Privacy Policy
Effective date: June 2026
Compliant with Quebec's Law 25 and Canada's PIPEDA
Please read this Privacy Policy carefully. It explains what personal information we collect, why we collect it, how we use it, and your rights under Quebec's Law 25 (Act respecting the protection of personal information in the private sector) and Canada's federal PIPEDA.
1. WHO WE ARE
Vanee Designs is a handmade crochet clothing brand owned and operated by Vanessa Lacerte, based in Val-d'Or, Québec, Canada.
As required by Law 25, Vanessa Lacerte is designated as the Person Responsible for the Protection of Personal Information (privacy officer). She can be reached at:
info@vaneedesign.com
In accordance with Law 25, this contact information is also published on our website.
2. WHAT PERSONAL INFORMATION WE COLLECT
We collect only the information necessary to provide our services (data minimization principle). This includes:
A) When you place an order:
• Full name and shipping/billing address
• Email address and phone number
• Payment details (processed securely by Wix Payments — we do not store card numbers)
• Order history and product preferences
B) When you subscribe to our newsletter:
• Email address and, optionally, your first name
C) When you visit our website:
• IP address and approximate location (collected by Wix, Google Analytics, and Meta Pixel — with your consent)
• Pages visited, session duration, device type, and browser (analytics data)
• Cookies and tracking identifiers (see Section 6)
D) When you contact us:
• Name, email address, and the content of your message
3. WHY WE COLLECT YOUR INFORMATION (PURPOSES)
We collect and use your personal information only for the following specific purposes, as required by Law 25:
• To process and fulfill your order (shipping, payment, customer service)
• To send you order confirmations, shipping updates, and after-sale support
• To send you our newsletter and promotional emails (only if you opted in — with your separate, express consent)
• To analyze website traffic and improve our website using Google Analytics (with your consent)
• To deliver relevant ads on Meta platforms (Facebook/Instagram) via Meta Pixel (with your consent)
• To respond to your questions and contact form submissions
• To comply with applicable laws and legal obligations
We do not use your information for automated decision-making or profiling that would produce legal or similarly significant effects on you.
4. LEGAL BASIS & CONSENT
Under Law 25, we rely on the following legal bases for processing your personal information:
• Contract performance: Processing necessary to fulfill your order and deliver our services.
• Express consent: For newsletter subscriptions, marketing emails, and non-essential cookies (Google Analytics, Meta Pixel). You may withdraw this consent at any time.
• Legal obligation: Where processing is required by law.
Withdrawing consent
You may withdraw your consent for newsletter emails at any time by clicking Unsubscribe in any email. You may withdraw your consent for analytics and advertising cookies at any time via the cookie settings banner on our website.
Withdrawing consent does not affect the lawfulness of processing before withdrawal.
5. WHO WE SHARE YOUR INFORMATION WITH
We do not sell your personal information. We share it only with trusted service providers acting on our behalf, and only to the extent necessary:
Platform & hosting:
• Wix.com Ltd. (Israel / USA / Ireland) — our website platform and data processor. Wix stores data on servers in the United States and Ireland. Wix is bound by a Data Processing Agreement (DPA) with us.
Payments:
• Wix Payments / Stripe — secure payment processing. Payment data is PCI-DSS compliant and is not stored by Vanee Designs.
Shipping:
• Canada Post / courier partners — your name and address are shared only to fulfill delivery.
Analytics:
• Google LLC (Google Analytics) — website traffic analysis. Data may be transferred to the USA. Google acts as a data processor under a Data Processing Addendum. (Requires your consent under Law 25.)
Advertising:
• Meta Platforms Inc. (Meta Pixel / Facebook & Instagram Ads) — advertising performance tracking. Data may be transferred to the USA. (Requires your express consent under Law 25.)
Email marketing:
• Wix Email — used to send newsletters to subscribers who have opted in.
All third-party processors are contractually bound to protect your data and use it only for the purposes we specify.
6. COOKIES & TRACKING TECHNOLOGIES
Our website uses cookies and similar technologies. Under Law 25, we are required to inform you about these tools before they collect any information, and to obtain your express consent for non-essential cookies.
Types of cookies we use:
• Essential cookies: Required for our website to function (e.g., shopping cart, secure login). No consent required.
• Analytics cookies (Google Analytics): Collect data on pages visited, session duration, and device type to help us improve the website. Requires your consent.
• Advertising/marketing cookies (Meta Pixel): Track your visit to show you relevant ads on Facebook and Instagram. Requires your express consent.
A cookie consent banner will appear on your first visit. You may accept, decline, or customize your cookie preferences. You can also change your preferences at any time via the cookie settings link in our website footer.
Under Law 25 Section 8.1, non-essential tracking tools (including Google Analytics and Meta Pixel) must be blocked until you give express consent. We comply with this requirement.
7. CROSS-BORDER TRANSFERS OF PERSONAL INFORMATION
As required by Law 25, we disclose that your personal information may be transferred outside Québec and Canada, specifically to:
• United States: via Wix.com (hosting/platform), Google LLC (Analytics), Meta Platforms Inc. (Pixel/Ads), and Stripe (payments).
• Ireland: via Wix.com data centre backup servers.
• Israel: via Wix.com Ltd. headquarters.
Before any such transfer, we have ensured that these third parties provide an adequate level of protection for your personal information, through Data Processing Agreements, Standard Contractual Clauses (SCCs), or equivalent safeguards.
A Privacy Impact Assessment (PIA) has been or will be conducted for cross-border data transfers, as required by Law 25.
8. HOW LONG WE KEEP YOUR INFORMATION
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law:
• Order data (name, address, purchase history): 7 years, as required by Canadian tax and accounting law.
• Email newsletter subscriptions: Until you unsubscribe or request deletion.
• Contact form messages: Up to 2 years, or until the matter is resolved.
• Website analytics data (Google Analytics): 26 months (Google's default retention period, configurable in GA4).
• Advertising data (Meta Pixel): As set by Meta's platform retention policies.
When information is no longer required, it is securely deleted or anonymized, as required by Law 25.
9. YOUR RIGHTS UNDER LAW 25
As a resident of Québec (or any individual whose data we process), you have the following rights under Law 25:
• Right to be informed: To know what personal information we hold about you and how we use it.
• Right of access: To request a copy of your personal information we hold.
• Right to rectification: To request correction of inaccurate or incomplete information.
• Right to erasure (right to be forgotten): To request deletion of your personal information, subject to legal retention obligations.
• Right to de-indexation: To request that we stop disseminating your personal information or de-index links associated with your name.
• Right to data portability (since Sept. 2024): To receive your personal information in a structured, commonly used, machine-readable format.
• Right to withdraw consent: For any processing based on consent (newsletter, cookies), at any time.
• Right to object to automated decisions: To request human review of any automated decision affecting you.
How to exercise your rights
Send your request by email to info@vaneedesign.com. We will respond within 30 days of receiving your request, as required by Law 25. We may ask you to verify your identity before processing your request.
If you believe your privacy rights have been violated, you may file a complaint with the Commission d'accès à l'information du Québec (CAI): www.cai.gouv.qc.ca
10. HOW WE PROTECT YOUR INFORMATION
We take the security of your personal information seriously. The following safeguards are in place:
• Our website is hosted on Wix.com, which uses industry-standard SSL/TLS encryption for all data in transit.
• Payment processing is handled by Wix Payments / Stripe, which are PCI-DSS certified. We never store full credit card numbers.
• Access to customer data is limited to Vanessa Lacerte only.
• We use Wix's built-in security features including firewall protection and encrypted databases.
In the event of a confidentiality incident (data breach) that presents a risk of serious injury, we will:
• Notify the Commission d'accès à l'information (CAI) as required by Law 25.
• Notify affected individuals promptly.
• Maintain a register of confidentiality incidents as required by Law 25.
• Take immediate measures to reduce the risk of harm and prevent recurrence.
11. MINORS
Our website is not directed at children under the age of 14. We do not knowingly collect personal information from minors under 14.
Under Law 25, the consent of a parent or legal guardian is required before collecting the personal information of any person under 14 years of age. If we become aware that we have collected personal information from a minor under 14 without parental consent, we will delete it promptly.
12. UPDATES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. The updated date at the top of this page will always reflect the most recent version.
For material changes, we will notify you by email (if you are a subscriber) or by a prominent notice on our website. Your continued use of our website after changes are posted constitutes acceptance of the updated policy.
13. CONTACT & COMPLAINTS
For any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact our Privacy Officer:
Vanessa Lacerte
Person Responsible for the Protection of Personal Information
Vanee Designs — Val-d'Or, Québec, Canada
info@vaneedesign.com
We will respond to all privacy requests within 30 days.
If you are not satisfied with our response, you may contact the Commission d'accès à l'information du Québec (CAI):
www.cai.gouv.qc.ca
1-888-528-7741 (toll-free in Québec)