1. Person in Charge of Processing
This privacy policy applies to the website operated by Jutras design d'espaces (hereinafter "we," "us," or "our"). As a Quebec-based business, we are subject to Quebec Law 25 — formally known as An Act to modernize legislative provisions as regards the protection of personal information (S.Q. 2021, c. 25) — and we are committed to handling your personal information responsibly and transparently.
This policy explains what personal information we collect, why we collect it, how long we keep it, who we share it with, and what rights you have over it.
2. Personal Information Collected
We collect personal information in the following categories, depending on how you interact with our website:
- Identification and contact information: your name, email address, phone number, and billing or shipping address, collected when you place an order or contact us.
- Transaction and purchase data: details about the products or services you purchase, order history, and payment confirmation information (we do not store full payment card numbers).
- Device and technical identifiers: your IP address, browser type, operating system, device identifiers, and approximate geographic location, collected automatically when you visit our site.
- Browsing behavior: pages visited, session duration, navigation paths, and interactions with our site content, collected through analytics and e-commerce tools.
- Advertising identifiers: advertising and social identifiers used to measure conversions and deliver targeted ads, collected through marketing tools when you give your consent.
- Consent preferences: your cookie consent choices, stored locally in your browser to remember your preferences across visits.
3. Purposes of Processing
We use your personal information only for the purposes described below. Each purpose is tied to a legal basis under Quebec Law 25.
- Processing your orders and managing your customer account — We use your identification, contact, and transaction data to fulfill purchases, send order confirmations, and handle returns or inquiries. Legal basis: performance of a contract (the transaction you initiate with us).
- Website security and fraud prevention — We use your IP address and device identifiers through Google reCAPTCHA (Google LLC, United States) to verify that form submissions come from a real person and to protect our site from automated abuse. We also use Moelleux (by Horizon-Cumulus), operated by 9322-8310 Québec inc. (Joliette, Quebec), to manage your cookie consent and host this privacy policy. Consent records are stored in Quebec (OVH, Beauharnois). Legal basis: legitimate interest in maintaining a secure and functional website.
- Audience measurement and sales performance analysis — We use Google Analytics 4 (Google LLC, United States) to understand how visitors navigate our site, and WooCommerce Analytics (Automattic Inc., United States) to analyze our e-commerce performance. This helps us improve our content and product offerings. Legal basis: consent, obtained through our cookie consent banner before these tools are activated.
- Targeted advertising and remarketing — We use the Meta Pixel (Facebook) (Meta Platforms Inc., United States) to track conversions and show relevant ads to people who have visited our site. Legal basis: consent, obtained through our cookie consent banner before this tool is activated.
- Optimal display of website content — We use Google Fonts (Google LLC, United States) to load typefaces that ensure our site displays correctly. Your IP address is transmitted to Google's servers as part of this process. Legal basis: legitimate interest in presenting a functional and readable website. You may withdraw this by blocking functional cookies in our consent banner.
-
Remembering your consent preferences — A cookie named
moelleux_{site_key}is stored in your browser for up to 13 months to remember the consent choices you made in our banner, so we do not ask you again on every visit. Legal basis: legitimate interest in honoring your previously expressed preferences.
4. Third Parties and Processors
The table below lists every third-party service active on our website, its purpose, its category, and whether it involves a transfer of personal information outside Quebec.
| Service | Purpose | Category | Transfer outside Quebec |
|---|---|---|---|
| Moelleux (by Horizon-Cumulus) | Cookie consent management and privacy policy hosting; consent records stored in Quebec (OVH Beauharnois) | Essential | No — data stays in Quebec |
| Google reCAPTCHA | Bot detection and form security | Essential | Yes — United States |
| Google Analytics 4 | Audience measurement and traffic analysis | Analytics | Yes — United States |
| WooCommerce Analytics | E-commerce sales performance analysis | Analytics | Yes — United States |
| Meta Pixel (Facebook) | Conversion tracking and targeted advertising | Marketing | Yes — United States |
| Google Fonts | Web font delivery for site display | Functional | Yes — United States |
5. Transfers Outside Quebec
Several of the third-party services listed above involve transferring your personal information to the United States, specifically to Google LLC and Meta Platforms Inc. These transfers occur when you interact with features powered by those services (analytics, advertising, security, and web fonts).
Under section 17 of Quebec Law 25, we are required to assess whether the destination jurisdiction offers an adequate level of protection before transferring personal information outside Quebec. We have conducted or rely on Privacy Impact Assessments (PIAs — also called évaluations des facteurs relatifs à la vie privée, or EFVPs) for these transfers, and we use contractual safeguards (such as standard contractual clauses and data processing agreements) with each of these providers to protect your personal information.
The following transfers are in effect:
- Google LLC (United States) — Google Analytics 4, Google reCAPTCHA, and Google Fonts. Your IP address, device identifiers, and browsing behavior may be processed on Google's servers in the United States.
- Meta Platforms Inc. (United States) — Meta Pixel. Your device identifiers, IP address, transaction data, and advertising identifiers may be processed on Meta's servers in the United States.
- Automattic Inc. (United States) — WooCommerce Analytics. Your device identifiers, IP address, transaction data, and browsing behavior may be processed on Automattic's servers in the United States.
Our own website infrastructure, consent records, and this privacy policy are hosted in Quebec by Horizon-Cumulus (Joliette, Quebec) via OVH (Beauharnois, Quebec). No personal information collected directly by us leaves Quebec in the course of our own operations.
6. Retention Period
We keep your personal information only as long as necessary for the purpose for which it was collected, or as required by law.
| Data Type | Retention Period | Justification |
|---|---|---|
| Customer and order information (name, address, purchase history) | 7 years after the last transaction | Quebec tax and accounting obligations under the Tax Administration Act |
| Contact form submissions and correspondence | 3 years | Reasonable period to address follow-up questions or potential disputes |
| Analytics data (Google Analytics 4, WooCommerce Analytics) | Up to 26 months (Google default); session-level data aggregated and anonymized thereafter | Audience trend analysis; data is anonymized at the end of the retention window |
| Advertising and conversion data (Meta Pixel) | Up to 180 days (Meta default for event data) | Campaign performance measurement; governed by Meta's data retention policies |
| Cookie consent records (Moelleux) | 13 months from the date of consent | Required to demonstrate proof of consent under Quebec Law 25 |
| Security logs (reCAPTCHA, server logs) | Up to 90 days | Detection and investigation of security incidents |
Once the applicable retention period has expired, personal information is securely deleted or anonymized so that it can no longer be linked back to you.
7. Your Rights
Under Quebec Law 25, you have the following rights regarding your personal information:
- Right of access: You may ask us to confirm whether we hold personal information about you and to receive a copy of it in a clear and understandable format.
- Right of rectification: If any personal information we hold about you is inaccurate, incomplete, or ambiguous, you may ask us to correct it.
- Right to erasure (de-indexing): In certain circumstances — for example, if the information was collected unlawfully or is no longer necessary for the purpose for which it was collected — you may ask us to delete your personal information.
- Right to portability: You may ask us to provide you with the personal information you have given us in a structured, commonly used technological format, or to have it transferred directly to another organization where technically feasible.
- Right to withdraw consent: Where we process your personal information based on your consent (for example, analytics or marketing cookies), you may withdraw that consent at any time by updating your preferences in our cookie consent banner or by contacting us directly. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise any of these rights, please contact our Person responsible for the protection of personal information using the details in Section 8. We will respond within 30 days of receiving your request, as required by Quebec Law 25.
If you are not satisfied with our response, or if you believe we are handling your personal information in a way that does not comply with Quebec Law 25, you have the right to file a complaint with the Quebec Information Access Commission (CAI) at https://www.cai.gouv.qc.ca.
8. Person Responsible for the Protection of Personal Information
In accordance with section 3.1 of Quebec Law 25, we have designated a Person responsible for the protection of personal information who oversees our compliance with the Act and handles requests and complaints related to personal information.
- Name: Marie-Pier Jutras
- Title: propriétaire
- Email: info@jutrasdesign.ca
- Phone: 450 421-0509
You may contact this person to exercise your rights, ask questions about this policy, or raise a concern about how your personal information is handled. We will acknowledge your request promptly and provide a full response within 30 days, as required by Quebec Law 25.
9. Effective Date and Versioning
This privacy policy takes effect on 9 juin 2026 and replaces any prior version.
Current version: 1
We may update this policy from time to time to reflect changes in our practices, the services we use, or applicable law. When we make material changes, we will update the effective date above and, where appropriate, notify you through our website. We encourage you to review this policy periodically.