Skip to content
A Canadian company · Shipping across Canada · Life Must Be Aromatic
Smoke Out Candles
Shop on Amazon Cart (0)
Policies

Privacy Policy

How we collect, use, share and protect your personal information.

[[DELETE THIS WHOLE NOTE BEFORE PUBLISHING]]

DRAFT. NOT LEGAL ADVICE. Prepared as a starting point for a WooCommerce page. Before publishing, have a Canadian lawyer review it, or check it against a reputable policy generator. Fill every [[PLACEHOLDER]] (search for [[) first.

Lawyer note (French / Quebec): This English draft is for the current English-first site (focused on provinces outside Quebec). French pages are not being built for now. If you sell to Quebec consumers, a lawyer should confirm whether French versions of the site, policies and standard-form contracts are still required under the Charter of the French Language.

Compliance notes for Rameet (delete before publishing):

  • PIPEDA (federal) applies to personal information collected in commercial activity across Canada.
  • Quebec Law 25 (Act respecting the protection of personal information in the private sector, as amended) applies if the business is based in Quebec or collects information from Quebec residents. It requires: a named person in charge of the protection of personal information (by default the business's highest-ranking person, e.g. you) with title and contact details published on the website; privacy policy in clear, simple terms; tracking/profiling technologies off by default unless the person opts in (use a cookie-consent banner that blocks the TikTok/Meta pixels and analytics until consent); a register of confidentiality incidents; and a privacy assessment before sending personal information outside Quebec (e.g. Mailchimp/PayPal/TikTok servers in the US).
  • CASL applies to marketing emails. The 10%-off popup needs an unticked opt-in, a clear statement of what they're signing up for, your identity and contact details, and an unsubscribe link in every email (honoured within 10 business days). Fix the empty "term and condition" link on the popup. Keep consent records (Mailchimp does this).
  • Update the list of third parties below to match what's actually installed. As seen from outside: Square, PayPal, ShipTime, Mailchimp, Woo Coupon Box, TikTok for Business (pixel script on the site), Instagram/TikTok feed plugins, Contact Form 7, Wordfence, and the Askka/Elementor theme. No Google Analytics or Meta pixel was seen in the page code. Add them here if you install them.

Last updated: [[DATE]]

Who we are

This policy explains how 7110561 Canada Inc. ("Smoke Out Candles", "we", "us"), Boucherville, Quebec, collects, uses, shares and protects personal information when you visit getthesmokeout.ca, buy from us, or join our email list.

Person in charge of the protection of personal information: Privacy Officer, getthesmokeout@gmail.com, Boucherville, Quebec.

What we collect

  • Order information: name, billing and shipping address, email, phone number, order details and order notes.
  • Payment information: handled directly by our payment processors (secure card payments at checkout via Stripe or Square, when checkout is live). We don't see or store your full card number.
  • Account information (if you create an account): login email, password (encrypted), order history.
  • Marketing preferences: your email address and consent record if you sign up for offers (e.g. the 10%-off popup or the footer form).
  • Messages: what you send us through the contact form, email or social media.
  • Technical and usage information: IP address, device and browser type, pages viewed, cart activity, and similar data collected through cookies and similar technologies (see below).

Why we use it

  • To process, ship and support your orders, including returns and refunds
  • To talk to you about your order or reply to your messages
  • To send marketing emails, only with your consent. Unsubscribe any time.
  • To keep the site secure and prevent fraud (e.g. security and spam-protection tools)
  • To understand how the site is used and improve it, and (with your consent) to measure and show ads on social platforms
  • To meet legal, tax and accounting obligations

We collect only what we need for these purposes and don't sell your personal information.

Cookies, analytics and pixels

We use:

  • Essential cookies: needed for the cart, checkout, login and security. Always on.
  • Analytics cookies [[IF GA4 INSTALLED]]: help us understand traffic (e.g. Google Analytics).
  • Advertising pixels: [[TikTok pixel / Meta pixel: confirm which are active]]. These let social platforms measure ad results and show you relevant ads.

Non-essential cookies and pixels stay off until you opt in through our cookie banner. You can change your choice at any time via [[COOKIE SETTINGS LINK]] or by clearing cookies in your browser.

Who we share it with

We share personal information only as needed, with service providers who help us run the store:

ProviderPurpose
Stripe or SquareSecure card payments at checkout (planned / when live)
ShipTime and the carriers it usesShipping labels, rates, tracking
Mailchimp (Intuit)Email marketing (only if you subscribe)
TikTok, MetaAd measurement (only if you consent) [[CONFIRM]]
[[WEB HOST]] / WordPress, WooCommerce and site pluginsHosting and site operation, including security tools such as Wordfence
[[ACCOUNTANT / OTHERS]]Bookkeeping and legal compliance

We may also disclose information when the law requires it, or to protect our rights or prevent fraud.

Information stored outside Canada / outside Quebec

Some providers (for example Mailchimp, PayPal, TikTok, Meta) may store or process information in the United States or other countries, where local authorities may be able to access it under local law. We assess these transfers and use providers that protect personal information. [[CONFIRM Law 25 transfer assessment done]]

How long we keep it

We keep order records for as long as tax and accounting laws require ([[e.g. 6 years]]). We keep marketing consent until you unsubscribe, and other information only as long as needed for the purposes above. Then we delete or anonymize it.

How we protect it

We use HTTPS, access controls, strong passwords, security plugins and providers with industry-standard security. No system is perfectly secure. If a privacy incident creates a risk of serious harm, we'll notify you and the relevant authorities as the law requires.

Your rights

You can ask to access, correct, or delete your personal information, withdraw consent, or (in Quebec) ask how a decision about you was made and request data portability. Email getthesmokeout@gmail.com. We'll reply within 30 days. We may need to verify your identity first.

If you're not satisfied, you can contact the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Quebec, the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).

Children

Our site is not directed to children under [[13 / 14 in Quebec]] and we don't knowingly collect their information.

Changes

We may update this policy. The "Last updated" date shows the latest version. We'll tell you about significant changes.

Contact

Privacy Officer, Person in charge of the protection of personal information · 7110561 Canada Inc. · Boucherville, Quebec · getthesmokeout@gmail.com

ShippingReturns & refundsPrivacyTerms