Privacy Policy

1. About this policy

Douceurs à Croc-quer ("we", "our") operates the site douceursacrocquer.ca and makes artisanal dog treats in Laval, Quebec. This policy applies to the personal information we collect through our site, our newsletter, our orders and our exchanges with you.

We comply with Quebec's Act respecting the protection of personal information in the private sector (as modernized by "Law 25"), as well as with the applicable federal laws, including PIPEDA and Canada's Anti-Spam Legislation (CASL).

2. Person in charge of the protection of personal information

In accordance with Law 25, we have designated a person in charge of the protection of personal information within the company:

• Karl Bédard, person in charge of the protection of personal information
• By email: infos@douceursacrocquer.com
• By mail: 110-7909, boul. Arthur-Sauvé, Laval (Quebec) H7R 3X8

You may contact this person with any question, access request or complaint concerning your personal information.

3. Information we collect

Information you give us

• Newsletter: your email address when you sign up.
• Orders: name, shipping address or pickup location, email address, phone number (where applicable) and the details of your order.
• Communications: the content of the messages you send us.

Payment information

Online payments are processed by our payment provider (Stripe). We never store your full card number on our servers: it is transmitted securely, directly to our provider.

Information collected automatically

• Internal audience measurement (only if you accept it): we measure traffic on our site (pages viewed, device type, approximate origin and visit duration) using anonymous, random identifiers stored in your browser. This measurement is off by default: it only runs if you accept the “internal analytics” category in our preferences window (see section 8). This data does not identify you, is neither sold nor shared, and your IP address is never kept (the approximate location, namely the country, the province and the city, is derived from it, then the address is immediately discarded). It helps us understand and improve the site, and is kept for no more than 180 days. If your browser sends the “Do Not Track” signal, no measurement is taken, even after you accept.
• Advertising measurement (Meta pixel — only if you accept it): we use a tool provided by Meta (Facebook, Instagram) to find out whether our ads lead to visits and orders. This tool is off by default: until you accept the “advertising” category in our preferences window (section 8), it is neither loaded nor executed — no cookie is set and nothing is sent to Meta. If you accept it, it sets an advertising cookie and sends Meta browsing data (pages viewed, items added to cart, completed orders and their amounts), your IP address and device identifiers; if you have a Facebook or Instagram account, Meta may link them to it. No personally identifying information (name, address, email, phone) is sent to Meta by our site. You may withdraw your consent at any time (section 8).
• Basic technical data related to your browsing, for security and fraud prevention purposes.
• Local storage in your browser to remember the contents of your cart.

4. Why we use your information

• Process, prepare and deliver your orders, and provide after-sales service.
• Send you our newsletter and our pre-order notices, when you have consented to them.
• Remind you of a cart you left behind, so that you can complete your order if you wish.
• Answer your questions and requests.
• Meet our legal, accounting and tax obligations, and prevent fraud.
• Improve our site, our products and your experience.

5. Your consent

We obtain your consent where the law requires it, in particular to send commercial electronic messages and for any audience or advertising measurement on our site (see section 8): these functions are off by default and only run after your explicit choice, of which we keep the date and the version of the text you accepted. You may withdraw your consent at any time, free of charge, by clicking the unsubscribe link included in every newsletter, by clicking “Manage cookies” at the bottom of every page, or by writing to us. Withdrawing consent has no retroactive effect and does not prevent the processing needed to fulfil an order in progress.

6. Disclosure to third parties

We do not sell and do not rent your personal information. We disclose it only to the service providers that help us run our business, and only to the extent necessary:

• Stripe: secure payment processing;
• Square: secure payment processing and customer records for our in-person sales (kiosks);
• Resend: sending our emails (confirmations, newsletter);
• Supabase: hosting our database (servers located in Canada);
• Our web host: serving the site.
• Meta Platforms: measuring how well our ads perform on Facebook and Instagram (see sections 3 and 8).

These providers are bound by confidentiality commitments and may not use your information for any other purpose. Exception: Meta, as an advertising platform, also uses the data collected by its pixel for its own purposes, in accordance with its privacy policy. Section 8 explains how to opt out of this pixel. This list may change; we will keep it up to date. We may also disclose information where the law requires it.

7. Hosting and information processed outside Quebec

Our database is hosted in Canada. Some providers (notably for payment, email delivery and advertising measurement) may nonetheless process or store information outside Quebec, including in the United States. Before entrusting information to such providers, we assess the privacy-related factors and ensure appropriate contractual protections are in place.

8. Cookies and similar technologies

Our site distinguishes three categories. Essential: local storage needed for the site to work (shopping cart, language) — always on, no data shared. Internal analytics: anonymous identifiers serving statistics carried out by our own means, with no sharing with third parties (section 3). Advertising: the Meta pixel, our single third-party advertising tool, which sets an advertising cookie and tells us whether our ads on Facebook and Instagram lead to visits and orders (section 3). We do no advertising profiling of our own and we sell no data.

Nothing without your consent. Internal analytics and the Meta pixel are off by default. On your first visit, a preferences window lets you accept everything, refuse everything or choose category by category; until you make a choice, nothing runs and the Meta pixel is not even loaded. Your choice is stored in your browser with its date and the version of the text you accepted; if this policy changes, the window will ask you again.

Change your mind at any time. Click “Manage cookies” at the bottom of any page to reopen the window and modify or withdraw your consent: withdrawal takes effect immediately (nothing more is sent) and Meta’s advertising cookie is deleted. In addition, if your browser sends the Do Not Track signal, neither our internal measurement nor the Meta pixel is activated, whatever your choice. You can also block or delete cookies in your browser settings, and set your advertising preferences directly with Meta, in your account’s ad preferences. Note that some features of the site, including the cart, may stop working if you block all local storage.

9. Retention period

We keep your information for as long as necessary for the purposes described above or to meet our legal obligations (accounting records, for example). When it is no longer necessary, we destroy or anonymize it securely. Newsletter subscribers are kept until they withdraw their consent.

10. Security

We take reasonable security measures to protect your information: encrypted transmission (HTTPS), restricted access to the database and a limited number of people able to access it. As no method of transmission or storage is infallible, we cannot guarantee absolute security, but we undertake to act diligently.

11. Your rights

Subject to the conditions provided by law, you have the right to:

• access the personal information we hold about you;
• have inaccurate, incomplete or equivocal information corrected;
• withdraw your consent and unsubscribe from our communications;
• request that certain information cease to be disseminated or be de-indexed;
• obtain, when the law so requires, the communication of your information in a structured and commonly used technological format (portability).

To exercise these rights, write to the person in charge at infos@douceursacrocquer.com. We usually respond within 30 days. We may have to verify your identity before acting on the request.

12. Information concerning children

Our site is intended for an adult clientele. We do not knowingly collect information from persons under 14 years of age without the required consent. If you believe that such information has been sent to us, contact us so that we delete it.

13. Confidentiality incident

In the event of an incident involving your personal information, we take reasonable measures to reduce its consequences. If the incident presents a risk of serious injury, we will notify the persons concerned as well as the Commission d'accès à l'information (Quebec's privacy regulator), in accordance with the law, and will keep a register of incidents.

14. Complaints

If you have a concern, contact our person in charge first. If the answer does not satisfy you, you may file a complaint with the Commission d'accès à l'information du Québec.

15. Changes

We may update this policy from time to time. The date of the last update appears at the top of the page. Significant changes will be flagged on our site.