Privacy policy.

We only collect the information we need to serve you. This policy explains what we collect, why, and how to exercise your rights, in accordance with Quebec's Act respecting the protection of personal information in the private sector and applicable federal law.

Person in charge of the protection of personal information

For any question or request about your information, write to our person in charge of the protection of personal information.

Information we collect

• Your contact details: name, email, phone number, shipping and billing addresses.
• Your orders, your appointments and the history of our exchanges through the contact form, by email or on WhatsApp.
• Any allergies or sensitivities you choose to tell us about before a service. They are used only for your safety.
• Technical data needed for the website to work, such as your chosen language and the contents of your cart.

Your card details are processed directly by Stripe, our payment provider. We do not see or store them.

Why we use it

• To process your orders, deliveries, payments and appointments.
• To answer your questions and provide after-sales service.
• To meet our legal obligations, including accounting.
• To send you our news and offers, only if you have agreed to it.

We never sell your personal information.

Who we share it with

We only share your information with the providers who help us serve you, and only as far as necessary.

• Odoo S.A. (Belgium): website, shop and order management.
• Stripe (United States): payments.
• Carriers: delivery of your orders.
• Meta (United States): WhatsApp messages, if you choose to write to us through this app.

Some of these providers are located outside Quebec. Before entrusting them with any information, we make sure they offer adequate protection.

Retention period

We keep your information for as long as needed for the purposes above. Accounting records, such as invoices, are kept for 6 years, as required by law. The information is then destroyed or anonymized.

Security

Access to your information is limited to the people who need it to serve you. The website uses an encrypted connection, and payments go through Stripe, which complies with the PCI DSS security standard.

Your rights

At any time, you can access your information and get a copy of it, have it corrected, withdraw your consent, for example to promotional messages, or ask for it to be deleted, subject to our legal obligations.

Write to us at contact@garbaglow.com. We reply within 30 days. If you are not satisfied with our answer, you can contact the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).

Confidentiality incident

If an incident presents a risk of serious harm, we will inform you and the Commission d'accès à l'information, as required by law.

Cookies

The cookies used by the website are described in our cookie policy.

Changes

We may update this policy. The date of the last update appears at the top of this page.