This privacy policy describes how your personal information is collected, used, retained and shared when you visit or make a purchase on lifestories.store (the "site"). It complies with the Personal Information Protection and Electronic Documents Act (PIPEDA, federal Canada) and, because our organization is based in the province of Quebec, also with An Act respecting the protection of personal information in the private sector (Quebec's Law 25, formerly Bill 64).

Controller and Privacy Officer

The organization responsible for collecting and processing your information is:

Life Stories
945 Sabourin, Brossard, Quebec, J4X 2B7, Canada

The Privacy Officer for Life Stories is the founder, Jean-Sebastien Dufresne. For any question, request or complaint regarding your personal information, you may contact them at privacy@lifestories.store.

Personal information we collect

When you visit the site, we automatically collect certain information about your device, including information about your web browser, your IP address, your time zone, and some of the cookies installed on your device. As you browse the site, we collect information about the individual web pages or services you view, the websites or search terms that referred you to the site, and information about how you interact with the site. We refer to this automatically-collected information as "device information".

We collect device information using the following technologies:

Additionally, when you make or attempt to make a purchase on the site, even if you did not complete the checkout process, we may collect certain information about you including your name, postal address, email address, or phone number. We refer to this information as "order information".

You may also share personal information by answering the questions we send you, whether at the start of the service or in your answers to the weekly questions, including names or descriptions that could identify you. We refer to this as "content information".

When we talk about "personal information" in this policy, we mean device information, order information, and content information collectively.

Credit card information used to make payments on our site is never collected or stored by our services. Credit card transactions are processed through the online payment service Stripe. To learn how this external provider uses information, visit stripe.com/en-ca/privacy.

How we use your personal information

We distinguish uses that flow from the performance of the contract (necessary to provide you with the service) from those that require separate consent (targeted advertising, behavioural analytics).

Uses necessary to provide the service

Uses based on your consent (optional)

You may withdraw your consent at any time for optional uses, without this affecting your access to the service.

Retention periods

In accordance with PIPEDA principles and Quebec's Law 25, personal information is retained only for the time necessary for the purposes for which it was collected. The retention periods we apply are:

At the end of these periods, personal information is destroyed or irreversibly anonymized. You can request early deletion of your data at any time, subject to our legal obligations (notably tax obligations).

Your rights

Under PIPEDA and Quebec's Law 25, you have the following rights regarding your personal information:

To exercise any of these rights, write to us at privacy@lifestories.store, specifying the request and providing enough information to identify you. We will respond within a maximum of 30 days, as required by law.

If you are not satisfied with the handling of your request, you may file a complaint with the Office of the Privacy Commissioner of Canada or, for Quebec residents, with the Commission d'accès à l'information du Québec (CAI).

Privacy incidents

In accordance with Law 25 and PIPEDA, we maintain a register of confidentiality incidents (loss, unauthorized access, use, or disclosure of personal information). In the event of an incident presenting a serious risk of harm, we will promptly notify the Office of the Privacy Commissioner of Canada and, where applicable, the Commission d'accès à l'information du Québec, as well as the affected persons. The notice will include a description of the incident, the affected personal information, the measures taken to limit consequences, and recommendations for the affected persons.

Sharing your personal information

We share your personal information with certain third parties to help us provide the service. Our main sub-processors are:

Transfers outside Canada

Some of our sub-processors are located outside Canada, notably:

In accordance with Law 25 and PIPEDA, we conduct a Privacy Impact Assessment before transferring personal information outside Quebec/Canada. This assessment considers the sensitivity of the information, the purposes of the transfer, the protective measures applied by the recipient, and the applicable legal regime. All our sub-processors are contractually bound to protection obligations consistent with Canadian requirements.

Changes

We may update this privacy policy from time to time to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

Contact us

For any question, request to exercise your rights, or complaint about your personal information, contact the Privacy Officer: