Legal
Privacy policy
Last updated: [Date]
This policy explains how [Company legal name] (“Advanced Recovery”, “we”) collects, uses and protects personal information in the online shop, in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.
Who is responsible
[Company legal name], [Address]. Our privacy officer, who is also the person in charge of the protection of personal information under Quebec law, is [Name, title], [Privacy email].
What we collect and why
When you order
You enter your name, email address, phone number, billing and shipping addresses and payment details on the checkout page of Stripe, our payment processor. Stripe processes the payment. We receive the order details (name, contact details, addresses, products, amounts) to process, ship and support your order and to keep the records required by law. We never receive your full card number.
When you request a business quote
We collect what you enter in the form: name, company, email address, phone number (optional), type of business, province or territory, your message and the products you are interested in. We use it to reply to you and prepare your quote. With your consent, we may contact you by email or phone about your request.
When you visit the site
Our hosting provider processes technical information such as IP address, browser type and the pages requested, in order to deliver the site and keep it secure. [Log retention — to confirm.]
Cookies and local storage
We do not use tracking, advertising or analytics cookies, and our pages load no third-party scripts.
Your cart is stored in your own browser (localStorage, key ar-cart). It contains only product codes and quantities, stays on your device and is sent to us only when you go to checkout. You can delete it by emptying your cart or clearing this site’s data in your browser.
Stripe’s checkout page is operated by Stripe and may use cookies needed for payment and fraud prevention. See Stripe’s privacy policy.
Service providers
- Stripe processes payments. [Stripe contracting entity — to confirm]
- Microsoft Azure hosts the site and the server functions behind the cart and the quote form, and delivers quote requests to us by email (Azure Communication Services). [Azure region(s) used — to confirm]
These providers process personal information on our behalf and may store or process it outside your province or outside Canada, including in the United States, where it may be subject to local laws. [Confirm locations with each provider.]
Consent
By placing an order or sending a quote request, you consent to the uses described in this policy. You can withdraw your consent at any time, subject to legal or contractual restrictions, by contacting our privacy officer.
Retention
[How long order records and quote requests are kept — to confirm.]
Safeguards
The site is served over HTTPS. Access to personal information is limited to [who has access — to confirm]. We rely on our providers’ security measures for payment and hosting.
Your rights
You can ask to access or correct the personal information we hold about you, or withdraw your consent, by contacting [Privacy email]. [Additional rights for Quebec residents — to confirm.]
If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information.
Changes
We may update this policy. The date at the top shows when it was last changed.