Privacy policy | Pagelys

1. Scope of this policy

This policy applies to personal information processed by Pagelys through its website, forms, store creation and management, orders, communications with users and related services.

Pagelys operates in Québec and aims to comply with the Act respecting the protection of personal information in the private sector, as modernized by Law 25. When federal law applies to an activity or an interprovincial or international flow of information, Pagelys also takes into account the applicable requirements of the LPRPDE (PIPEDA).

2. Personal information we may collect

Depending on how you use Pagelys, we may collect, among other things:

Identity and contact informationName, first name, email address, phone number, mailing address and other contact information provided voluntarily.

Account and authenticationAccount identifiers, password in protected or hashed form, account status and information required for login security.

Business and storeBusiness name, city, category, description, logo, photos, products, prices, inventory, business contact details and storefront information.

Orders and transactionsProducts ordered, amounts, order status, delivery, billing and payment references. Pagelys should not retain a full payment card number when payment is processed by a specialized provider.

CommunicationsMessages sent to Pagelys, support requests, complaints, comments and communication history necessary to provide the service.

Technical dataIP address, device type, browser, technical logs, pages viewed, access date and time, and information required for service security and operation.

Pagelys seeks to limit collection to information reasonably necessary for the identified purposes. Please do not send sensitive information that is not necessary for the service.

3. Why we use this information

Information may be used to:

create, administer and secure a Pagelys account;
create, verify, publish and manage a store;
display products, categories, cities and business information;
process and track orders and transactions;
provide customer support and respond to requests;
prevent fraud, abuse, unauthorized access and security incidents;
maintain, diagnose and improve platform operation;
comply with legal, tax, accounting or regulatory obligations;
send service communications necessary for an account or transaction;
send commercial communications where permitted by law and where the required consent has been obtained.

4. Consent and control

When consent is required, Pagelys seeks to obtain clear, free and informed consent for specific purposes. The level of consent requested depends on the nature and sensitivity of the information and the context.

You may withdraw consent for optional use, subject to applicable legal or contractual restrictions and a reasonable time to process the request. Withdrawing consent may make some features unavailable.

Commercial communications

Promotional emails should include an unsubscribe mechanism when required by law. Operational communications necessary for an account, an order, security or performance of a service may continue to be sent.

5. Cookies and other technologies

Pagelys may use cookies, technical logs and similar technologies to maintain a session, remember preferences, protect the service, measure its operation and understand use of the platform.

Strictly necessary cookies may be required for operation and security of the service. When a technology enables identification, location or profiling and prior consent is required, it should not be enabled by default without the appropriate user action.

If Pagelys adds non-essential advertising, profiling, retargeting or analytics tools, an appropriate consent mechanism must be configured and this policy must be updated.

6. Profiling and automated decisions

Pagelys may use certain data to organize or personalize content display, for example based on a city, category or search criteria provided by the user.

Pagelys should not make decisions with legal or similarly significant effects on a person based exclusively on automated processing without providing the information and review options required by law.

If an identification, location or profiling feature is used, users will be informed about the technology and the means available to enable or disable it when required.

7. Service providers and disclosures

Pagelys may entrust certain functions to service providers acting on its behalf, for example hosting, infrastructure, security, email delivery, payment processing, fraud prevention or technical support.

These providers should receive only the information necessary for their mandate and must be governed by appropriate contractual and security measures.

Payments

When a payment is processed by a specialized provider such as Stripe or another payment processor actually used by Pagelys, payment information is processed under that provider’s terms and policies. Pagelys may receive transaction identifiers, payment statuses and billing information necessary to manage the transaction.

Other permitted disclosures

Information may also be disclosed when permitted or required by law, including to comply with a valid order, prevent fraud or protect the rights, security and integrity of the service and its users.

8. Hosting or processing outside Quebec

Some technology providers may process or store information outside Québec or Canada. In that case, the information may be subject to the laws of the jurisdiction where it is processed.

Before disclosing personal information outside Québec when required by law, Pagelys must assess privacy-related factors and ensure the information receives adequate protection, including through appropriate contractual measures.

9. Retention and destruction

Pagelys retains personal information only for the period reasonably necessary to fulfill the purposes for which it was collected, meet legal obligations, resolve disputes, prevent fraud and maintain security.

When the purposes have been fulfilled and no legal obligation justifies continued retention, personal information is securely destroyed or anonymized in accordance with applicable requirements.

Pagelys must maintain internal retention and destruction rules appropriate to the nature of the information and its activities.

10. Security measures

Pagelys applies reasonable administrative, technical and physical safeguards based on the sensitivity, quantity, purpose and medium of the information processed. These measures may include access controls, authentication, communication encryption, logging, backups, monitoring and privilege limitation.

No system is perfectly secure. In the event of a privacy incident presenting a risk of serious harm, Pagelys will take the measures required by law, including risk assessment, maintaining an incident register and, when required, notifying affected individuals and the Commission d’accès à l’information du Québec.

11. Your rights regarding your information

Subject to the conditions and exceptions provided by law, you may request, among other things:

to know whether Pagelys holds personal information about you;
to access personal information concerning you;
to correct inaccurate, incomplete or ambiguous information;
to withdraw consent where it is the applicable basis for optional use;
to obtain, where provided by law, certain computerized personal information in a structured and commonly used technological format;
to request cessation of dissemination or de-indexing of certain information where applicable legal criteria are met;
to obtain information about the use and disclosure of your information, within the limits provided by law.

A reasonable verification of your identity may be requested before responding to a request. Pagelys will respond within the time limits provided by applicable law.

12. Privacy questions and complaints

Any question, request to exercise rights or complaint concerning personal information protection may be sent to the person responsible for personal information protection identified at the end of this policy.

Pagelys must maintain an internal process to receive, document, review and handle complaints related to personal information protection.

You may also contact the Commission d’accès à l’information du Québec for information about remedies available under Québec law.

13. Minors

Pagelys is not designed as a service for young children. When parental or other specific consent is required by law to collect information about a minor, Pagelys must obtain that consent before the relevant collection.

14. Changes to this policy

Pagelys may change this policy to reflect changes to its services, practices, providers or legal requirements. The current version will be published on this page with its effective date.

When required by law, affected individuals will be notified of any material change by an appropriate means.

15. Person responsible for the protection of personal information

The person with the highest authority within the organization is responsible for personal information protection unless that function has been delegated in writing in accordance with the law.

⚖

Person responsible for the protection of personal information

Email : TO BE COMPLETED

Business address: TO BE COMPLETED

Pagelys contact form →

Must be completed before publication: replace “TO BE COMPLETED” with the actual contact details of the person responsible for personal information protection.