Privacy Policy

Our commitment

Mäké is committed to protecting your personal information in accordance with Québec Law 25, federal PIPEDA, and CASL. We collect only what is necessary, we keep it only as long as needed, and we never sell it.

Information we collect

Depending on how you interact with the site, we may collect:

• Email address and language preference (when you subscribe to our newsletter)
• Name, email, and message (when you use the contact form)
• Order data, shipping and billing addresses, and purchase history (Phase 2)
• Anonymised technical data (IP address, device type, pages visited) — only with your consent

Why we collect it

To respond to your requests, send the communications you have subscribed to, process orders (Phase 2), improve the site, and meet our legal and tax obligations.

Third parties with access to your information

The following processors may handle your information on our behalf, strictly within the scope of their services:

• Shopify Inc. (commerce and payment)
• Klaviyo, Inc. (newsletter)
• Resend (transactional email for the contact form)
• Google Analytics 4, Meta, TikTok (audience and campaign measurement — only with your consent)
• Microsoft Clarity (behavioural analytics — only with your consent)
• Shopify Oxygen (hosting)

Your rights

Under Law 25 and PIPEDA, you have the right to:

• access the personal information we hold about you
• have inaccurate information rectified
• request its erasure
• obtain it in a portable format
• object to its processing
• withdraw consent at any time

Retention

Newsletter data: until you unsubscribe, plus twelve months.

Contact-form requests: thirty-six months.

Order data: seven years (Canadian tax obligation).

Analytics data: twenty-six months maximum.

Cookies

We use cookies essential to the site’s operation and, with your consent, analytics and marketing cookies. See our Cookie Policy for details.

Security

We apply reasonable technical and organisational measures to protect your information (encryption in transit and at rest, access control, logging).

In the event of a privacy incident posing a serious risk, we will notify affected individuals and the Commission d’accès à l’information du Québec promptly, as required by Law 25.

Changes

This policy may change. The "last reviewed" date at the top reflects the version in force. Any material change will be flagged.

Privacy Officer

To exercise your rights, or for any question about this policy, contact:

Kevin Pilon
Privacy Officer
privacy@makehaircare.ca