Privacy policy

1.Definitions

In this policy, the following terms have the meaning given:

“Éden” or “we”

Éden produits écologiques, NEQ 1176150432, whose establishment is at 365, boulevard Harwood, Vaudreuil-Dorion (Québec) J7V 7W1.

“Site”

Éden's online shop and all its pages.

“You” or “Customer”

Anyone who visits the Site, creates an account or places an order.

“Personal information”

Any information about a natural person that allows them to be identified, directly or indirectly.

“Consent”

Your clear, free and informed agreement, given for specific purposes.

“Provider”

Any business that provides a service to Éden and, to do so, has access to personal information.

“Cookie”

A small file or piece of data saved in your browser during your visit.

“Confidentiality incident”

Any unauthorized access to, use or disclosure of personal information, or its loss.

2.Person in charge of protecting personal information

The person in charge of protecting personal information at Éden is Priscilla Bourgeois Deniger, owner. Any question, access or correction request, or complaint about this policy should be sent to:

Email

514menagetoi@gmail.com

Phone

514 715-3187

Address

365, boulevard Harwood, Vaudreuil-Dorion (Québec) J7V 7W1

3.Information collected and purposes

Éden only collects the information needed for the purposes below, directly from you or, when you choose it, from Google.

Orders

Name, email address, phone number, delivery address, products ordered and amounts. Purposes: process, ship and deliver the order, contact you about it, handle returns, refunds and claims, and keep the accounting and tax records the law requires.

Payment

Card details are entered directly with Stripe, our payment Provider. Éden never has access to your full card number and doesn't keep it; it only receives the payment's confirmation (amount, status, card type and last four digits).

Customer account

Email address, password (encrypted and unreadable to Éden), name, phone, address and preferred language. Purposes: let you track your orders and check out faster.

Sign in with Google

If you choose it: name, email address and profile picture sent by Google. Purpose: create your account and sign you in.

Newsletter and texts

Email address (newsletter: news and offers) and phone number (texts: order updates), only if you turn them on in your account.

Communications

The content of your messages and your contact details. Purpose: answer you and handle your request.

Technical data

IP address, browser type, date and time of connections. Purposes: keep the Site secure and prevent fraud and abuse.

Éden uses this information for no other purpose without your consent, except where the law allows or requires it.

4.Consent

By providing your information to place an order or create an account, you consent to its use for the purposes above. Consent to the newsletter and texts is separate and optional: these options are off by default.

You can withdraw your consent at any time, subject to Éden's legal obligations, by changing your preferences in your account, using the unsubscribe link in each message, or writing to the person in charge. Withdrawal may prevent Éden from providing some services, such as processing an order.

The Site is not intended for people under 14. The information of a person under 14 can only be collected with the consent of the person having parental authority.

5.Refusing to provide information

• You can order without creating an account.
• The newsletter, texts and sign-in with Google are optional.
• You can refuse cookies in your browser; signing in to your account will then no longer work.
• Your name, email address and delivery address are needed to fulfil an order: without them, Éden can't process it.

6.Cookies and technologies

The Site only uses cookies strictly necessary for it to work, which keep you signed in. Your cart is saved in your browser. Éden uses no advertising or analytics cookies.

Éden uses no technology to identify, locate or profile you, and makes no decision based exclusively on automated processing of your information.

7.Who has access to the information

Within Éden, only the owner and employees whose duties require it (order preparation, customer service, accounting) have access to the information, each through personal access.

8.Disclosure to third parties

Éden doesn't sell, rent or trade any personal information. It only discloses the necessary information to the following Providers, bound by confidentiality commitments, and only for the service they provide:

Stripe

Payment processing.

Supabase

Hosting of the database and customer accounts; account emails.

Vercel

Hosting of the Site.

Google

Sign in with Google, if you choose it.

Alice POS

Éden's point-of-sale system, which manages the store's sales and inventory.

Canada Post

Name, address and phone, for delivery.

Éden may also disclose information without your consent where the law allows or requires it, for example to comply with a court order or tax laws, or to prevent fraud.

9.Disclosure outside Québec

Some Providers, including Stripe, Supabase, Vercel and Google, keep or process information outside Québec, including in the United States, where it may be subject to local laws. Before any disclosure outside Québec, Éden assesses whether the information will be adequately protected there and governs the disclosure by contract.

10.Retention and destruction

• Orders and invoices: at least six years after the end of the tax year concerned, as tax laws require.
• Customer account: as long as the account is active. When the account is deleted, only the information the law requires is kept.
• Newsletter and texts: until you withdraw your consent.
• Technical data: a few days.

Once the purposes are fulfilled and the law no longer requires it, the information is securely destroyed or anonymized.

11.Security measures

Éden takes reasonable measures to protect information against loss, theft and any unauthorized access, use or disclosure, including:

• encryption of communications with the Site (HTTPS);
• restricted, personal access for authorized people only;
• encrypted passwords;
• payment processing by Stripe, certified under the payment card industry's security standard (PCI DSS).

12.Confidentiality incidents

If a confidentiality incident occurs, Éden takes reasonable measures to reduce the risk of harm and prevent a similar incident. If the incident presents a risk of serious harm, Éden promptly notifies the Commission d'accès à l'information and the people concerned. Éden keeps a register of incidents.

13.Your rights

Subject to the exceptions provided by law, you have the right to:

• be informed of the information Éden holds about you and access it;
• have inaccurate, incomplete or equivocal information corrected; much of it can be changed in your account;
• withdraw your consent;
• ask for your account to be deleted, and for information to stop being disseminated or be de-indexed where the law provides;
• receive the information you provided in a structured, commonly used technological format, or have it sent to someone you designate;
• make a complaint.

To exercise these rights, write to the person in charge at 514menagetoi@gmail.com. Éden answers in writing within 30 days of receiving the request, free of charge. It may ask you to confirm your identity.

14.Complaints

Any complaint should first be sent to the person in charge, at 514menagetoi@gmail.com. Éden reviews it and answers within 30 days.

If you're not satisfied with the answer, you can contact Québec's Commission d'accès à l'information (cai.gouv.qc.ca). People who live elsewhere in Canada can also contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).

15.Changes

Éden may change this policy to reflect changes in its practices or the law. The date of the last update is at the top of the page. Any important change is announced on the Site and, if you have an account, by email.