Privacy policy

Privacy Policy

Last updated: April 2nd 2026

Ardeluz ("we," "us," or "our") is committed to protecting the privacy of our customers and website visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at ardeluz.com (the "Site") or make a purchase from us.

Ardeluz is a Canadian business headquartered in Montreal, Quebec. Our privacy practices comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25), and Canada's Anti-Spam Legislation (CASL).

By accessing or using our Site, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our Site.

1. Privacy Officer

Ardeluz has designated a Privacy Officer responsible for overseeing compliance with applicable privacy legislation. For questions, concerns, or requests related to your personal information, please contact:

Privacy Officer Ardeluz [Street Address] Montreal, Quebec [Postal Code] Canada

Email: privacy@ardeluz.com

2. Information We Collect

2.1 Information You Provide Directly

When you interact with our Site, you may voluntarily provide us with personal information, including:

When you make a purchase: Full name, email address, shipping address, billing address, phone number, and payment information (processed securely by our payment processor — see Section 5).
When you create an account: Name, email address, and password.
When you subscribe to our newsletter: Email address and, if provided, your name.
When you contact us: Name, email address, and any information you include in your message.
When you leave a product review: Name (or display name), email address, and the content of your review.
When you participate in a promotion or survey: Name, email address, and any other information requested.

2.2 Information Collected Automatically

When you visit our Site, certain information is collected automatically through cookies and similar technologies:

Device and browser information: IP address, browser type and version, operating system, device type, screen resolution, and language preference.
Usage information: Pages visited, time spent on pages, links clicked, referring website, and date and time of visits.
Location information: Approximate geographic location based on your IP address (city/province level, not precise location).

2.3 Information from Third Parties

We may receive information about you from third-party sources that we use in connection with our Site:

Shopify Inc.: Our e-commerce platform provider, which processes transaction and browsing data on our behalf.
Payment processors: Shopify Payments (powered by Stripe) processes your payment information. We do not receive or store your full credit card number.
Analytics providers: We use Google Analytics 4 to understand how visitors use our Site (see Section 4).

3. How We Use Your Information

We collect and use your personal information only for the following purposes:

Purpose	Legal Basis (PIPEDA)
To process and fulfill your orders, including shipping, invoicing, and customer communication	Performance of a contract / consent at purchase
To communicate with you about your orders (confirmations, shipping updates, delivery notifications)	Performance of a contract (transactional — exempt from CASL)
To send you marketing communications about new products, collections, and promotions	Express consent (CASL — see Section 7)
To administer your customer account	Performance of a contract / consent at account creation
To respond to your inquiries and provide customer support	Consent implied by your contacting us
To process returns, exchanges, and refunds	Performance of a contract
To analyze Site usage and improve our products, services, and customer experience	Legitimate business interest with anonymized/aggregated data
To detect and prevent fraud, unauthorized transactions, and other illegal activities	Legal obligation and legitimate business interest
To comply with legal and regulatory obligations (tax records, consumer protection)	Legal obligation

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.

4. Cookies and Tracking Technologies

4.1 What Are Cookies?

Cookies are small data files placed on your device when you visit a website. They help the site function properly and provide information to the site owner.

4.2 Types of Cookies We Use

Essential Cookies (Required)

These cookies are necessary for the Site to function and cannot be disabled. They include:

Session cookies that maintain your shopping cart
Authentication cookies that keep you logged in to your account
Security cookies that protect against fraud
Shopify platform cookies required for the e-commerce system to operate

Analytics Cookies (Require Your Consent)

We use Google Analytics 4 to understand how visitors interact with our Site. These cookies collect information in an aggregated, anonymized form, including:

Pages visited and time spent on each page
How you arrived at our Site (search engine, direct link, social media)
General geographic location (city/province level)

Google Analytics data is processed by Google LLC, which may store data on servers outside of Canada. We have configured Google Analytics to anonymize IP addresses. For more information on Google's data practices, visit https://policies.google.com/privacy.

Marketing Cookies (Require Your Consent)

If you consent, we may use marketing cookies to:

Measure the effectiveness of our advertising
Deliver relevant content on third-party platforms

We will only place marketing cookies on your device after obtaining your explicit consent through our cookie consent banner.

In accordance with Quebec Law 25, we request your consent before placing non-essential cookies on your device. When you first visit our Site, a cookie consent banner will appear allowing you to:

Accept all cookies — Essential, analytics, and marketing cookies will be placed.
Accept only essential cookies — Only cookies necessary for the Site to function will be placed.
Manage your preferences — Choose which categories of non-essential cookies to accept or decline.

You may change your cookie preferences at any time by clicking the "Cookie Preferences" link in the footer of our Site. Refusing non-essential cookies will not affect your ability to browse or make purchases.

You may also control cookies through your browser settings. Please note that disabling essential cookies may impair the functionality of the Site.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

We share your personal information only with the following categories of service providers, and only to the extent necessary to fulfill the purposes described in this policy:

Service Provider	Purpose	Data Shared
Shopify Inc.	E-commerce platform hosting, order processing, payment facilitation	Name, email, address, order details, browsing behaviour on our Site
Shopify Payments / Stripe	Payment processing	Name, billing address, payment card details (encrypted; we do not receive or store full card numbers)
Canada Post	Order shipping and delivery	Name, shipping address, phone number (for delivery notifications)
Google LLC	Website analytics (Google Analytics 4)	Anonymized browsing data, IP address (anonymized)
Klaviyo	Email marketing (only for subscribers who have given express consent)	Name, email address, purchase history (for segmentation)
Judge.me	Product reviews	Name (or display name), email address, review content

We require all service providers to protect your personal information in accordance with this policy and applicable law. We enter into data processing agreements with our service providers that restrict their use of your information to the purposes for which it was provided.

We may also disclose your personal information if required to do so by law, regulation, legal process, or enforceable governmental request, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, or to investigate fraud.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law.

Data Type	Retention Period	Reason
Order and transaction records	7 years from the date of the transaction	Canada Revenue Agency (CRA) tax record-keeping requirements
Customer account information	Duration of the account, plus 2 years after closure or last activity	Contractual obligation and customer service
Marketing consent records	Duration of consent, plus 3 years after consent is withdrawn	CASL compliance — proof of consent
Customer support correspondence	3 years from last interaction	Customer service and dispute resolution
Analytics data	14 months (Google Analytics default retention)	Site improvement; data is anonymized/aggregated
Cookie consent records	1 year from date of consent (consent re-requested annually)	Quebec Law 25 compliance

When personal information is no longer needed, we securely delete or anonymize it.

7. Marketing Communications and CASL Compliance

We comply fully with Canada's Anti-Spam Legislation (CASL).

Express Consent Required: We will not send you commercial electronic messages (marketing emails or SMS) unless you have given us your express, opt-in consent. We do not use pre-checked consent boxes.

What You Will Receive Without Marketing Consent: Transactional messages related to your orders (order confirmations, shipping notifications, delivery updates) are exempt from CASL and will be sent to you as part of fulfilling your purchase. These messages will not contain marketing content.

Every Marketing Message We Send Will Include:

Clear identification that the message is from Ardeluz
Our physical mailing address in Montreal, Quebec
A valid contact email address
A clear, functional unsubscribe mechanism at no cost to you

Unsubscribe Requests: If you unsubscribe from marketing communications, we will process your request within 10 business days, as required by CASL. You may unsubscribe at any time by:

Clicking the "Unsubscribe" link in any marketing email
Emailing privacy@ardeluz.com with the subject line "Unsubscribe"

Implied Consent: If you have made a purchase from us, CASL provides an implied consent period of two years from the date of your last purchase during which we may send you marketing communications. However, we prefer to rely on express consent and will always provide you with an easy way to opt out.

Consent Records: We maintain records of when, how, and to what you consented, as required by CASL. The burden of proof of consent is on us.

8. Your Rights Under Canadian Privacy Law

Under PIPEDA and Quebec Law 25, you have the following rights regarding your personal information:

Right of Access: You may request a copy of the personal information we hold about you. We will respond to your request within 30 days.

Right to Correction: You may request that we correct any inaccurate or incomplete personal information we hold about you.

Right to Withdraw Consent: You may withdraw your consent to our collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may affect our ability to provide you with certain products or services. For example, if you withdraw consent for us to use your shipping address, we will be unable to deliver orders to you.

Right to Deletion: You may request that we delete your personal information, subject to our legal obligations to retain certain records (see Section 6). If we cannot delete your information due to a legal requirement, we will inform you of the reason.

Right to Data Portability (Quebec Residents): Under Quebec Law 25, you may request that we provide your personal information in a commonly used technological format so that it may be transferred to another organization.

Right to De-indexation (Quebec Residents): Under Quebec Law 25, you may request that we cease disseminating your personal information or that access to it by search engines or other technologies be de-indexed, if the dissemination contravenes the law or a court order.

Right to Information About Automated Processing: If we use automated processing to make decisions about you (we currently do not), you have the right to be informed and to request a review of the decision by a person.

Right to Complain: If you are unsatisfied with our handling of your personal information, you may file a complaint with:

Office of the Privacy Commissioner of Canada (OPC): https://www.priv.gc.ca — for matters under PIPEDA
Commission d'accès à l'information du Québec (CAI): https://www.cai.gouv.qc.ca — for matters under Quebec Law 25

To Exercise Your Rights: Contact our Privacy Officer at privacy@ardeluz.com or at the postal address listed in Section 1. We will verify your identity before processing your request and respond within 30 days. If we require additional time, we will inform you.

9. International Data Transfers

Our Site is hosted by Shopify Inc., a Canadian company headquartered in Ottawa, Ontario. However, Shopify may process and store data on servers located outside of Canada, including in the United States.

Similarly, some of our service providers (Google LLC, Stripe, Klaviyo) may process data outside of Canada.

In accordance with Quebec Law 25, before transferring personal information outside of Quebec, we conduct a privacy impact assessment to ensure that the information will receive a level of protection comparable to that provided under Quebec law. We enter into contractual arrangements with our service providers that require them to protect your personal information in accordance with applicable Canadian law.

10. Security

We take reasonable measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

Encryption of data in transit (SSL/TLS) and at rest
Secure payment processing through PCI-DSS compliant processors (Shopify Payments / Stripe)
Restricted access to personal information on a need-to-know basis
Regular review of our data collection, storage, and processing practices

No method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security.

In the event of a breach of security safeguards involving your personal information that creates a real risk of significant harm, we will notify you and the relevant authorities (the Office of the Privacy Commissioner of Canada and/or the Commission d'accès à l'information du Québec) as required by law.

11. Children's Privacy

Our Site is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe a child under 16 has provided us with personal information, please contact our Privacy Officer.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our service providers, or applicable law. When we make material changes, we will:

Update the "Last updated" date at the top of this policy
Post a notice on our Site for a reasonable period
If the changes affect how we use personal information we have already collected, notify you by email (if we have your email address)

We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy, our privacy practices, or wish to exercise any of your rights described above, please contact us:

Ardeluz — Privacy Officer [Street Address] Montreal, Quebec [Postal Code] Canada