Privacy Policy

Last updated: October 22, 2026

Privacy Officer

9516-6534 Québec inc., operating under the registered trade name Chez Marie Pou, acts as Privacy Officer. Its registered office is located at 158 rue Loranger, Trois-Rivières, Quebec G8T 3T5 and is not accessible to customers. Questions, access or correction requests, complaints, consent withdrawal requests and deletion requests may be sent to the person responsible at chezmariepou@gmail.com or to administration at 819-384-1226.

Information Collected

The application may collect name, email, phone number, delivery address, city, postal code, profile photo, orders, invoices, payments, client requests, credits and order-related messages. Historical referral attributions and commissions are preserved; new general app shares do not create paid attribution. Data for the separate product-sharing program is described below.

In the business area, the application may also store products, inventory data, expenses, receipt photos and data extracted from those receipts after human validation.

Use of Information

Information is used only to create and secure accounts, manage orders, prepare deliveries, send invoices, track payments, manage inventory, provide the client catalog, attribute a sale to a personal link, calculate and document eligible rebates or commissions, answer requests, prevent fraud and meet accounting, tax or legal obligations.

Access is limited to authorized Chez Marie Pou personnel and providers that need the information to perform their service. Each access must match the person's duties or the provider's mandate.

Consent

Information needed for the account, order and service is used for the purposes presented at collection under the applicable basis. Creating an account or continuing to use the app does not mean accepting optional product-link tracking or promotional communications. These are separate choices. Withdrawing consent does not erase information still needed for a service already requested, a justified review or a legal obligation.

When the program is enabled in the app, a personal product link can earn its sharer 1% in credits. After opening the link, the signed-in customer explicitly chooses whether to accept it or decline tracking. Declining does not prevent purchases or change the price. Opening the link alone does not activate tracking. See the program rules.

With your permission, we associate the link and shared product, the sharer's identifier, your choice and notice version, the accepted-click date and its expiry with your account. Only confirmed additions of the specific linked product to your orders over the next 7 days, their eligible amounts and payments are used to calculate credits. The last accepted product link replaces the previous one for future additions. Calculation is automatic under the displayed rules; you can ask our team to review attribution, the data used, the calculation or a correction.

Attribution uses account data on our server. The program adds no advertising cookie or local tracking storage; the session cookie needed to sign in is separate. It does not track browsing on other sites. Access is limited to authorized personnel and technical providers needed for the service. The sharer receives only their reward status, amounts, dates and adjustments, not your identity, contact details, invoice or purchased-product details.

You can withdraw permission under “My profile → My shares → My purchase-attribution consent” or by contacting us. Withdrawal applies to future additions to an order, without erasing attribution for already-confirmed additions or their payment and correction records. The attribution window expires after 7 days; this is not a promise to delete all records at that point. Consent, reward and adjustment records are retained for their verification purposes and applicable obligations, then handled under the retention policy. You may request details about your information and its retention period.

Cookies and Similar Technologies

The website currently uses only the essential technologies required for operation and for remembering basic preferences. No optional audience-measurement or advertising cookies are active on the public website. If such a tool is added, a separate choice will be requested before it is used. The Cookies link in the site footer presents the current status of these technologies.

Sharing and Providers

Information is not sold. It may be shared with providers needed for the service used, such as hosting, the secure database, AWS S3, AWS Textract, the email service configured by the business and Stripe for card payments. For an Interac e-transfer, our team uses the invoice code and the received payment details to match the payment to the right invoice. Do not include sensitive banking information in the transfer message. Necessary payment and invoice data are sent to the relevant provider; the sharing link and consent history are not added to the payment request.

Some providers may process or store data outside Quebec or Canada. Before entrusting personal information to a provider or communicating it outside Quebec, Chez Marie Pou evaluates the information, purposes, safeguards and associated risks.

Security

Access to the client and business areas is password protected. Private files are not public, technical keys are not embedded in the client application and communications must use HTTPS in production.

The application also applies measures such as HSTS, a content security policy, frame blocking, login attempt limits and role-based access restrictions.

Retention and Deletion

Retention depends on the type of information and its purpose. Account data is retained during the client relationship; orders, invoices, payments and accounting records are retained for the period required by tax, accounting and legal obligations; service messages are retained as needed to handle and document the request. Information is then securely deleted or anonymized.

Individual Rights

A client may request access to their information, correction, consent withdrawal or account deletion where permitted by law. The Privacy Officer verifies the requester's identity and responds within the time required by law. A refusal is explained in writing with the available recourse.

Privacy Complaints

A complaint may be sent to chezmariepou@gmail.com with the subject “Privacy complaint.” It should describe the situation and include contact information for a response. The Privacy Officer reviews the complaint, documents the steps taken and provides a response. A person who remains dissatisfied may also contact Quebec's Commission d'accès à l'information.

Privacy Incidents

Privacy incidents are documented and assessed. If an incident presents a serious risk of harm, affected individuals and applicable authorities are notified according to current laws.

Changes

This policy may be updated to reflect changes to the application or legal obligations. The update date indicates the most recent version.