Privacy Policy
Last updated: August 11, 2026
Privacy Officer
9516-6534 Québec inc., operating under the registered trade name Chez Marie Pou, acts as Privacy Officer. Its registered office is located at 158 rue Loranger, Trois-Rivières, Quebec G8T 3T5 and is not accessible to customers. Questions, access or correction requests, complaints, consent withdrawal requests and deletion requests may be sent to the person responsible at chezmariepou@gmail.com or to administration at 819-384-1226.
Information Collected
The application may collect name, email, phone number, delivery address, city, postal code, profile photo, orders, invoices, payments, client requests, credits, order-related messages and information needed to provide the service.
In the business area, the application may also store products, inventory data, expenses, receipt photos and data extracted from those receipts after human validation.
Use of Information
Information is used only to create and secure accounts, manage orders, prepare deliveries, send invoices, track payments, manage inventory, provide the client catalog, answer requests, prevent fraud and meet accounting or legal obligations.
Access is limited to authorized Chez Marie Pou personnel and providers that need the information to perform their service. Each access must match the person's duties or the provider's mandate.
Consent
By creating an account or using the application, the client consents to the use of their information for the purposes described here. Consent may be withdrawn, except where some information must be kept to provide a service already requested, meet a legal obligation or prevent fraud.
Cookies and Similar Technologies
The website uses essential technologies required for operation and for remembering certain choices, such as language or cookie preference. The consent choice is stored locally in the browser for up to 180 days. Optional cookies or tools, for example audience measurement or marketing improvement tools, are used only if the visitor accepts them. This choice can be changed with the Cookies link in the site footer.
Sharing and Providers
Information is not sold. It may be shared only with technical providers required to operate the application, such as hosting, the secure database, AWS S3, AWS Textract, Stripe and the email service configured by the business.
Some providers may process or store data outside Quebec or Canada. Before entrusting personal information to a provider or communicating it outside Quebec, Chez Marie Pou evaluates the information, purposes, safeguards and associated risks.
Security
Access to the client and business areas is password protected. Private files are not public, technical keys are not embedded in the client application and communications must use HTTPS in production.
The application also applies measures such as HSTS, a content security policy, frame blocking, login attempt limits and role-based access restrictions.
Retention and Deletion
Retention depends on the type of information and its purpose. Account data is retained during the client relationship; orders, invoices, payments and accounting records are retained for the period required by tax, accounting and legal obligations; service messages are retained as needed to handle and document the request. Information is then securely deleted or anonymized.
Individual Rights
A client may request access to their information, correction, consent withdrawal or account deletion where permitted by law. The Privacy Officer verifies the requester's identity and responds within the time required by law. A refusal is explained in writing with the available recourse.
Privacy Complaints
A complaint may be sent to chezmariepou@gmail.com with the subject “Privacy complaint.” It should describe the situation and include contact information for a response. The Privacy Officer reviews the complaint, documents the steps taken and provides a response. A person who remains dissatisfied may also contact Quebec's Commission d'accès à l'information.
Privacy Incidents
Privacy incidents are documented and assessed. If an incident presents a serious risk of harm, affected individuals and applicable authorities are notified according to current laws.
Changes
This policy may be updated to reflect changes to the application or legal obligations. The update date indicates the most recent version.