Law 25 · Privacy Protection
Privacy Policy
Last updated: March 24, 2026
1. Our commitment
Impact Online ("we", "us", or "the Company") is committed to protecting the personal information it collects in the course of its activities, in accordance with the Act respecting the protection of personal information in the private sector (CQLR, c. P-39.1), as amended by Bill 64 (Law 25).
2. Privacy Officer
The person responsible for the protection of personal information within our organization is:
3. Personal information collected
When creating an account:
- First and last name
- Email address
- Store name
When using the service:
- Usage data and access logs
- IP address
- Device and browser information
- PrestaShop store connection data (URL, encrypted credentials)
Through cookies:
- Language preferences
- Session data
- Analytics data (if consent given)
4. Purposes of collection
- Account creation and management
- Service delivery (generating and managing online catalogues)
- Subscription-related communications
- Service improvement (with your consent)
- Compliance with legal obligations
5. Disclosure to third parties
We may share your personal information with the following third parties, only to the extent necessary to provide our services. We never sell your personal information.
| Third party | Purpose | Country |
|---|---|---|
| Clerk Inc. | Authentication and account management | United States |
| Cloud hosting provider | Application data storage | Canada |
| Payment processor | Transaction processing | Canada / United States |
6. Retention and destruction
We retain your personal information for as long as necessary for the purposes mentioned above, or as required by law:
- Account data: up to 30 days after account deletion
- Access logs: 12 months
- Analytics data: 26 months
Upon expiry of these periods, information is securely destroyed or anonymized.
7. Your rights
Under Law 25, you have the following rights with respect to your personal information:
| Right | What it means |
|---|---|
| Access | Obtain a copy of your personal information |
| Rectification | Have inaccurate or incomplete information corrected |
| Erasure | Request deletion of your personal information |
| Portability | Receive your data in a structured, machine-readable format |
| Withdrawal of consent | Withdraw your consent at any time, without penalty |
| Objection to profiling | Object to automated decisions made about you |
To exercise any of these rights, contact our Privacy Officer at privacy@impactonline.ca. We will respond within 30 days.
8. Cookies and similar technologies
Our site uses three categories of cookies:
Essential cookies
Required for site operation (session, language preferences). Cannot be disabled.
Analytics cookies
Help us understand how you use the site so we can improve it. Enabled only with your consent.
Marketing cookies
Used for personalized communications based on your interests. Enabled only with your consent.
Manage your preferences at any time:
9. Privacy incidents
In the event of a privacy incident presenting a serious risk of injury, we commit to:
- Notifying the Commission d'accès à l'information (CAI) within the prescribed timeframes
- Notifying the individuals concerned
- Recording the incident in our internal register
10. Changes to this policy
We may modify this policy at any time. The last updated date is shown at the top of this document. By continuing to use our services after any modification, you accept the updated policy.
11. Contact us
Impact Online
Email: privacy@impactonline.ca
Commission d'accès à l'information du Québec: www.cai.gouv.qc.ca