Privacy policy

Who is responsible

Our person in charge of the protection of personal information is Alexandre Lemay, Privacy Officer. For any question or request about your information, write to info@thenorsebrew.com with the subject “Privacy”.

What we collect and why

We only collect what we need for each purpose below.

• Orders and subscriptions (online shop): your name, email, phone number, shipping address, what you buy and your order history. Used to process and deliver your order, send receipts and shipping updates, manage your subscription, answer you, and keep the accounting records required by law. Your phone number is used only by us and the carrier to reach you about your delivery.
• Payment: handled entirely by Stripe. We never see or store your card number.
• Our email list: your email address and language, only if you tick the consent box and confirm by email. We also keep proof of your consent (date, wording you agreed to, where you signed up, IP address). Used to send our offers and news. You can unsubscribe at any time with the link in every email.
• Contact and wholesale forms: your name, email, company and message. Used to answer you.
• Website analytics: only if you accept analytics cookies (see below). Pages viewed, device and browser type, and approximate location (city level), used to understand and improve the site.

Cookies and similar technologies

The site needs a few things stored in your browser to work: your cart, your language and your cookie choice. These are always on and are never used to track you.

Analytics cookies (Google Analytics) stay off unless you accept them in the banner. You can change your choice at any time with the “Cookie preferences” link at the bottom of every page. We don’t use advertising cookies.

Who we share it with

We don’t sell or rent your personal information. We share it only with service providers that help us run the business, and only what each one needs:

• Stripe: payments, invoices, sales tax and subscription management
• Shipping carriers: your name, address and phone number, to deliver your order
• Netlify: hosting of the website and its forms
• Vercel and Supabase: our order management system
• Resend: sending our emails (order updates, email list)
• Google: website analytics, only if you accept them
• Our accountant: accounting records

We may also disclose information when the law requires it.

Where your information is kept

Some of our providers store information outside Quebec and outside Canada, mainly in the United States. Before using them, we assessed how they protect personal information, and our agreements with them require them to protect it and use it only for the services they provide to us. Information stored outside Canada may be subject to the laws of that country.

How long we keep it

After that, the information is deleted or made anonymous.

• Orders, invoices and payment records: 6 years after the end of the fiscal year they relate to, as required by tax law
• Email list: until you unsubscribe. We keep the proof of your consent for as long as we need to show it was given
• Messages from our forms: as long as needed to answer you, then up to 2 years
• Analytics data: 14 months

How we protect it

Access to personal information is limited to the people who need it for their work. Our systems use encrypted connections, two-factor sign-in for staff and reputable providers with strong security. If an incident ever puts your information at risk of serious harm, we will tell you and the Commission d’accès à l’information du Québec, as the law requires.

Your rights

You can ask us to:

• tell you what personal information we hold about you and give you access to it
• give you a copy of it in a commonly used format
• correct it if it’s inaccurate or incomplete
• stop using it for our email list (withdraw your consent)
• delete it, except what we must keep by law (such as accounting records)

Write to info@thenorsebrew.com with the subject “Privacy”. We’ll answer within 30 days, free of charge. We may ask you to confirm your identity first.

If you’re not satisfied with our answer, you can complain to the Commission d’accès à l’information du Québec (cai.gouv.qc.ca) or to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

Changes to this policy

We’ll update this page when our practices change and show the date of the last update at the top. Significant changes will be announced on the site.