Privacy policy
Quebec Law 25 compliance — This policy complies with An Act to modernize legislative provisions as regards the protection of personal information (Law 25).
Last updated: January 12, 2026
Privacy officer
Contact: info@esiva.ca, Quebec, Canada.
Our privacy officer ensures that company practices comply with Law 25 and other applicable laws.
Personal information collected
In the course of our e-commerce activities, we collect the following information:
Identity: first and last name, email address, phone number, mailing address.
Orders: purchase history, shipping address, product preferences.
Payments: processed by Stripe; card data is not stored; only a transaction ID is retained.
Technical: IP address (with consent), browser type, pages visited.
Purposes of collection
Process and ship your orders.
Communicate about your order.
Answer your questions.
Improve our site (with consent).
Marketing communications (with explicit consent).
Comply with our legal obligations.
Consent
In accordance with Law 25, we obtain your explicit, free, and informed consent before collecting your personal information for non-essential purposes.
Cookies: we use a granular consent system. Non-essential cookies are disabled by default until you accept them.
Essential cookies (always active, no prior consent required):
— esiva_session: shopping cart, session, and customer account login (maximum duration: 30 days).
— esiva_cookie_consent: stores your cookie consent choices.
Optional cookies (only with your consent): analytics, marketing, and personalization.
Your rights
Right of access: access your personal data.
Right of rectification: correct your information.
Right to portability: export your data.
Right to erasure: request deletion of your data.
To exercise these rights, contact info@esiva.ca. We respond within 30 days.
Data retention
Order data: 7 years (tax obligations).
Account data: until deletion + 30 days.
Marketing data: until consent is withdrawn.
Analytics data: 26 months maximum.
Security measures
SSL/TLS encryption for all communications.
Secure storage with restricted access.
Payments via Stripe (PCI-DSS compliant).
Secure authentication for customer accounts.
Contact and complaints
Ésiva — Email: info@esiva.ca
You may file a complaint with the Commission d’accès à l’information du Québec (CAI): https://www.cai.gouv.qc.ca/