1. Person in Charge of Processing

This privacy policy applies to the website and online store operated by Le Saint Sau (referred to in this policy as “we,” “us,” or “our”). We are subject to Quebec Law 25 (An Act to modernize legislative provisions as regards the protection of personal information, S.Q. 2021, c. 25), which governs how we collect, use, disclose, and retain personal information about the people who visit our website or place an order with us.

By using our website, you acknowledge that your personal information may be collected and processed as described in this policy. We are committed to handling your personal information with care, transparency, and respect for your rights under Quebec Law 25.

2. Personal Information Collected

We collect personal information about you in the course of operating our website and processing your orders. The categories below reflect what is actually collected based on how our site functions.

• Identity and contact information: Your name, email address, phone number, and billing or delivery address, collected when you place an order or create an account.
• Transaction and order data: Details of the products or services you purchase, order history, and payment confirmation information (note: full payment card numbers are processed directly by our payment provider and are not stored by us).
• Device and browsing identifiers: Your IP address, browser type, device identifiers, pages visited, session duration, and approximate geographic location, collected automatically when you visit our site.
• Navigation behavior: How you interact with our pages, which products you view, and how you move through our online store, collected through analytics and marketing tools.
• Advertising identifiers: Identifiers linked to your browser or device used for targeted advertising and conversion tracking, collected through our marketing tools.
• Consent preferences: Your cookie consent choices, recorded and stored to ensure we respect your preferences on future visits.

3. Purposes of Processing

We collect and use your personal information only for the purposes described below. Each purpose is tied to a specific legal basis under Quebec Law 25.

• Processing your orders and managing your account — We use your identity, contact, and transaction information to fulfill your orders, send order confirmations, manage returns, and provide customer support. Legal basis: performance of a contract with you.
• Measuring site performance and audience behavior — We use device identifiers, IP addresses, pages visited, session duration, and navigation behavior to understand how visitors use our site and to improve its content and performance. This is done through Google Analytics 4 (operated by Google LLC, United States) and WooCommerce Analytics (operated by Automattic Inc., United States). Legal basis: your consent, obtained through our cookie consent banner.
• Targeted advertising and remarketing — We use device identifiers, IP addresses, browsing behavior, advertising identifiers, transaction data, and social identifiers to measure ad conversions and deliver targeted advertising on third-party platforms. This is done through the Meta Pixel (Facebook) (operated by Meta Platforms Inc., United States). Legal basis: your consent, obtained through our cookie consent banner.
• Displaying our website correctly — We use your IP address to load web fonts through Google Fonts (operated by Google LLC, United States), which ensures our site displays as intended. Legal basis: our legitimate interest in presenting a functional and readable website.
• Managing your cookie consent choices — We record and store your consent preferences using Moelleux (by Horizon-Cumulus), operated by 9322-8310 Québec inc. (Joliette, Quebec). A cookie named moelleux_{site_key} is placed in your browser for up to 13 months to remember your choices. Consent records and this policy are hosted in Quebec (OVH, Beauharnois). Legal basis: legal obligation under Quebec Law 25 to document consent.

4. Third Parties and Processors

The table below lists every third-party service active on our website, its purpose, its category, and whether it involves a transfer of personal information outside Quebec.

5. Transfers Outside Quebec

Several of the third-party services we use transfer personal information to the United States. Specifically, the following services operate primarily in the United States and may process your personal information there:

• Google Analytics 4 (Google LLC, United States) — device identifiers, IP address, pages visited, session duration, navigation behavior, and approximate location.
• Meta Pixel (Facebook) (Meta Platforms Inc., United States) — device identifiers, IP address, pages visited, navigation behavior, advertising identifiers, transaction data, and social identifiers.
• Google Fonts (Google LLC, United States) — IP address.
• WooCommerce Analytics (Automattic Inc., United States) — device identifiers, IP address, pages visited, session duration, navigation behavior, and transaction data.

Under section 17 of Quebec Law 25, we are required to assess whether the level of protection offered in the destination jurisdiction is adequate before transferring personal information outside Quebec. We rely on the contractual frameworks and data processing agreements published by each of these providers (including Google’s and Meta’s standard contractual clauses and data processing terms) as safeguards for these transfers.

A Privacy Impact Assessment (PIA) has been or will be conducted for transfers to these third-party processors, as required by Quebec Law 25, to evaluate the privacy risks associated with processing your personal information outside Quebec.

By contrast, our website hosting, consent management platform (Moelleux), and business email infrastructure are operated entirely within Quebec by Horizon-Cumulus (Joliette, Quebec). No personal information processed through those systems leaves Quebec.

6. Retention Period

We keep your personal information only for as long as necessary to fulfill the purpose for which it was collected, or as required by law. The table below summarizes our retention practices.

Once the applicable retention period has expired, personal information is securely deleted or anonymized so that it can no longer be linked to you.

7. Your Rights

Under Quebec Law 25, you have the following rights with respect to your personal information. To exercise any of these rights, please contact us using the information provided in Section 8.

• Right of access: You may ask us to confirm whether we hold personal information about you and to receive a copy of that information in a clear and understandable format.
• Right of rectification: If any personal information we hold about you is inaccurate, incomplete, or ambiguous, you may ask us to correct it. If we have shared that information with third parties, we will notify them of the correction where feasible.
• Right of erasure (right to be forgotten): You may ask us to delete personal information about you when it is no longer necessary for the purposes for which it was collected, or when you withdraw your consent and there is no other legal basis for retaining it. Certain information may need to be retained to comply with legal obligations (for example, tax records).
• Right to data portability: You may ask us to provide you with the personal information you have given us in a structured, commonly used, technological format so that you can transfer it to another organization, where technically feasible.
• Right to withdraw consent: Where we process your personal information based on your consent (for example, analytics cookies or marketing cookies), you may withdraw that consent at any time by updating your preferences through our cookie consent banner or by contacting us directly. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

We will respond to your request within 30 days of receiving it, as required by Quebec Law 25.

If you are not satisfied with our response or believe we are not handling your personal information in compliance with the law, you have the right to file a complaint with the Quebec Information Access Commission (CAI) at https://www.cai.gouv.qc.ca.

8. Person Responsible for the Protection of Personal Information

In accordance with section 3.1 of Quebec Law 25, Le Saint Sau has designated a Person responsible for the protection of personal information. This person is your primary point of contact for any question, request, or concern related to how we handle your personal information.

• Name: Anne-Claude Champagne
• Title / Role: —
• Email: marketing@shawbridge.com
• Phone: 450-512-1293

We will acknowledge your request promptly and provide a full response within 30 days, as required by Quebec Law 25. If your request is complex or we require additional time, we will notify you before that deadline.

9. Effective Date and Versioning

This privacy policy takes effect on 19 juin 2026 and supersedes any previous version.

Current version: 1

We may update this policy from time to time to reflect changes in our practices, the services we use, or our legal obligations under Quebec Law 25. When we make a significant change, we will update the effective date above and, where appropriate, notify you directly. We encourage you to review this policy periodically.