Privacy policy

Summum Beauté International Inc., its subsidiaries and affiliated entities (the "Company") recognize the importance of protecting your personal information, i.e., any information about an individual that allows them to be identified directly or indirectly ("Personal Information"). This Privacy Policy and Protection of Personal Information (the "Policy") describes the measures implemented by the Company to ensure the protection of Personal Information collected, used, disclosed, processed, and retained as part of the operation of the Website (summum.com) and its operational activities.

By providing us with your Personal Information, registering, using our Website, or interacting with us, you consent to the collection, use, processing, and disclosure of your Personal Information in accordance with this Policy, which is subject to periodic revisions. Our Policy sets out our standards for collecting, using, disclosing, and retaining your Personal Information.

1. NATURE OF PERSONAL INFORMATION COLLECTED
For the purposes of this Policy, the collection of Personal Information includes information necessary for operational activities, including:

Your name;
Your postal address;
Your email address;
Your billing address;
Your phone number;
Your user ID;
Your password; and,
Information about your use of the Website.

We may collect Personal Information directly from you, through the Website, or through third parties.

a. Direct collection from you:
Most of the Personal Information collected comes directly from you, for example, when:

You contact us with any questions.
You browse the Website.
You participate in a contest or survey.
You apply for a job with us.
You request a quote or proposal.
You create a user account on the Website.
You place an order on the Website.
You inquire about our products and services.

We do not collect, store, or process your credit card information during purchase transactions on the Website. Credit card transactions are conducted directly on the platforms of financial institutions providing such services to us. However, we will use the last four digits of your credit card to associate a credit card transaction with your customer account. Additionally, we do not store your credit card information, although you may have the option to save such information in your user account. In this case, our financial institution will generate a token allowing you to make future transactions from your account.

b. Collection through the Website:
We may also collect information related to visitors to the Website or through our online services portal, including:

The identifier of the computer equipment used ("IP Address").
Location data.
Information about your device, operating system, or browser.
Preferences and browsing habits.

For users who create an account on the Website, we may also collect information related to login history, purchase history, browsing on Website pages, and data related to the use of our online portal.

c. Through third parties:
We may also collect Personal Information from our partners as part of the execution of a contract. We may have access to this Personal Information to carry out the missions entrusted to us by these partners. We retain the Personal Information transmitted by these partners solely for the purpose of performing our missions. We will process Personal Information only in accordance with the instructions of partners who have obtained the necessary consent from the individuals concerned for the transmission of their information.

2. METHODS OF COLLECTING PERSONAL INFORMATION
We may collect your Personal Information in various ways. For example:

By phone.
In person.
Using our forms.
Using our digital interfaces.
Through surveys.
Using commonly called “cookies.”
Using statistical models.

3. USE OF COOKIES
Our Website uses connection files commonly called "cookies." These are files installed on your computer's hard drive or browser to collect information such as your preferred language, browsing history, browser type and version. Generally, their purpose is to optimize your experience on our Website. For more information, please consult the Cookie Usage Statement.

You can configure your browser to limit or refuse cookies or be notified when a cookie is sent. Instructions for this are provided on each browser's website.
Additionally, we use analytics tools and other third-party technologies that use cookies, such as:

Google Analytics for obtaining Website analytics statistics.

4. YOUR CONSENT

a. Obtaining your consent:
We process your Personal Information with your consent or as permitted or required by law. How we obtain your consent depends on the circumstances and the sensitivity of the information collected. Generally, we will ask for your consent at the time of collecting your Personal Information. We commit to collecting, using, and disclosing your Personal Information only for the purposes specified at the time of collection, if applicable. However, if you provide us with Personal Information about someone other than yourself, it is your responsibility to obtain that person's consent to allow us to process their information in accordance with this Policy.

b. Examples of the use of your Personal Information:
Here are some examples of how we may use your Personal Information, without limitation:

Manage inquiries about our products and services.
Personalize and adapt the browsing experience on the Website.
Evaluate an application for a position listed on the Website.
Comply with legal and regulatory obligations.
Confirm the identity of individuals.
Verify the accuracy of Personal Information and update it.
Associate Personal Information with an order placed on the Website, for example, your order number, the number of packages, the weight of the packages, the recipient's address, and other information related to your order.
Improve the online shopping experience, provide relevant information about our products and services, or make recommendations to users.
Create or log in to the Website, conduct searches on the Website, or add items to a shopping cart.
Survey users, offer contests, or promotions.
Interact with our customer service.

c. Cases where your consent will not be required:
We commit to not sharing Personal Information with third parties without your consent, except in the following cases:

Under applicable laws, including laws outside your country of residence, particularly to comply with a legal process or respond to requests from public and governmental authorities.
When required for any legal proceedings.
To protect our activities and employees.
To protect our rights, safety, or property and/or those of our employees or personnel.
To protect your rights and safety.
As part of a business transaction, such as in the event of a reorganization, merger, sale, assignment, transfer, or other disposition of all or part of our business or other assets, as permitted by law.

5. ACCESS AND DISCLOSURE OF PERSONAL INFORMATION

a. Employees:
Personal Information is disclosed and accessible to our employees who reasonably need access to it to perform their duties and achieve the objectives of this Policy. The principle of least privilege is followed in granting access to Personal Information based on the role and responsibilities of employees.

b. Third parties:
We do not disclose your Personal Information to third parties. We may communicate your Personal Information to third parties as necessary to carry out a transaction you have authorized, fulfill our obligations, or act within the scope of our operational activities.

We may allow third parties access to your Personal Information, including our partners, service providers, and independent consultants. In this case, we take steps to ensure that the rules outlined in this Policy are followed, and we require service providers to maintain the confidentiality of your Personal Information and ensure its security. We also require them to use your Personal Information only for the purposes for which they were provided. When our service providers no longer need your Personal Information for limited purposes, we require them to destroy it.

For transparency, below is a list of categories of third parties that may process your Personal Information:

Our employees or designated representatives may use this information for statistical analysis and report generation.
Our service providers who help manage our computer systems or provide platforms and portals for administration.
Government and other law enforcement agencies under applicable laws.
Our advisors and professional services firms.
Our marketing, webinar, and customer satisfaction service providers, acting on our behalf and facilitating online events, providing marketing communications, and collecting customer feedback on our service levels.
Our service providers delivering or transporting products you may purchase on the Website.
Our service providers providing digital advertising services, such as Google Ads, Meta, or Pelmorex.

6. STORAGE OF PERSONAL INFORMATION
Your Personal Information will be stored on servers located in Quebec or Canada as far as possible. It is possible that the communication of Personal Information to certain technology solution providers may result in their transfer outside Quebec. In such cases, we:

Conduct necessary risk analyses related to the protection of personal information.
Validate in advance the applicable privacy laws and practices in the targeted jurisdiction.
Take reasonable and necessary steps to offer adequate protection for your Personal Information.

7. RETENTION AND DESTRUCTION OF PERSONAL INFORMATION
We have implemented measures to comply with our obligations to retain and destroy Personal Information. Personal Information will not be retained beyond what is necessary to achieve the purposes for which it was collected. Notwithstanding the above, we will retain your Personal Information when such retention is required to comply with applicable legal obligations, beyond those specific to the protection of Personal Information.

8. MEASURES TO PROTECT PERSONAL INFORMATION
We have implemented physical, organizational, contractual, and technological security measures to adequately protect your Personal Information against theft, loss, unauthorized access, unauthorized transfer, unauthorized copying, or alteration. Additionally, our employees are bound by confidentiality agreements and undergo regular training on information security and the protection of Personal Information. We take reasonable steps to ensure that our computer systems comply with industry-recommended security frameworks and protocols.

9. YOUR RIGHTS
As an individual whose Personal Information has been collected, you can exercise the following rights:

Right to access, correct, or complete your Personal Information:
We make reasonable efforts to ensure that the Personal Information we collect is accurate and complete for the purposes for which it is used. You can request access to your Personal Information, verify its accuracy, and modify it if necessary, subject to legal exceptions.
Right to withdraw your consent:
You can withdraw your consent for the use of your Personal Information for purposes that are not essential for the management and administration of our products and services, our operational activities, our legitimate interest, or to comply with the law.
Right to erasure:
You can request the deletion of outdated or unnecessary Personal Information that is not justified by the purpose of the file.
Right to data portability:
Unless it poses serious practical difficulties, you have the right to receive your Personal Information in a structured and commonly used format. We may also, at your request, transfer your Personal Information to any other person or organization.
Right to be informed about automated decision-making:
In some cases, you can request information about the use of any automated decision-making system and its impact on you. For example, you have the right to request the reasons behind an automated decision or to present your observations to a member of our team or customer service.
Right to file a complaint:
Any questions about your Personal Information or complaints arising from non-compliance with the principles outlined in this Policy should be addressed to the Personal Information Protection Officer, whose contact details are provided at the bottom of this page.

10. THIRD-PARTY SERVICES
This Policy does not extend to sites, products, or services provided by third parties. We assume no responsibility for the privacy practices of these third parties, and we encourage you to review their privacy policies before using their websites, products, or services. For example, our social media tools such as Facebook, Twitter, YouTube, and Instagram widgets are hosted by third parties. Your use of these tools is subject to the policies of the companies providing them.

11. MINORS
Minors are not allowed to use the Website. Individuals under 18 years old can only use the Website with the consent of their parents or guardians. If we collect or believe we have collected Personal Information from minors without parental or guardian consent, we will do our best to delete such Personal Information as soon as possible.

12. POLICY UPDATE
This Policy may be updated from time to time to maintain compliance with the law and to reflect any changes in the process of collecting Personal Information. We recommend that our users periodically check the Policy to ensure they are informed of any updates.

13. CONTACT
The Personal Information Protection Officer is responsible for ensuring the protection of your personal information, i.e., taking all necessary measures to guarantee your rights, as described in the previous sections. The contact details of our Personal Information Protection Officer are as follows:

Name: David Grenier
Title: General Manager
Company: Summum Beauté International Inc
Address: 6300, Auteuil Avenue, suite 108, Brossard (Québec) Canada J4Z 3P2
Phone: 450-678-3231
Email: davidgrenier@summum.com

Any request must be submitted to the Personal Information Protection Officer in matters of confidentiality. It will then be processed as soon as possible, or at the latest within thirty (30) days following the date of receipt of your written request.