Privacy Policy (Quebec Law 25)

1. Person in charge of personal information protection

Name / function: SamSwell Privacy Officer

Contact: info@samswell.com

2. Information we collect

We only collect information required to process orders: product name, amount, payment email address (when provided by Stripe), and minimal technical information.

3. Purposes of use

• Process and confirm orders
• Ensure secure payment processing
• Maintain accounting and operational records
• Respond to customer requests

4. Providers and transfers outside Quebec

We use third-party providers: Stripe (payments), Supabase (database), and Render (hosting). Some data may be processed outside Quebec. We apply reasonable security and access-control measures.

5. Retention

Order data is kept only for the period required by legal, tax, and administrative obligations, then deleted or anonymized according to internal practices.

6. Your rights

Under Quebec Law 25, you may request access, correction, or deletion of personal information, subject to applicable legal obligations.

To exercise these rights, write to: info@samswell.com

7. Privacy incidents

If an incident creates a risk of serious harm, we follow Law 25 notification obligations and maintain an incident register.

8. Access, correction, and deletion requests

You can submit a request directly from your account in the "Privacy controls" section (data export and deletion request), or by writing to info@samswell.com. We will respond within the timelines required by applicable law.