Privacy policy
This Privacy Policy explains how carreblancx.shop collects, uses, discloses, stores and otherwise handles personal information when individuals visit our website, communicate with us, create or use available website functionality, place an order or otherwise interact with our online store.
carreblancx.shop is committed to handling personal information responsibly and in accordance with applicable Canadian privacy requirements.
Canada's federal private-sector privacy framework, PIPEDA, establishes principles including accountability, identifying purposes, consent, limiting collection, limiting use and retention, safeguards, openness, access and the ability to challenge compliance.
Questions regarding this Privacy Policy may be directed to our privacy contact:
Privacy Officer – carreblancx.shop
Email: info@carreblancx.shop
Personal Information We May Collect
Depending on how you interact with carreblancx.shop, we may collect information such as:
Contact Information
This may include:
- Name;
- Email address;
- Telephone number where supplied;
- Billing address;
- Shipping address; and
- Other contact information voluntarily provided.
Order and Transaction Information
This may include:
- Products ordered;
- Order number;
- Purchase history;
- Product preferences;
- Order value;
- Discounts applied;
- Shipping method;
- Delivery information;
- Returns;
- Refunds;
- Exchanges; and
- Customer-service history.
Payment Information
Payments may be processed through Shopify, payment gateways or other authorized payment-service providers.
Depending on the payment method, payment providers may collect information such as:
- Payment-card information;
- Billing details;
- Transaction identifiers; and
- Payment authorization information.
carreblancx.shop does not necessarily receive or store complete payment-card credentials where those credentials are processed directly by an authorized payment provider.
Device and Technical Information
When you use our website, certain technical data may be collected automatically, including:
- IP address;
- Browser type;
- Device type;
- Operating system;
- Language settings;
- Approximate location derived from network information;
- Pages viewed;
- Referral information;
- Time and date of visits;
- Interaction with website features; and
- Cookie or similar technology identifiers.
Customer Communications
When you contact us, we may collect:
- The contents of communications;
- Email correspondence;
- Customer-service requests;
- Return and refund information;
- Complaint information; and
- Information voluntarily supplied to resolve the request.
How We Collect Information
Personal information may be collected:
- Directly from you;
- When you place an order;
- When you contact customer service;
- When you subscribe to marketing communications;
- When you interact with website functionality;
- Automatically through cookies and similar technologies;
- From Shopify;
- From payment providers;
- From shipping and fulfilment providers;
- From fraud-prevention or security providers; or
- From other service providers where permitted by law.
Why We Use Personal Information
We may use personal information for legitimate and appropriate purposes including:
Processing Orders
We use information to:
- Receive orders;
- Verify transactions;
- Process payment;
- Fulfil purchases;
- Arrange shipping;
- Send transaction communications;
- Process returns and refunds; and
- Respond to order questions.
Providing Customer Support
We may use information to:
- Locate orders;
- Respond to enquiries;
- Resolve delivery issues;
- Investigate damaged or incorrect products;
- Handle complaints; and
- Provide requested assistance.
Security and Fraud Prevention
We may use information to:
- Protect customer accounts;
- Detect suspicious transactions;
- Prevent fraud;
- Protect our website;
- Enforce appropriate website terms; and
- Investigate security incidents.
Website Operation and Improvement
We may use information to:
- Operate website functionality;
- Understand website performance;
- Diagnose technical problems;
- Analyze general shopping behaviour;
- Improve navigation;
- Improve products and services; and
- Develop better customer experiences.
Legal and Regulatory Purposes
We may use or retain information where reasonably necessary to:
- Comply with applicable laws;
- Maintain transaction records;
- Respond to lawful legal processes;
- Enforce contractual rights;
- Handle disputes;
- Establish or defend legal claims; and
- Meet accounting, tax or regulatory obligations.
Consent
Where consent is required, we seek to obtain consent in a form appropriate to the nature and sensitivity of the information and the intended purpose.
Certain information is necessary to complete transactions.
For example, if a customer wishes to have an order delivered, we generally need sufficient shipping information to arrange delivery.
Customers may withdraw consent to optional processing where legally permitted.
Withdrawal of consent does not necessarily affect processing that has already lawfully occurred and may not prevent processing that is required to fulfil a transaction, comply with law or protect legitimate legal interests.
Shopify
Our ecommerce store is powered by Shopify.
Shopify provides infrastructure and functionality that help us operate our online store, checkout, order management and related ecommerce services.
As part of providing Shopify services, personal information may be processed by Shopify and its affiliates or service providers.
Shopify's current merchant documentation confirms that customer personal data processing is governed through its applicable terms and Data Processing Addendum.
Service Providers
We may disclose or make personal information available to service providers where reasonably necessary for business operations.
These may include providers of:
- Ecommerce hosting;
- Payment processing;
- Order fulfilment;
- Shipping and logistics;
- Customer support;
- Fraud prevention;
- Cybersecurity;
- Analytics;
- Marketing technology;
- Cloud storage;
- Accounting; and
- Professional services.
Service providers should receive only information reasonably necessary for the services they perform, subject to applicable arrangements and legal requirements.
International and Cross-Border Processing
Some service providers may process or store information outside the province or territory where the customer resides, and potentially outside Canada.
Where personal information is processed in another jurisdiction, it may become subject to that jurisdiction's laws and lawful access requirements.
Canadian privacy guidance recognizes that organizations may use foreign service providers but remain responsible for appropriate protection of personal information transferred for processing.
We seek to use reasonable contractual, organizational and technical measures when service providers process personal information on our behalf.
Cookies and Similar Technologies
carreblancx.shop and its service providers may use cookies, pixels, local storage and similar technologies.
These technologies may support:
- Shopping-cart functionality;
- Checkout;
- Security;
- Website preferences;
- Performance measurement;
- Analytics;
- Fraud prevention;
- Personalization; and
- Advertising where permitted.
Some cookies may be necessary for core website functions.
Other technologies may depend on privacy settings, browser settings, consent choices and applicable law.
Analytics
We may use analytics technologies to understand how visitors use our website.
Analytics information may include:
- Pages viewed;
- Device information;
- Approximate geographic information;
- Interaction data;
- Referral sources; and
- General usage patterns.
This information may be used to improve website performance and customer experience.
Marketing Communications
Where permitted by law, we may send promotional communications concerning products, offers or other commercial information.
Canada's Anti-Spam Legislation generally requires commercial electronic messages to comply with rules concerning consent, sender identification and a functioning unsubscribe mechanism.
Customers may unsubscribe from promotional email communications using the unsubscribe mechanism provided in the message or by contacting:
We will process valid unsubscribe requests in accordance with applicable law.
Transactional or service-related communications, such as order confirmations, delivery information, security messages or responses to customer requests, may still be sent where appropriate.
Advertising
Where permitted by applicable law and the customer's privacy choices, certain information may be used to provide or measure advertising.
Customers may have privacy controls available through:
- Browser settings;
- Cookie settings;
- Device controls;
- Shopify-supported privacy tools; or
- Third-party advertising platforms.
Information Sharing
We do not disclose personal information indiscriminately.
Information may be disclosed where reasonably necessary to:
- Process an order;
- Complete payment;
- Deliver merchandise;
- Prevent fraud;
- Provide customer service;
- Operate the website;
- Comply with law;
- Protect legal rights; or
- Complete a legitimate business transaction.
Business Transactions
If all or part of the business is reorganized, transferred, merged, acquired, financed or sold, information may be disclosed where reasonably necessary for the transaction and subject to appropriate legal requirements.
Any successor handling personal information must respect applicable privacy obligations.
Legal Disclosure
We may disclose information when reasonably necessary or legally required to:
- Comply with a court order;
- Respond to lawful governmental requests;
- Enforce legal rights;
- Investigate fraud;
- Protect customers;
- Protect the integrity of our website; or
- Address threats to security.
Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and for legitimate legal, accounting, fraud-prevention, dispute-resolution and regulatory requirements.
Different categories of information may be retained for different periods.
When personal information is no longer reasonably required, we may securely delete, destroy or anonymize it, subject to applicable legal obligations and technical limitations.
Security
We use reasonable administrative, technical and organizational measures designed to protect personal information against risks such as:
- Unauthorized access;
- Unauthorized disclosure;
- Loss;
- Misuse;
- Alteration; and
- Destruction.
No internet transmission or storage system can be guaranteed to be completely secure.
Customers should also take appropriate precautions when using online services and should protect account credentials where applicable.
Privacy Incidents
If a privacy or security incident involving personal information occurs, we will assess the incident and take steps appropriate to the circumstances and applicable legal requirements.
These may include:
- Containing the incident;
- Investigating its cause;
- Reducing potential harm;
- Improving safeguards; and
- Providing legally required notices or reports.
Access and Correction
Subject to applicable law and exceptions, individuals may have the right to request access to personal information held about them and to request correction of inaccurate information.
Requests may be submitted to:
We may need to reasonably verify identity before fulfilling a privacy request.
We will not request more verification information than reasonably necessary.
Withdrawal of Consent
Where our processing depends on consent and withdrawal is legally available, individuals may withdraw that consent.
Contact:
Withdrawal may affect our ability to provide an optional service that depends on the relevant information.
Privacy Complaints
Questions or concerns about our privacy practices may be directed to:
Privacy Officer – carreblancx.shop
Email: info@carreblancx.shop
We will make reasonable efforts to review and respond to legitimate privacy concerns.
Individuals may also have the right to contact an applicable federal or provincial privacy regulator.
Children and Minors
Our online store is intended for individuals capable of making online purchases in accordance with applicable law.
We do not knowingly seek to collect personal information from children in circumstances where parental, guardian or other legally required consent is necessary and has not been obtained.
If you believe a child has provided personal information improperly, contact:
Third-Party Websites
Our website may contain links to third-party websites or services.
We are not responsible for the privacy practices of independent third parties.
Customers should review the privacy policies of those services before providing personal information.
Changes to This Privacy Policy
We may update this Privacy Policy where reasonably necessary to reflect:
- Changes to our practices;
- Changes to our services;
- Changes to Shopify functionality;
- Legal or regulatory developments; or
- Security and operational changes.
The updated version will be published on carreblancx.shop with an updated revision date.
Where required by law, additional notice or consent may be provided.
Contact Us
Privacy questions, access requests, correction requests and complaints may be directed to:
Privacy Officer – carreblancx.shop
Email: info@carreblancx.shop
- Choosing a selection results in a full page refresh.