1. Person in Charge of Processing
This privacy policy applies to the website and services operated by Anne-Marie Massage & Yoga (referred to in this policy as "we," "us," or "our"). As a Quebec-based business, we are subject to Quebec Law 25 — formally known as An Act to modernize legislative provisions as regards the protection of personal information (S.Q. 2021, c. 25) — and we are committed to handling your personal information responsibly and transparently in accordance with its requirements.
This policy explains what personal information we collect, why we collect it, who we share it with, how long we keep it, and what rights you have over it.
2. Personal Information Collected
We collect personal information about you in the following categories, depending on how you interact with our website and services.
2.1 Contact and Identity Information
- First and last name
- Email address
- Phone number
- Mailing or billing address
2.2 Transaction and E-Commerce Information
- Order history and purchase details
- Payment information (processed securely through our payment provider; we do not store full card numbers)
- Shipping and billing address
- Transaction identifiers
2.3 Navigation and Device Information
- IP address
- Device and browser identifiers
- Pages visited and time spent on each page
- Navigation behavior (clicks, scroll depth, referral source)
- Approximate geographic location (derived from IP address)
- Advertising identifiers
2.4 Communication Preferences
- Newsletter subscription status
- Email engagement data (opens, clicks)
- Communication preferences you have indicated
2.5 Consent Records
- Your cookie consent choices and the date/time they were recorded (managed by Moelleux, operated by Horizon-Cumulus)
2.6 Form Submissions
- Any information you voluntarily submit through contact forms, booking requests, or inquiry forms on our site
3. Purposes of Processing
We use your personal information only for the purposes described below. For each purpose, we identify the legal basis under Quebec Law 25.
3.1 Operating the Website and Processing Orders
We use your contact, identity, and transaction information to process your purchases, manage your account, fulfill orders, and provide customer support through our WooCommerce-powered store. Legal basis: performance of a contract (the transaction you initiate with us).
3.2 Audience Measurement and Site Improvement
We use Google Analytics 4 and WooCommerce Analytics to understand how visitors use our site — which pages are popular, how long sessions last, and how our store performs. This helps us improve your experience. Data collected includes device identifiers, IP address, pages visited, session duration, navigation behavior, approximate location, and transaction data. Legal basis: your consent, which you provide through our cookie consent banner (Moelleux).
3.3 Targeted Advertising and Remarketing
We use the Meta Pixel (Facebook) to measure the effectiveness of our advertising campaigns and to show relevant ads to people who have visited our site. This involves collecting device identifiers, IP address, pages visited, navigation behavior, advertising identifiers, transaction data, and social identifiers. Legal basis: your consent, which you provide through our cookie consent banner.
3.4 Email Marketing and Newsletter
If you subscribe to our newsletter, we use Mailchimp to send you updates about our services, promotions, and wellness content. Mailchimp collects your email address and communication preferences to manage your subscription and segment our contact list. Legal basis: your consent, given at the time of subscription. You may withdraw this consent at any time by clicking "unsubscribe" in any email we send you.
3.5 Security and Fraud Prevention
We use Google reCAPTCHA on our forms to prevent automated abuse and spam submissions. This service collects device identifiers, IP address, and navigation behavior to distinguish human users from bots. Legal basis: our legitimate interest in protecting the integrity and security of our website and your data.
3.6 Website Display
We use Google Fonts to render the typography on our website correctly. When your browser loads our pages, it may contact Google's servers to retrieve font files, which involves transmitting your IP address. Legal basis: our legitimate interest in providing a properly rendered, accessible website.
3.7 Consent Management
We use Moelleux (operated by Horizon-Cumulus, Joliette, Quebec) to record and manage your cookie consent preferences. A cookie named moelleux_{site_key} is stored in your browser for up to 13 months to remember your choices. Consent records and this privacy policy are hosted in Quebec (OVH, Beauharnois). Legal basis: legal obligation under Quebec Law 25 to document consent.
4. Third Parties and Processors
We work with the following third-party service providers. Each one has access only to the personal information necessary to perform its specific function.
| Service | Purpose | Category | Transfer Outside Quebec |
|---|---|---|---|
| Moelleux (by Horizon-Cumulus) | Cookie consent management and privacy policy hosting | Essential | No — hosted in Quebec (OVH Beauharnois) |
| Google Analytics 4 | Audience measurement and visitor behavior analysis | Analytics | Yes — United States |
| WooCommerce Analytics | E-commerce sales performance and customer behavior analysis | Analytics | Yes — United States |
| Meta Pixel (Facebook) | Conversion tracking and targeted advertising remarketing | Marketing | Yes — United States |
| Mailchimp | Email marketing campaign management and contact segmentation | Marketing | Yes — United States |
| Google Fonts | Web font delivery for site display | Functional | Yes — United States |
| Google reCAPTCHA | Security verification to prevent automated abuse | Functional | Yes — United States |
We do not sell your personal information to any third party.
5. Transfers Outside Quebec
Several of the third-party services we use are operated by companies based in the United States. When these services process your personal information, your data may be transferred to and stored in the United States, which has different privacy laws than Quebec.
The services that involve transfers outside Quebec are:
- Google Analytics 4 (United States) — your device identifiers, IP address, pages visited, session duration, navigation behavior, and approximate location are processed by Google LLC.
- WooCommerce Analytics (United States) — your device identifiers, IP address, pages visited, session duration, navigation behavior, and transaction data are processed by Automattic Inc.
- Meta Pixel (Facebook) (United States) — your device identifiers, IP address, pages visited, navigation behavior, advertising identifiers, transaction data, and social identifiers are processed by Meta Platforms, Inc.
- Mailchimp (United States) — your email address, communication preferences, and subscription data are processed by The Rocket Science Group LLC (Intuit).
- Google Fonts (United States) — your IP address is transmitted to Google LLC's servers when fonts are loaded.
- Google reCAPTCHA (United States) — your device identifiers, IP address, and navigation behavior are processed by Google LLC.
In accordance with section 17 of Quebec Law 25, before communicating personal information outside Quebec, we assess whether the destination jurisdiction offers an adequate level of protection. Each of the providers listed above is subject to contractual safeguards (such as standard contractual clauses or data processing agreements) that require them to protect your personal information in a manner consistent with Quebec standards.
A Privacy Impact Assessment (PIA) — known in French as an évaluation des facteurs relatifs à la vie privée (EFVP) — has been or will be conducted for transfers to these third-party processors, as required by Quebec Law 25. These assessments evaluate the risks associated with cross-border data flows and the adequacy of protective measures in place.
By contrast, our consent management platform (Moelleux) and our core website hosting are operated entirely within Quebec by Horizon-Cumulus (Joliette, Quebec), with data stored at OVH's Beauharnois facility. No personal information processed by these components leaves Quebec.
6. Retention Period
We keep your personal information only as long as necessary for the purpose for which it was collected, or as required by law. The table below outlines our standard retention periods.
| Data Type | Retention Period | Justification |
|---|---|---|
| Customer account and order information | 7 years after the last transaction | Legal obligation under Quebec tax and accounting laws |
| Transaction and payment records | 7 years | Legal obligation (Quebec Act respecting the legal publicity of enterprises and tax requirements) |
| Newsletter subscription data | Until you unsubscribe, then deleted within 30 days | Consent-based processing; retention ends when consent is withdrawn |
| Contact form submissions | 2 years from the date of submission | Legitimate interest in maintaining a record of communications |
| Analytics data (Google Analytics 4, WooCommerce Analytics) | Up to 14 months (Google default); session-level data aggregated and anonymized thereafter | Consent-based; limited to what is necessary for audience analysis |
| Advertising and remarketing data (Meta Pixel) | As determined by Meta's data retention policies (typically up to 180 days for event data) | Consent-based; governed by Meta's data processing terms |
| Cookie consent records (Moelleux) | 13 months from the date of consent | Legal obligation to document consent under Quebec Law 25 |
| Security logs and reCAPTCHA data | Up to 90 days | Legitimate interest in detecting and preventing abuse |
Once the applicable retention period expires, personal information is securely deleted or anonymized so that it can no longer be linked to you.
7. Your Rights
Under Quebec Law 25, you have the following rights regarding your personal information. To exercise any of these rights, please contact us using the information in Section 8. We will respond within 30 days of receiving your request.
7.1 Right of Access
You have the right to ask us whether we hold personal information about you, and to receive a copy of that information in a clear and understandable format.
7.2 Right of Rectification
If any personal information we hold about you is inaccurate, incomplete, or ambiguous, you have the right to ask us to correct it. If we have shared that information with third parties, we will notify them of the correction where feasible.
7.3 Right of Erasure
You have the right to ask us to delete personal information that was collected without a valid legal basis, or that is no longer necessary for the purpose for which it was collected. Please note that we may be required to retain certain information to comply with legal obligations (for example, accounting records).
7.4 Right to Data Portability
You have the right to receive the personal information you have provided to us in a structured, commonly used, and machine-readable format, and to request that we transmit it to another organization where technically feasible.
7.5 Right to Withdraw Consent
Where we process your personal information based on your consent (for example, for analytics cookies, marketing cookies, or newsletter communications), you may withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. You can manage your cookie preferences at any time through our consent banner (powered by Moelleux), and you can unsubscribe from our newsletter by clicking the "unsubscribe" link in any email we send you.
7.6 Right to File a Complaint
If you believe that we have not handled your personal information in accordance with Quebec Law 25, you have the right to file a complaint with the Quebec Information Access Commission (CAI). You can reach the CAI at www.cai.gouv.qc.ca.
8. Person Responsible for the Protection of Personal Information
In accordance with section 3.1 of Quebec Law 25, we have designated a Person responsible for the protection of personal information who oversees our compliance with the Act and handles all requests and concerns related to personal information.
- Name: Ann-Marie Provencher
- Title: propriétaire
- Email: aumloveyoga@gmail.com
- Phone: 514 880-4832
You may contact our Person responsible for the protection of personal information at any time to exercise your rights, ask questions about this policy, or raise a concern about how your personal information is being handled. We are committed to responding to all requests within 30 days, as required by Quebec Law 25.
9. Effective Date and Versioning
This privacy policy takes effect on 3 juin 2026 and replaces any prior version.
Version: 1
We may update this policy from time to time to reflect changes in our practices, the services we use, or applicable law. When we make material changes, we will update the effective date above and, where appropriate, notify you by email or through a notice on our website. We encourage you to review this policy periodically.