Privacy Statement (CA)

1. Person in Charge of Processing

This privacy policy applies to the website and online store operated by Pigeon Atelier Letterpress (referred to in this policy as "we," "us," or "our"). We are subject to Quebec Law 25 — formally titled An Act to modernize legislative provisions as regards the protection of personal information (S.Q. 2021, c. 25) — which governs how we collect, use, communicate, and protect the personal information of anyone who visits our website or purchases from our store.

As a Quebec-based business, we take our obligations under Quebec Law 25 seriously. This policy explains plainly what personal information we collect, why we collect it, who we share it with, and what rights you have over it.

2. Personal Information Collected

We collect personal information in several contexts depending on how you interact with our website and store. Below is a summary of the categories we collect.

• Identity and contact information: Your name, email address, phone number, and billing or shipping address — collected when you place an order, create an account, or subscribe to our newsletter.
• Transaction and order data: Details of products purchased, order amounts, payment method type (we do not store full card numbers), and order history — collected through our WooCommerce-powered store.
• Navigation and device information: IP address, browser type, device identifiers, pages visited, session duration, approximate geographic location, and browsing behavior — collected automatically when you visit our site through cookies and similar tracking technologies.
• Form and communication data: Any information you submit through contact forms, support requests, or newsletter sign-up forms, including your email address and any message content.
• Advertising identifiers: Identifiers used to measure the effectiveness of our advertising campaigns and to show you relevant ads on third-party platforms such as Meta (Facebook) and Google.
• Consent preferences: A record of the cookie consent choices you make on our site, stored to respect your preferences on future visits.

3. Purposes of Processing

We use your personal information only for the purposes described below. Each purpose is tied to a legal basis under Quebec Law 25.

• Processing your orders and managing your account — We use your identity, contact, and transaction data to fulfill purchases, send order confirmations, manage returns, and maintain your customer account. Legal basis: performance of a contract (your purchase agreement with us).
• Sending our newsletter and marketing emails — If you have subscribed, we use your email address and communication preferences to send you news, promotions, and updates about Pigeon Atelier Letterpress. We use Mailchimp (United States) to manage and send these communications. Legal basis: your consent, which you may withdraw at any time.
• Measuring and improving our website's performance — We use navigation and device data to understand how visitors use our site and to improve the experience. This is done through Google Analytics 4 (United States), Hotjar (United States — session recordings and heatmaps), and WooCommerce Analytics (United States — store sales analysis). Legal basis: your consent.
• Running targeted advertising campaigns — We use advertising identifiers and browsing behavior to measure the effectiveness of our ads and to show relevant ads to people on Meta and Google platforms. This is done through Meta Pixel (Facebook) (United States), Google Ads / Conversion (United States), and HubSpot (United States — marketing automation and CRM). Legal basis: your consent.
• Displaying our website correctly — We load web fonts through Google Fonts (United States) to ensure our site displays as intended. Your IP address is transmitted to Google's servers as part of this process. Legal basis: our legitimate interest in presenting a functional and visually consistent website.
• Managing your cookie consent choices — We use Moelleux (by Horizon-Cumulus), a consent management platform operated by Horizon-Cumulus (9322-8310 Québec inc.) in Joliette, Quebec, to record and honor your cookie preferences. Consent records are hosted in Quebec (OVH, Beauharnois). A cookie named moelleux_{site_key} is stored in your browser for up to 13 months. Legal basis: legal obligation under Quebec Law 25.
• Complying with legal obligations — We may retain certain transaction and communication records to meet our obligations under applicable tax, accounting, and consumer protection laws. Legal basis: legal obligation.

4. Third Parties and Processors

The table below lists every third-party service active on our website. These services may receive or process some of your personal information as part of their function.

5. Transfers Outside Quebec

Several of the third-party services we use are operated by companies based in the United States. Under section 17 of Quebec Law 25, we are required to inform you of these transfers and to assess whether the personal information transferred will receive adequate protection in the destination jurisdiction.

The following services involve transfers of personal information to the United States:

• Google Analytics 4 — Navigation and device data (Google LLC, United States). Google participates in the EU-U.S. Data Privacy Framework and applies standard contractual clauses for international transfers.
• Hotjar — Navigation, session, and device data (Hotjar Ltd., United States). Hotjar applies standard contractual clauses and data processing agreements.
• WooCommerce Analytics — Transaction and navigation data (Automattic Inc., United States). Automattic applies standard contractual clauses.
• Meta Pixel (Facebook) — Advertising identifiers, transaction data, and browsing behavior (Meta Platforms Inc., United States). Meta applies standard contractual clauses for cross-border transfers.
• Google Ads / Conversion — Advertising identifiers and transaction data (Google LLC, United States). Google applies standard contractual clauses.
• HubSpot — Contact, navigation, and communication data (HubSpot Inc., United States). HubSpot applies standard contractual clauses and maintains a data processing agreement.
• Mailchimp — Email addresses and communication preferences (The Rocket Science Group LLC d/b/a Mailchimp, United States). Mailchimp applies standard contractual clauses. Your newsletter contact information is therefore processed in the United States.
• Google Fonts — IP address and device identifiers (Google LLC, United States). Transmitted as part of font file requests.

Before activating services that transfer personal information outside Quebec, we conduct or rely on a Privacy Impact Assessment (PIA) — known in French as an évaluation des facteurs relatifs à la vie privée (EFVP) — as required by section 17 of Quebec Law 25, to confirm that the information will receive protection equivalent to what Quebec law provides. You may request a summary of our PIA findings by contacting our Person responsible for the protection of personal information (see Section 8).

By contrast, our consent management platform (Moelleux by Horizon-Cumulus) and our primary business email infrastructure (Horizon-Cumulus Email) are operated entirely in Quebec. No personal information processed by those services leaves Quebec.

6. Retention Period

We keep your personal information only as long as necessary for the purpose for which it was collected, or as required by law. The table below summarizes our retention practices.

7. Your Rights

Under Quebec Law 25, you have the following rights regarding your personal information. To exercise any of them, please contact our Person responsible for the protection of personal information (see Section 8). We will respond within 30 days of receiving your request.

• Right of access: You may ask us to confirm whether we hold personal information about you and to receive a copy of that information in a clear, understandable format.
• Right of rectification: If any personal information we hold about you is inaccurate, incomplete, or ambiguous, you may ask us to correct it. If we have communicated that information to third parties, we will notify them of the correction where feasible.
• Right of erasure (right to be forgotten): You may ask us to delete personal information that we collected unlawfully, that is no longer necessary for the purposes for which it was collected, or where you have withdrawn your consent and there is no other legal basis for retaining it.
• Right to data portability: You may ask us to provide the personal information you gave us in a structured, commonly used technological format so that you can transmit it to another organization, where technically feasible.
• Right to withdraw consent: Where we process your personal information based on your consent (for example, for our newsletter or for analytics and advertising cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. You can manage your cookie preferences at any time through the consent banner on our site.

If you believe your rights have not been respected, you have the right to file a complaint with the Quebec Information Access Commission (CAI) at https://www.cai.gouv.qc.ca.

8. Person Responsible for the Protection of Personal Information

In accordance with section 3.1 of Quebec Law 25, Pigeon Atelier Letterpress has designated a Person responsible for the protection of personal information. This person oversees our compliance with Quebec Law 25, handles requests related to your rights, and acts as your point of contact for any privacy-related question or concern.

• Name: Marie-Orphée Duval
• Title: cofondatrice
• Email: info@pigeonletterpress.mom
• Phone: 450-692-6482

We will acknowledge your request promptly and provide a full response within 30 days, as required by Quebec Law 25. If your request is complex or if we receive a high volume of requests, we will notify you of any extension within that initial 30-day window.

9. Effective Date and Versioning

This privacy policy takes effect on 17 juin 2026 and replaces any prior version.

Current version: 1

We may update this policy from time to time to reflect changes in our practices, the services we use, or applicable law. When we make material changes, we will post the updated policy on this page with a new effective date. We encourage you to review this policy periodically. Continued use of our website after a revised policy is posted constitutes your acknowledgment of the changes.