Privacy Policy

Effective date: August 11, 2026

Dufault & Laurentian Maple respects your privacy. This policy explains how we collect, use, disclose, retain and protect personal information when you visit dufaultandlaurentianmaple.ca, purchase products or communicate with us.

We handle personal information in accordance with Québec’s Act respecting the protection of personal information in the private sector and, where applicable, the Personal Information Protection and Electronic Documents Act.

1. Information we collect

Depending on your interaction with us, we may collect:

• your name, email address, telephone number and billing or shipping address;
• order, payment, transaction, return and customer-service information;
• account credentials and shopping preferences;
• reviews, messages and other content you submit;
• device, browser, IP address and website interaction data; and
• cookie, analytics and advertising information, where permitted.

Complete payment-card details are normally processed by Shopify or our payment providers and are not stored directly by us.

2. Purposes of collection and use

We may use personal information to:

• process payments and fulfil, deliver and manage orders;
• provide customer service and administer returns;
• operate accounts and personalize services;
• detect fraud, abuse, security threats and unlawful activity;
• analyse and improve our website and services;
• meet tax, accounting, regulatory and legal obligations;
• establish, exercise or defend legal claims; and
• send marketing communications when permitted by Canada’s Anti-Spam Legislation.

3. Consent and transparency

We seek valid consent where required and explain the purposes for which information is collected. Consent must be clear, free and informed and must be requested separately when required by law.

You may withdraw consent to activities that depend on consent, subject to legal or contractual restrictions and reasonable notice. We will explain the consequences of withdrawal where applicable.

4. Marketing choices

You may unsubscribe from promotional emails using the unsubscribe link in the message or by contacting us. We may continue sending transactional communications concerning orders, delivery, returns, security and important service matters.

5. Cookies and privacy settings

We and our providers may use cookies and similar technologies to operate the website, remember preferences, measure performance, prevent fraud and support advertising.

Where Québec law requires consent for a non-essential technology or function, it will be disabled by default until valid consent is obtained. You may change available privacy choices or use your browser controls, although disabling essential cookies may affect website functionality.

6. Disclosure to service providers

We may disclose relevant information to:

• Shopify, hosting, payment and technology providers;
• warehouses, suppliers, delivery carriers and fulfilment partners;
• analytics, marketing, support and fraud-prevention providers;
• professional advisers, auditors, insurers and financial institutions;
• government or law-enforcement authorities where legally required or permitted; and
• a purchaser or successor involved in a proposed or completed business transaction.

Service providers may use information only for authorized purposes and must apply appropriate confidentiality and security safeguards.

7. Processing outside Québec

Some providers may process or store information outside Québec, including elsewhere in Canada, the United States or other jurisdictions used by Shopify and our providers.

Before communicating or entrusting personal information outside Québec, we will conduct any privacy impact assessment required by law and implement an appropriate written agreement and safeguards. Information in another jurisdiction may be accessible to its courts, governments or law-enforcement authorities.

8. Retention and destruction

We retain information only for as long as reasonably necessary for order fulfilment, customer service, fraud prevention, tax, accounting, legal and dispute-resolution purposes.

When the purposes have been fulfilled and legal retention periods have expired, we securely destroy or anonymize the information in accordance with applicable law and our retention schedule.

9. Safeguards and confidentiality incidents

We use reasonable administrative, technical and physical safeguards appropriate to the sensitivity, purpose, quantity, distribution and format of the information.

We maintain a register of confidentiality incidents as required by Québec law. If an incident presents a risk of serious injury, we will promptly notify the Commission d’accès à l’information and affected individuals as required.

10. Access, correction and other rights

You may submit a written request to:

• confirm whether we hold personal information about you;
• access eligible personal information and information about its use or disclosure;
• correct inaccurate, incomplete or ambiguous information;
• withdraw consent where processing depends on consent;
• request cessation of dissemination or de-indexation where legally applicable; or
• request computerized personal information in a structured and commonly used technological format where the portability right applies.

Subject to lawful exceptions, our Privacy Officer will respond to an access or correction request within 30 days. We may verify your identity before processing a request.

11. Automated decisions

If we use personal information to make a decision based exclusively on automated processing, we will provide any notice and information required by Québec law, including information about the principal factors and parameters used, where applicable.

12. Children

Our services are not directed to children under 14. We do not knowingly collect personal information from a child under 14 without consent from a parent or guardian, except where collection is clearly for the child’s benefit and otherwise permitted by law.

13. Complaints

Privacy complaints may be sent to our Privacy Officer. We will investigate and respond within a reasonable period. You may also have the right to contact the Commission d’accès à l’information du Québec or, where PIPEDA applies, the Office of the Privacy Commissioner of Canada.

14. Changes

We may update this policy to reflect changes in our practices, technology or legal obligations. The revised version will be posted with a new effective date.

15. Privacy Officer

Privacy Officer — Dufault & Laurentian Maple
Email: privacy@dufaultandlaurentianmaple.ca
Telephone: +1 450-555-0183
1136 Rue Dufault
Laval, QC H7E 4S6
Canada