Boutique HWL is committed to protecting your personal information with the highest standard of care, in compliance with applicable laws in Quebec and Canada. This Privacy Policy explains what data we collect, why we collect it, and how we protect it.

1. Purpose of this Privacy Policy

The purpose of this Privacy Policy is to inform users of our site about the personal data we collect and the following:

• The personal data we collect
• How the collected data is used
• Who has access to the collected data
• The rights of site users
• The cookie policy of the site

This policy applies in addition to the general Terms & Conditions of our site.

2. Scope

This policy applies to all visitors and customers of https://hwlmaison.com, regardless of country of residence. Boutique HWL is a company registered in Quebec, Canada.

3. Applicable Laws

This policy is designed to comply with the following legislation:

• Canada: Personal Information Protection and Electronic Documents Act (PIPEDA)
• Quebec: Law 25 — An Act to Modernize Legislative Provisions as regards the Protection of Personal Information (in force since September 2022)
• European Union: General Data Protection Regulation (GDPR). In the event of any inconsistency with other provisions, the GDPR prevails for EU residents.
• California: California Consumer Privacy Act (CCPA). In the event of inconsistency, the applicable state law prevails.

4. Consent

By using our site, users agree to:

• The terms of this Privacy Policy
• The collection, use, and retention of the data described herein

Where required by law, explicit consent will be requested before any non-essential data is collected.

5. Information We Collect

5.1 Information collected automatically

When you visit https://hwlmaison.com, the following data may be collected automatically:

• IP address (anonymized via GA4)
• Approximate location
• Browser type, device, and operating system
• Pages visited, visit duration, and traffic source (GA4, with prior consent)
• Links clicked on the site
• Order session data (SureCart)

5.2 Information you provide directly

The following data may be collected through forms or transactions on our site:

• First and last name
• Email address
• Shipping and billing address
• Phone number
• Payment information (processed securely via SureCart — Boutique HWL does not store card details)
• Order history
• Communications sent to boutique@hiyamwellness.com

We only collect data that is necessary for the purposes described in this policy.

6. How We Use Your Personal Data

We use your personal information for the following purposes only:

• Processing and shipping your orders
• Order-related communications (confirmation, shipping updates, after-sales service)
• Improving the user experience on our site (analytics, with consent)
• Compiling anonymized traffic statistics
• Compliance with legal and accounting obligations
• Fraud prevention

7. Legal Basis for Processing

Processing of your personal data is based on:

• (a) Performance of the sales contract
• (b) Your explicit consent for analytics cookies
• (c) Our legal obligations
• (d) Our legitimate interest in fraud prevention

8. Who We Share Your Data With

8.1 Employees

Access to personal data is granted to employees on a need-to-know basis only, according to their professional responsibilities.

8.2 Service providers (third parties)

Boutique HWL does not sell your personal information. Your data may be shared only with:

• SureCart — order and payment processing platform
• Google LLC — analytics (GA4), anonymized data only
• Carriers (Canada Post, UPS, DHL, or equivalent) — for delivery purposes only
• Accountant or auditor — as required by our legal obligations

All service providers are bound by confidentiality obligations equivalent to our own standards. Boutique HWL is not responsible for the privacy policies of linked third-party sites.

8.3 Other disclosures

Your data may also be disclosed:

• If required by law or court order
• To protect our legal rights
• To a potential buyer of the business, subject to equivalent confidentiality obligations

9. International Data Transfers

Some providers (notably Google via GA4) process data in the United States. These transfers are governed by standard contractual clauses that meet the requirements of Quebec Law 25.

10. Data Retention

• Order data: retained for 7 years in accordance with Quebec tax obligations
• Analytics data (GA4): retained for a maximum of 14 months
• SureCart session data: expires within 30 days

All other data is retained only as long as necessary for the purposes for which it was collected, and is then securely deleted.

11. How We Protect Your Data

Boutique HWL implements appropriate technical and organizational measures to protect your data, including HTTPS encryption, restricted data access, and PCI-DSS certified providers for payment processing.

While we take reasonable precautions, no method of transmission over the internet is completely secure. In the event of a data breach, we will notify affected users in accordance with applicable law.

12. Minors

The Boutique HWL store is not directed at individuals under 16 years of age (under 15 in the EU). Boutique HWL does not knowingly collect personal information from minors. Parental or guardian consent is required for the collection of personal data from minors where applicable by law.

13. Your Rights as a User

Under Quebec Law 25 (and equivalent legislation in your jurisdiction), you have the following rights with respect to your personal information:

• Right of access to your personal information
• Right to rectification of inaccurate or incomplete information
• Right to erasure (subject to legal obligations)
• Right to data portability
• Right to object to or restrict processing
• Right to withdraw consent for marketing or analytics purposes at any time
• Right to file a complaint with the Commission d’accès à l’information (CAI): cai.gouv.qc.ca

To exercise any of these rights, please contact our Data Protection Officer at the address below. Boutique HWL will respond within 30 days.

14. Cookie Policy Summary

A cookie is a small file that collects data about a user’s browsing. For full details, please refer to our Cookie Policy available on https://hwlmaison.com.

Types of cookies used:

• Functional cookies: remember your preferences and settings
• Analytics cookies: analyze your browsing behaviour (consent required)
• Targeting cookies: adapt promotional content to your interests

You may disable cookies through your browser settings, but this may affect certain site features.

15. Policy Updates

This policy may be updated periodically to remain compliant with applicable law or to reflect changes to our practices. The date of the most recent update appears at the top of this document. We encourage users to review this policy regularly. Any material changes will be communicated by email to registered customers.

16. Contact — Data Protection Officer

For any questions, requests, or concerns regarding this policy or your personal data:

Boutique HWL

1235 rue notre dame unité 144, Montréal, Qc, H3C 0B1 Canada

boutique@hiyamwellness.com