Effective date: [2/11/2026]
Last updated: [2/11/2026]

1. Purpose of this Privacy Policy

This Privacy Policy describes how Judith & Charles (the “Site”, “we”, “us”, or “our”) collects, uses, discloses, and protects your personal information when you visit our website, use our services, make a purchase from www.judithandcharles.com, or otherwise communicate with us regarding the Site (collectively, the “Services”).

For the purposes of this Privacy Policy, “you” and “your” mean you as the user of the Services, whether you are a customer, a website visitor, or another individual whose personal information we collect in accordance with this Privacy Policy.

2. How We Collect and Use Your Personal Information

We collect personal information from you, from your use of the Services, and from third parties. We use this information to provide and improve the Services, comply with legal obligations, enforce our terms, and protect our rights and the rights of others.

Accuracy of Information
You are responsible for ensuring that the personal information you provide to us is accurate, complete, and up to date. You may update or correct your information at any time by contacting us or accessing your account, where available.

3. What Personal Information We Collect

Information We Collect Directly from You
This may include:

• Contact details (name, email address, phone number)
• Billing and shipping addresses
• Order and transaction information
• Account credentials
• Shopping preferences
• Customer support communications and content

Information We Collect About Your Usage
We automatically collect certain information when you interact with the Site, including:

• Device and browser information
• IP address
• Pages viewed, interactions, and navigation patterns
• Date and time of access

This data is collected through cookies and similar technologies.

Information We Obtain from Third Parties
We may receive personal information from vendors and service providers acting on our behalf, such as:

• E-commerce platforms (e.g., Shopify)
• Payment processors
• Shipping and logistics providers
• Advertising and analytics partners

4. How We Use Your Personal Information

We use personal information for the following purposes:

• Providing and delivering products and services
• Processing payments, shipping, returns, and refunds
• Managing customer accounts
• Communicating with you regarding orders, services, or inquiries
• Marketing and advertising (where permitted and consented)
• Improving the Site and Services
• Security, fraud prevention, and risk management
• Complying with legal and regulatory obligations

Marketing communications may include engagement tracking technologies (such as open and click tracking). You may opt out at any time.

5. Cookies and Similar Technologies

We use cookies and similar technologies to operate, analyze, and improve the Site and Services.

Most browsers accept cookies by default. You can remove or block cookies using your browser settings; however, some Site features may not function properly.
Our Site does not respond to “Do Not Track” signals. For more information, visit www.allaboutdnt.com.
For platform-specific cookie information, see Shopify’s cookie notices.

6. How We Disclose Personal Information

We may disclose personal information to:

• Vendors and service providers
• Marketing and analytics partners
• Affiliates
• Parties involved in business transactions
• Legal or regulatory authorities, where required by law
• Other parties when you consent or direct us to do so

Business Transfers
Personal information may be disclosed or transferred as part of a merger, acquisition, financing, restructuring, or sale of assets, subject to appropriate safeguards and applicable legal requirements.

7. User-Generated Content

Any content you submit publicly (such as reviews or comments) may be accessible to others. Please exercise caution when sharing personal information in public areas of the Site.

8. Third-Party Websites and Links

The Site may contain links to third-party websites or platforms. We are not responsible for their privacy practices, content, or security. Your interactions with third parties are governed by their respective privacy policies.

9. Children’s Data

Our Services are not intended for children. If we become aware that we have collected personal information from a child, we will take steps to delete it. Please contact us if you believe this has occurred.

10. Security and Retention of Your Information

We implement physical, technical, and administrative safeguards designed to protect personal information. However, no security system is infallible, and we cannot guarantee absolute security.

Personal information is retained only as long as necessary for the purposes described in this Policy or as required by law.

Data Retention

• Order and transaction data: 7 years (tax and legal obligations)
• Marketing data: until consent is withdrawn
• Account data: until account deletion or as required for Services or legal obligations

11. Your Rights

Subject to applicable law, your rights may include:

• Access to your personal information
• Correction of inaccurate or incomplete information
• Deletion or restriction of processing
• Data portability
• Withdrawal of consent
• Managing marketing communications
• Filing a complaint

To protect your privacy, we may require identity verification before responding to requests. We respond within legally required timeframes.

12. Automated Decision-Making & Profiling

We may use automated tools to support certain processing activities. Where decisions are made exclusively through automated processing using your personal information, we will inform you, provide meaningful information about the logic involved, and enable you to submit observations, request human review, or contest the decision, in accordance with Québec Law 25.

13. Compliance with Québec’s Law 25

We have implemented measures required under Québec’s Act respecting the protection of personal information in the private sector, including:

• Designation of a Privacy Officer
• Privacy impact assessments (PIAs)
• Governance policies and practices
• Confidentiality incident detection, notification, and record-keeping
• Notification of the Commission d’accès à l’information (CAI) and affected individuals where a risk of serious injury exists
• Recognition of rights to de-indexation, cessation of dissemination, and data portability (since September 22, 2024)

14. Compliance with Canada’s Anti-Spam Legislation (CASL)

We comply with CASL by:

• Obtaining express or implied consent
• Identifying ourselves in electronic messages
• Including a functional unsubscribe mechanism
• Processing unsubscribe requests within 10 business days
• Maintaining records of consent

15. International Users & Cross-Border Transfers

Personal information may be transferred outside your country of residence. For Québec residents, we assess cross-border transfers through PIAs and ensure appropriate safeguards. For EU/EEA/UK transfers, we rely on Standard Contractual Clauses or other lawful mechanisms.

16. Legal Basis for Processing

We process personal information based on:

• Contractual necessity
• Consent
• Legitimate interests

17. Complaints

If you have concerns regarding our handling of personal information, please contact us. If unresolved, you may lodge a complaint with the appropriate data protection authority. Québec residents may contact the Commission d’accès à l’information.

18. Contact & Privacy Officer

Email: customercare@judithandcharles.com

Mail: 9600 Meilleur, #730, Montréal, QC, H2N 2E3, Canada

Privacy Officer (Law 25): customercare@judithandcharles.com

19. Governing Law

This Privacy Policy is governed by the laws of the Province of Québec and the laws of Canada applicable therein.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The most current version will be posted on the Site and will indicate the date of the latest update.

Appendix

CASL Consent Snippets (Signup & Checkout)

Email Newsletter Signup

Consent language (near signup field):

By selecting “Subscribe”, you consent to receive commercial electronic messages from Judith & Charles at the email address provided, including information about products, services, promotions, and events. You may withdraw your consent at any time by using the unsubscribe link included in our emails or by contacting us at customercare@judithandcharles.com

Our mailing address is:
9600 Meilleur, #730, Montréal, QC, H2N 2E3, Canada.

Checkout – Optional Marketing Communications

Checkbox (unchecked by default):

☐ Email me updates and exclusive offers from Judith & Charles

Consent language (displayed near checkbox):

By checking this box, you consent to receive commercial electronic messages from Judith & Charles. You may unsubscribe at any time. For more information, please see our Privacy Policy.

SMS Marketing (If Applicable)

Consent language:

By entering your mobile number and clicking “Subscribe”, you consent to receive promotional SMS/MMS messages from Judith & Charles. Message and data rates may apply. You may opt out at any time by replying STOP. Consent is not a condition of purchase.

CASL References

Canadian Radio-television and Telecommunications Commission (CRTC) — Canada’s Anti-Spam Legislation (CASL): Act and Regulations

CRTC — Guidance on Implied Consent