In accordance with the law, Santé en Vrac has designated a person responsible for the protection of personal information. This person ensures compliance with this policy and responds to any questions or requests regarding your data.

We collect only the personal information necessary for the purposes determined at the time of collection. The types of information collected may include:

Your personal information is collected and used for the following purposes:

• Creating and managing your customer account
• Processing your orders, deliveries and returns
• Administering the ÉcoPoints Prestige Program (points accumulation, birthday discount, Passe-Partage)
• Communicating with you regarding your purchases or account
• Sending promotional communications and newsletters, with your consent
• Improving our website, products and services
• Responding to your questions and requests
• Complying with our legal and regulatory obligations

We will never collect more information than is necessary for these purposes.

We collect your personal information with your free, informed and specific consent. Depending on the context, your consent may be explicit (for example, by checking a box to receive our newsletter) or implicit (for example, by providing your contact information to complete a purchase).

You may withdraw your consent at any time, subject to certain legal or contractual conditions. Withdrawing your consent may limit our ability to provide you with certain services. To withdraw your consent, contact us using the information provided in section 1.

The santeenvrac.com website uses cookies to ensure the proper functioning of the site and to improve your browsing experience.

In accordance with the law, tracking and profiling technologies are disabled by default on our site. You can manage your cookie preferences at any time through the cookie management banner displayed during your first visit or in your browser settings.

Santé en Vrac does not sell, rent or share your personal information with third parties for commercial or advertising purposes.

Your information may be shared with service providers acting on our behalf (web hosting, payment processing, order shipping), to the extent necessary for the performance of their functions. These providers are required to maintain the confidentiality of your data and to use it only for the purposes for which it was shared.

Your information may also be disclosed if required by law or to protect our rights.

We implement reasonable security measures appropriate to the sensitivity of the information collected, including:

• Encryption of communications via SSL/TLS protocol (HTTPS) for all transmissions of sensitive data
• Server protection through firewall systems
• Restricted access to personal information, limited to authorized personnel who require it in the course of their duties
• Awareness training for our team on data protection best practices

Despite these precautions, no method of electronic transmission or storage is entirely secure. In the event of a privacy incident, we will act in accordance with the procedures set out by law (see section 10).

Your personal information is retained for as long as necessary to fulfill the purposes for which it was collected, or to meet our legal obligations (particularly in tax and accounting matters).

When your information is no longer needed, it is securely destroyed or anonymized in accordance with generally recognized best practices and legal requirements.

Under applicable law, you have the following rights:

To exercise any of these rights, send your request by email to info@santeenvrac.com. We will process your request within 30 days of receipt.

In the event of a privacy incident involving your personal information (unauthorized access, unauthorized use or disclosure, loss), Santé en Vrac commits to:

• Promptly taking reasonable measures to reduce the risk of harm
• Notifying the Commission d'accès à l'information du Québec if the incident presents a risk of serious harm
• Notifying you of the incident if it presents a risk of serious harm to you
• Recording the incident in our privacy incident register

Our website may contain links to websites operated by third parties. These sites have their own privacy policies, and we have no control over their personal information protection practices. We encourage you to review the privacy policies of these sites before providing them with your information.

In accordance with the law, the privacy settings of our website and technological services are set, by default, to the highest level of confidentiality, without any action required on your part. No tracking, profiling or non-essential data collection technology is activated without your prior consent.

Santé en Vrac reserves the right to modify this privacy policy at any time in order to keep it compliant with applicable legislation and our practices. In the event of a change, the updated version will be published on this page with the date of the last revision. We encourage you to check this page regularly.