This Policy applies to personal information that may be collected by BOPIED when you visit its Website or stores.

Personal information is any information concerning a natural person that allows, directly or indirectly, the identification, localization, or profiling of that person.

Identification information, such as your first and last name, email and postal address, telephone number, fax number, date of birth, language preferences, and any information related to your customer account.

Transactional or commercial information, such as the products you have purchased, order history, current orders, your payment method, and billing address.

Online activity information, such as browsing history on our Website, technical logs, IP address, browser type and configuration, operating system, traffic data, conversion data, preferences, product shares, pages viewed, referring website, number of visitors, geographic location, language preferences, and device information.

Information when you communicate with us: the content of your message, publicly available information about your social media accounts, and any metadata related to your communication.

Information when you apply for a position at BOPIED: your identification information, your resume and cover letter, as well as the information contained therein, and your availability.

Other information about you, such as your age, gender, and customer category, as well as any other information or documentation you share when interacting with us.

Personal information
is collected with your consent or when permitted by law. It is used, in particular, for the following purposes:

• To identify you;
• To create and manage your customer account or customer file;
• To manage your current orders;
• To serve you and offer you our products and services;
• To allow you to shop for and purchase our products;
• To process your returns, refunds, and exchanges;
• To allow you to interact with our products;
• To participate in contests, sweepstakes, loyalty programs, and promotions;
• To communicate with you and respond to your communications;
• Promotional purposes;
• To administer our online services;
• To manage the performance of our online services and ensure their security;
• To personalize your experience;
• Advertising, marketing, and analytical reasons;
• To evaluate your job application;
• To receive and activate a gift card;
• To comply with our legal obligations.

We only use your personal information for the purposes for which we obtained your consent at the time of collection. Several methods are used to collect your personal information:

Direct Interactions: Some personal information, such as your identity and contact details, is provided by you when you interact with Bopied, including by corresponding with us, creating a customer account, making a purchase or return, subscribing to newsletters, filling out any form, survey or contest, and purchasing our products.

Indirect Interactions: Some personal information may be provided to us by a third party to whom you have already given this information in accordance with their respective privacy policies (e.g., Meta, employee recruitment services).

Automated Technologies or Interactions: When you interact with our website, we automatically collect technical personal information about your equipment, browsing actions, and habits. Cookies (mandatory and optional), pixels, server logs, and other similar technologies are used to collect this personal information. We may also receive technical personal information about you if you visit other websites using our cookies.

Some of these cookies are subject to your consent. Their use improves your experience on our website, particularly by personalizing your experience. Optional cookies can be refused by you when your consent is requested or via your browser settings.

BOPIED undertakes to protect your personal information and not to share it, except in accordance with this Policy, with the law, or with your consent. When sharing, BOPIED undertakes to limit the personal information communicated to what is necessary to achieve the purpose of this communication.

In order to provide you with the products and services you have requested, your personal information may be shared with third parties who provide services on our behalf, such as payment providers, email and communication transmission, hosting of our website, parcel shipping management platforms, and operations management.

BOPIED shares your information with third parties for marketing and analytical purposes (e.g., Meta, Google Analytics, Google Ads, Pinterest).

In the event that your personal information is transferred to a jurisdiction other than Quebec, foreign laws will apply and certain organizations in that jurisdiction may have access to your personal information.

Personal information collected by BOPIED is accessible by our employees when necessary for their duties. They must maintain the confidentiality of this personal information.

Your personal information is securely stored only as long as it is reasonably necessary for the purposes set out in this Policy or longer if permitted or required by law. When no longer needed, your personal information is securely destroyed or anonymized (so that it can no longer be used to identify you) in accordance with applicable laws.

We take the necessary and appropriate security measures, according to the level of confidentiality and risk, to protect your personal information against loss, theft, and unauthorized access. The personal information you provide to BOPIED is transmitted via a secure server, through Shopify. Shopify is responsible for encrypting (or encoding) the data transmitted during the order process. This encryption method protects your data, such as your credit card number and your shipping and billing information, by scrambling it before it leaves your computer. The data is decrypted only when we receive it, with the exception of banking data, which is never fully transmitted to us (we only receive the payment method and the last 4 digits of the credit card, if applicable). We make every reasonable effort to ensure its security in our systems.

We take reasonable precautions to prevent the fraudulent use of your personal information on our websites. To this end, we have adopted authentication procedures that comply with industry standards to ensure the protection of your information when you make purchases online from us. In particular, we communicate with financial institutions or credit rating agencies to confirm the authenticity of your credit card and validate your billing information.

In some cases, your consent is required for the collection, use, or disclosure of your personal information. Your consent can then be withdrawn or modified at any time by following the instructions for modifying your consent or by contacting us directly, subject to applicable legal and contractual restrictions.

Despite your preferences regarding commercial and advertising communications, we may still communicate with you regarding a product or service, in accordance with applicable law. Any modification to your consent may require a certain processing time. Despite your refusal to receive personalized advertisements, you may still see generic and non-personalized advertisements. In some cases, you can change your consent to personalized advertisements on third-party platforms by going directly to the platform in question (e.g., Meta, Pinterest, Google).

BOPIED undertakes to use only the personal information necessary and for the purposes for which it was collected. We will ask for your consent again in the event that we wish or need to use it for purposes other than those to which you have consented.

You have the right to request to consult and access the personal information that Bopied holds about you. You have the right to request that any personal information about you be rectified, particularly when it is inaccurate, incomplete, or acquired despite your refusal of consent. The request can be made by contacting us at the coordinates below. We will respond to requests within thirty (30) days of receiving the written request.

You have the right to control the dissemination of your personal information. By written request, you may ask that your personal information not be disseminated or that a hyperlink associated with your name, providing access to personal information, be de-indexed (or re-indexed, in some cases). This request may be made when the dissemination of such information violates the law or a court order or causes serious harm to your reputation or privacy.

We will respond to requests within thirty (30) days of receiving the written request.

You may, by written request via the contact details provided below, request information on the processing of your data. This includes your personal information that has been collected, how it is processed by BOPIED, information on the categories of persons who have access to this information, their retention periods, and if it has been collected from a third party, the source of the personal information.

We reserve the right to modify the content of this Policy at any time. Any changes made will appear on our website. You accept changes to the Policy when you continue to use our services or purchase our products after the modified version of this policy has been published or after you have been informed of such changes. It is your responsibility to ensure that you read, understand, and agree to the latest version of this policy.

Please contact the Privacy Officer with any questions or concerns regarding this Policy, or the collection, use or disclosure of your personal information.

Amélie Rivest

Privacy Officer

amelie@bopied.com450-651-9222 ext. 127

2626 Papineau Street, Longueuil, Quebec J4K 3M4