses your personal information here: https://www.shopify.com/legal/privacy.
• We may share your personal information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information that we receive, or to protect our rights in any other way.
• [INSERT INFORMATION ON OTHER SERVICE PROVIDERS].

[INCLUDE THE FOLLOWING SECTION IF YOU USE REMARKETING OR TARGETED ADVERTISING].

Behavioural Advertising

As described above, we use your personal information to provide you with targeted advertisements or marketing communications that we think may be of interest to you. For example:

• [INSERT IF APPLICABLE] We use Google Analytics to help us understand how our customers use the site. You can find out more about how Google uses your personal information here: . You can also unsubscribe from Google Analytics here: https://policies.google.com/privacy?hl=en.Youhttps://tools.google.com/dlpage/gaoptout.
• [INSERT IF YOU USE A THIRD-PARTY MARKETING DEVICE THAT COLLECTS PURCHASER ACTIVITY INFORMATION ON YOUR SITE] We share information with our advertising partners about your use of the site, your purchases, and your interaction with our advertisements on other websites. We collect and share some of this information directly with our advertising partners, and in some cases through the use of cookies or other similar technologies (to which you may consent, depending on your location).
• [INSERT OTHER ADVERTISING SERVICES USED].

For more information on how targeted advertising works, you can visit the Network Advertising Initiative ("NAI") education page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can object to targeted advertising by :

[INCLUDE OPT-OUT LINKS FOR ALL SERVICES USED. COMMON LINKS INCLUDE :

• FACEBOOK - https://www.facebook.com/settings/?tab=ads
• GOOGLE - https://www.google.com/settings/ads/anonymous
• BING - https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads]

In addition, you may opt out of certain of these services by visiting the Digital Advertising Alliance's opt-out portal at http://optout.aboutads.info/.

Use of Personal Information

We use your personal information to provide you with our services, which include: offering products for sale, processing payments, shipping and fulfilling your order, and keeping you informed of new products, services and offers.

[INCLUDE THE FOLLOWING SECTION IF YOUR SHOP IS LOCATED IN EUROPE OR IF YOU HAVE CUSTOMERS IN EUROPE].

Legal basis

In accordance with the General Data Protection Regulation ("GDPR"), if you are a resident of the European Economic Area ("EEA"), we process your personal information under the following legal bases:

[INCLUDE EVERYTHING THAT APPLIES TO YOUR BUSINESS].

• Your consent ;
• The performance of the contract between you and the Site;
• Compliance with our legal obligations ;
• To protect your vital interests ;
• Performing a task in the public interest ;
• For our legitimate interests, which do not override your fundamental rights and freedoms.

Retention

When you place an order on the site, we will keep your personal information on file until you ask us to delete it. For more information on your right to erasure, please see the "Your Rights" section below.

Automatic Decision Making

If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making (which includes profiling), where that decision-making has a legal effect on you or significantly affects you.

We [DO/DO NOT] make fully automated decisions that have legal or otherwise significant effect using customer data.

Our Shopify processor uses limited automated decision making to prevent fraud that does not have a legal or otherwise significant effect on you.

Services that include elements of automated decision making include

• Temporary list of IP addresses associated with repeated failed transactions. This denial persists for a small number of hours.
• Temporary list of credit cards associated with denied IP addresses. This denial persists for a small number of days.

[INCLUDE THE FOLLOWING SECTION ONLY IF YOU ARE SELLING PERSONAL INFORMATION, AS DEFINED BY THE CALIFORNIA CONSUMER PRIVACY PROTECTION ACT]

Sale of Personal Information

Our site sells personal information, as defined by the California Consumer Privacy Protection Act of 2018 ("CCPA").

[INSERT :

• THE CATEGORIES OF INFORMATION SOLD ;
• INSTRUCTIONS ON HOW TO REFUSE THE SALE;
• IF YOUR COMPANY SELLS INFORMATION ABOUT MINORS (UNDER 16) AND YOU OBTAIN POSITIVE CLEARANCE;
• IF YOU PROVIDE A FINANCIAL INCENTIVE NOT TO SELL INFORMATION, PROVIDE INFORMATION ON WHAT THAT INCENTIVE IS].

Your Rights

[INCLUDE THE FOLLOWING SECTION IF YOUR SHOP IS LOCATED IN EUROPE OR IF YOU HAVE CUSTOMERS IN EUROPE].

GDPR

If you are a resident of the EEA, you have the right to access the personal information we hold about you, to transfer it to a new service and to request that your personal information be corrected, updated or deleted. If you wish to exercise these rights, please contact us using the details below [OR INSERT ALTERNATIVE INSTRUCTIONS FOR SENDING ACCESS, ERASING, CORRECTION AND PORTABILITY REQUESTS].

Your personal data will first be processed in Ireland and then transferred outside of Europe for storage and processing, including to Canada and the US. For more information on GDPR compliance of data transfers, see Shopify's GDPR white paper: https://help.shopify.com/en/manual/your-account/privacy/GDPR.

[INCLUDE THE FOLLOWING SECTION IF YOUR BUSINESS IS SUBJECT TO THE CALIFORNIA CONSUMER PRIVACY ACT].

CCPA

If you reside in California, you have the right to access the personal information we hold about you (also known as the "right to know"), to transfer it to a new service, and to request that your personal information be corrected, updated or deleted. If you wish to exercise these rights, please contact us using the details below [OR INSERT ALTERNATIVE INSTRUCTIONS FOR SENDING ACCESS, ERASING, CORRECTION AND PORTABILITY REQUESTS].

If you wish to appoint an authorised agent to submit these requests on your behalf, please contact us at the address below.

Cookies

A cookie is a small amount of information that is downloaded to your computer or device when you visit our site. We use a number of different cookies, including functional, performance, advertising and social media or content cookies. Cookies enhance your browsing experience by allowing the website to remember your actions and preferences (such as logging in and selecting your region). This means that you do not have to re-enter this information each time you return to the site or navigate from page to page. Cookies also provide information about how people use the website, for example, whether they are first-time or repeat visitors.

We use the following cookies to enhance your experience on our site and to provide our services.

Cookies Needed To Run The Store

Name	Function
_ab	Used in connection with access to admin.
Secure session	Used in connection with navigation in a shop window.
cart	Used in connection with the shopping cart.
cart_sig	Used in connection with the cash register.
cart_ts	Used in connection with the cash register.
checkout_token	Used in connection with the cash register.
secret	Used in connection with the cash register.
secure_client_sign	Used in connection with the customer's connection.
storefront_digest	Used in connection with the customer's connection.
_shopify_u	Used to facilitate the updating of customer account information.

Reports and Analyses

Name	Function
monitoring_consent	Preference tracking.
landing_page	Follow the home pages
References	Follow the home pages
_s	Shopify analytics.
_shopify_fs	Shopify analytics.
_shopify_s	Shopify analytics.
_shopify_sa_p	Analysis of marketing and references.
_shopify_sa_t	Analysis of marketing and references.
_shopify_y	Shopify analytics.
_y	Shopify analytics.

[INSERT OTHER COOKIES OR TRACKING TECHNOLOGIES YOU USE].

The length of time a cookie is retained on your computer or mobile device depends on whether it is a "persistent" or "session" cookie. Session cookies last until you stop browsing and persistent cookies until they expire or are deleted. Most of the cookies we use are persistent and expire between 30 minutes and two years from the date they are downloaded to your device.

You can control and manage cookies in different ways. Please keep in mind that deleting or blocking cookies may have a negative impact on your user experience and that some parts of our website may no longer be fully accessible.

Most browsers automatically accept cookies, but you can choose whether or not to accept cookies through your browser's controls, often located in the "Tools" or "Preferences" menu of your browser. For more information on how to change your browser settings or how to block, manage or filter cookies, consult your browser's help file or sites such as www.allaboutcookies.org.

In addition, please note that blocking cookies may not completely prevent the way we share information with third parties such as our advertising partners. To exercise your rights or opt-out of certain uses of your information by these parties, please follow the instructions in the "Behavioral Advertising" section above.

Do Not Follow

Please note that due to the lack of a consistent industry understanding of how to respond to "Do Not Track" signals, we do not change our data collection and use practices when we detect such a signal from your browser.

Changes

We may update this privacy policy from time to time to reflect, for example, changes in our practices or for other operational, legal or regulatory reasons.

Contact

For more information about our privacy practices, if you have any questions, or if you wish to make a complaint, please contact us by e-mail at info@quebecsup.com

Last update : 7 May 2021

If you are not satisfied with our response to your complaint, you have the right to lodge your complaint with the relevant data protection authority. You can contact your local data protection authority.