Privacy Policy

Cristallise (hereinafter "we", "our" or "us") is committed to protecting the privacy of its users and customers. This privacy policy explains how we collect, use, disclose, and protect your personal information in accordance with Quebec's Law 25 on the protection of personal information in the private sector and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Information Collected

We may collect the following personal information:

• Identification information: first name, last name, email address, phone number.
• Order information: shipping address, order history, product preferences.
• Payment information: processed securely via Stripe. We do not store your credit card information on our servers.
• Browsing data: IP address, browser type, pages visited, visit duration.
• Communications: content of messages sent through our contact form.

2. Use of Information

Your personal information is used to:

• Process and deliver your orders.
• Communicate with you regarding your orders or inquiries.
• Improve our products, services, and website user experience.
• Send you information about our new products and services (with your consent).
• Comply with our legal and regulatory obligations.

3. Cookies

Our site uses cookies to improve your browsing experience. The types of cookies we use include:

• Essential cookies: necessary for the operation of the site (shopping cart, session).
• Analytics cookies: help us understand how visitors use our site.
• Preference cookies: remember your choices (language, display preferences).

You can configure your browser to refuse cookies, but some features of the site may no longer be available.

4. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Order data is retained for a period of 7 years in accordance with tax requirements. Anonymized browsing data may be retained indefinitely for statistical purposes.

5. Your Rights

In accordance with Law 25 and PIPEDA, you have the following rights:

• Right of access: you may request a copy of the personal information we hold about you.
• Right of rectification: you may request the correction of inaccurate or incomplete information.
• Right of deletion: you may request the deletion of your personal information, subject to our legal obligations.
• Right to withdraw consent: you may withdraw your consent at any time for marketing communications.
• Right to portability: you may request to receive your data in a structured, commonly used format.

6. Security

We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, modification, disclosure, or destruction. Our site uses SSL/TLS encryption to secure data transmissions. Payments are processed securely by Stripe, a PCI DSS Level 1 certified provider.

7. Contact Us

For any questions regarding this privacy policy or to exercise your rights, please contact us:

If you are not satisfied with our response, you may file a complaint with the Commission d'accès à l'information du Québec (CAI) or the Office of the Privacy Commissioner of Canada.