At Pascal Le Boulanger, we place great importance on protecting the personal information of our customers, employees, and representatives. In accordance with applicable personal information protection legislation (including Quebec’s Law 25), we are committed to maintaining the confidentiality of the personal information we collect.

This policy is designed to inform you about our practices regarding the collection, use, disclosure, retention, and protection of your data, taking into account our use of the Shopify e-commerce platform. By using our website (https://www.pascalleboulanger.com) or providing us with your personal information, you agree to the terms of this policy.

 

1. Consent

1.1. Commitment and Acceptance

We are committed to protecting your privacy. We collect and use your personal information only with your explicit consent and in compliance with the law. By accessing our website or providing us with information, you agree to the terms of this policy.

 

1.2. Right to Withdraw Consent

You have the right to withdraw your consent at any time, subject to certain legal or contractual restrictions. Withdrawal may, for example, prevent us from providing certain products or processing certain requests (such as sending newsletters).

 

1.3. Exceptions to Consent

In exceptional circumstances (legal, medical, or safety imperatives), we may collect, use, or disclose personal information without your prior consent. These situations include, but are not limited to, fraud prevention or legal enforcement requirements.

 

2. Collection of Personal Information

2.1. Direct Collection Methods

We collect personal information through various means, including:

Emails and communications with our customer service team

Online request forms (including appointment bookings)

Mobile application provided to our clients

Cookies and similar technologies on our website (see Section 12)

Video surveillance (in our physical locations)

Connected objects.

 

2.2. Collection via Third Parties and Platforms

We may also collect information through third parties, including:

Shopify platform: Transactional data (purchase history, payment details, etc.) and browsing data

Technology service providers (ordering platform, newsletter service)

Recruitment portals (for CV submissions and personal data)

Professional social networks (for recruitment or marketing)

Online payment service providers (PayPal, Shop, Discover, American Express, Visa, Apple Pay, Google Pay, Diners Club International, Mastercard) for processing financial transactions

Cloud service providers (Odoo) storing client data

Digital marketing companies analyzing user behavior

 

2.3. Advanced Collection Technologies

We may use advanced technologies to identify, locate, or profile our customers (e.g., for consumer profiling).

Responsible use: These technologies are used solely to improve our services and better understand your needs.

Activation: By default, these functions are disabled to protect data privacy. You may choose whether to activate them.

 

3. Types of Personal Information Collected

3.1. Data Collected

We collect various types of data, including:

Personal identifiers: Name, postal address, email, phone number

Technical or digital information: IP address, online activity, browsing and purchase history (via Shopify and other tools)

Financial information: Payment details (processed by secure providers), credit records (if applicable)

Demographic data: Age

 

3.2. Children’s Privacy

We do not knowingly collect personal information from children under 14. By using our website, you declare that you are at least 14 years old. If we discover that we have inadvertently collected information from a child under 14, we will take steps to delete it immediately.

 

4. Use of Personal Information

4.1. Purposes of Use

We use your personal information for the following purposes:

Transaction management: Processing orders, payments, and issuing receipts via our Shopify store

Responding to inquiries: Efficiently addressing your requests and questions

Registrations and participation: Managing subscriptions (newsletters, events, webinars)

Human resources management: Recruitment, employment contracts, and internal administration

Improving user experience: Operating and enhancing our website, personalizing your online experience (via Shopify analytics tools, Google Analytics, etc.)

Marketing communication: Sending information, special offers, and relevant news, with the ability to unsubscribe at any time

User account management: Managing your Shopify customer account for access to features

 

4.2. Control and Limitation Options

We offer various options to control and limit the collection of your personal information:

Communication preferences: Choose your preferred methods or opt-out entirely

Account settings: When creating your account, you may opt out of certain services (e.g., loyalty programs)

Cookie management: Our site allows you to refuse or customize the use of cookies (see Section 12)

Granular consent: You may consent only to certain uses of your data

 

5. Sharing and Disclosure of Personal Information

5.1. Sharing with Staff and Partners

Personal information is accessible to specific categories of our staff and certain partner organizations to provide our products and services, including:

Shopify platform: As host and provider of our e-commerce platform, Shopify processes data on our behalf

Customer service: Odoo

IT department: Kenotronix, Osperia, LBoss, Odoo

Marketing department: Odoo

Payment service providers: PayPal, Shop, Discover, American Express, Visa, Apple Pay, Google Pay, Diners Club International, Mastercard

Cloud service providers: Odoo

R&D partners: Hello Darwin

 

5.2. Data Transfers Outside Quebec

Your data may be transferred to servers outside your province or country (including Shopify and its providers). We take all necessary measures to ensure your personal information is processed securely and in accordance with this policy. By using our site, you consent to these transfers.

5.3. Business Sale or Transfer

If the company is sold or transferred, your personal data may be transferred to the new owner. We will require that the new owner use your data in accordance with this privacy policy.

 

6. Security of Personal Information

6.1. Security Measures

We implement rigorous physical and technological measures to ensure the security and confidentiality of personal information, including:

Physical security: Electronic locks, surveillance cameras, restricted access to data areas

Access controls: Limited to authorized employees only

Staff training: Regular awareness of best security practices

Data encryption: Protection of sensitive data using advanced techniques

Intrusion monitoring and detection

Disaster recovery plans

Although we make every effort, no method of transmission over the Internet is 100% secure. Absolute security cannot be guaranteed.

 

6.2. Staff Commitment

All staff, administrators, volunteers, or consultants commit to maintaining the confidentiality of the personal information we collect and not to disclose it for personal or third-party benefit. This commitment continues indefinitely.

7. Retention and Destruction of Personal Information

We retain your personal data only as long as necessary for the purposes outlined in this privacy policy (e.g., retaining order history while the account is active). Usage data is generally kept for a shorter period unless needed to enhance security or required by law.

8. Your Rights

We recognize and respect your fundamental rights regarding the personal information we hold:

Right of access: To view the personal information we hold about you

Right of correction: To request updates to inaccurate or incomplete information

Right to delisting: To request removal of your personal information from public dissemination or the de-indexing of hyperlinks associated with your name if such disclosure could harm you

Right to lodge a complaint: In case of concerns regarding the processing of your data

Any refusal to grant access will be justified in accordance with applicable law.

9. Links to Other Websites

Our website may contain links to third-party websites (e.g., social media, partners). When you follow these links, you leave our site, and information exchanged is no longer governed by this privacy policy. We recommend reviewing the privacy policies of other sites.

10. Use of Cookies and Analytics Tools

10.1. Cookies and Tracking Technologies

We use tracking technologies (cookies, tags, and scripts) to improve and analyze our website and Shopify store.

Essential cookies: Required to provide services and prevent fraudulent use

Persistent cookies: To remember your choices (identifiers, language) and improve experience

Performance and tracking cookies: To monitor traffic and test new features (may be managed by third parties such as Shopify)

You may configure your browser to refuse cookies, but this may affect some website features.

 

10.2. Analytics Tools (Google Analytics) and Pixels

We may use third parties, such as Google Analytics, to collect and analyze information about visited sections.

To prevent storage and processing by Google, you can download and install the browser add-on available at [Google Analytics opt-out browser add-on page].

Conversion pixels (or “tracking pixels”) are used to notify us when you have viewed a page or opened an email, to analyze response rates.

11. Policy Updates

This policy may be updated to reflect changes in our practices or legal requirements. Updates will be posted on our website. We encourage you to review this policy regularly.

12. Contact

Any questions regarding this privacy policy may be sent to our Privacy Officer:

Privacy Officer: Nicholas Lafleur
Email: cp-cr@pascalleboulanger.co
Effective Date: November 2025
Last Updated: December 2025