Privacy Policy

Effective date: August 18, 2026

Bois-Franc Grove & Hawthorn respects your privacy. This policy explains how we collect, use, disclose, retain, secure, and provide access to personal information.

Privacy Officer

Person in Charge of the Protection of Personal Information: Bois-Franc Grove & Hawthorn Privacy Officer

Email: privacy@boisfrancgroveandhawthorn.ca

Phone: +1 (514) 555-0149

Address: 3345 Rue Jean-Gascon, Saint-Laurent, QC H4R 3H5, Canada

Applicable Privacy Laws

We handle personal information in accordance with Québec's Act respecting the protection of personal information in the private sector, including the amendments commonly associated with Law 25. PIPEDA may apply to interprovincial or international commercial activities and in other circumstances within its scope.

Information We Collect

Depending on your interaction with the store, we may collect:

• Your name, email address, telephone number, billing address, and delivery address;
• Order, payment transaction, delivery, return, refund, and customer-service information;
• Account credentials, product preferences, and marketing choices;
• Device, browser, IP address, cookie, session, and website interaction information; and
• Information required for security, fraud prevention, legal compliance, or dispute resolution.

Full payment card numbers are normally processed by authorized payment providers and are not stored directly by us.

Purposes of Collection and Use

We use personal information to process payments, fulfil orders, arrange delivery, administer returns, provide support, prevent fraud, secure the store, improve services, maintain business and taxation records, comply with legal obligations, and send marketing where permitted.

Consent

We collect, use, and disclose personal information with valid consent or as otherwise authorized or required by law. Requests for consent will be presented separately when required and in clear language appropriate to the nature and sensitivity of the information.

You may withdraw consent for optional uses by contacting us, subject to legal or contractual restrictions. Withdrawal may prevent us from providing a service that requires the relevant information.

Service Providers and Disclosure

We may disclose necessary information to Shopify, payment processors, couriers, fulfilment partners, hosting providers, cloud services, analytics providers, fraud-prevention services, marketing platforms, professional advisers, regulators, and contractors supporting the store.

We may also disclose information where authorized or required by law, to respond to lawful court or governmental requests, investigate suspected unlawful conduct, enforce an agreement, or protect customers, the store, or third parties.

Processing Outside Québec

Some service providers may process or store personal information outside Québec or Canada, potentially including the United States, the United Kingdom, countries in the European Economic Area, and other jurisdictions used by our technology, payment, or fulfilment providers.

Before communicating personal information outside Québec, we will conduct any privacy impact assessment required by law and consider the sensitivity of the information, its purpose, applicable safeguards, and the legal framework of the destination. Appropriate written arrangements will be used where required.

Cookies, Profiling, and Automated Decisions

We may use necessary, preference, performance, analytics, and advertising cookies. Where technology can identify, locate, or profile an individual, we will provide legally required information and make the relevant function deactivated by default where required.

If we make a decision based exclusively on automated processing of personal information, we will provide the information and rights required by Québec law, including information about the principal factors used and the opportunity to submit observations to an appropriate staff member.

Marketing

We send commercial electronic messages only where permitted by Canada's anti-spam legislation and other applicable requirements. You may unsubscribe through the link in a marketing message or by contacting us.

Security and Retention

We use reasonable administrative, physical, and technical safeguards proportionate to the sensitivity of personal information. Information is retained only for as long as reasonably necessary for its purpose or to satisfy legal, taxation, accounting, security, and dispute-resolution requirements.

When information is no longer required, it will be securely destroyed or anonymized in accordance with applicable legal requirements.

Confidentiality Incidents

We maintain a register of confidentiality incidents as required. If an incident presents a risk of serious injury, we will promptly notify the Commission d'accès à l'information du Québec and affected individuals, and take reasonable measures to reduce the risk of harm and prevent similar incidents.

Access, Correction, and Portability

You may request access to personal information under our control and ask us to correct inaccurate, incomplete, or outdated information. Where legally applicable, you may request computerized personal information in a structured and commonly used technological format.

We may verify your identity and may refuse or limit a request where authorized by law, in which case we will provide any legally required explanation.

Complaints

Send privacy questions or complaints to privacy@boisfrancgroveandhawthorn.ca or call +1 (514) 555-0149. If a concern remains unresolved, you may be entitled to contact the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.