Privacy policy

What we collect

• Order information: name, email, shipping address, phone number (if provided), and the items you buy.
• Payment: handled entirely by Stripe. We never see or store your full card number.
• Customer account (Glow Club): name, email, password (stored only as a one-way hash), optional birthday (month and day, no year), preferred language, your orders, points history and reward codes.
• Newsletter: your email address, preferred language, and a record of your consent (date, where you signed up, the exact wording you agreed to, and when you confirmed or unsubscribed).
• Contact form: your name, email and message.
• Technical data: standard server logs (IP address, browser, pages visited) needed to run and secure the site. We do not use advertising trackers.

Why we use it

• To process and ship your order, send order confirmations and tracking updates, and handle returns or warranty claims.
• To answer your messages.
• To run your account and the Glow Club: show your orders, count points, apply tier perks (such as free-shipping thresholds), create reward codes, and send your birthday reward if you gave us your birthday.
• To send newsletter emails you signed up for and confirmed (double opt-in). You can unsubscribe at any time in one click using the link in each email, from your account, or by writing to us.
• If you tick the email box in your cart and type your email but don't finish paying: one reminder email about that cart (only once, never if you unsubscribed).
• About three weeks after your order ships: one email inviting you to review what you bought. Reviews show your chosen display name, never your email. You can stop these requests with the link in the email.
• To keep the site secure (for example, limiting repeated sign-in attempts) and comply with tax and accounting obligations.

Who we share it with

Only the service providers needed to run the store: Stripe (payments), our fulfilment partner and carriers (shipping — they receive your name, address and phone number), our email provider (transactional emails), and our hosting and database providers. Some of these providers store data outside Québec and Canada, including in the United States and China (for fulfilment). We do not sell your personal information.

Cookies

We use a language-preference cookie, a sign-in session cookie (customer accounts and the admin area), and your browser's local storage to remember your cart and whether you've closed our newsletter offer. Advertising cookies (TikTok, Meta, Pinterest pixels), used to measure our ads and show relevant offers, load only if you click "Accept all" in the cookie banner. To change your choice, clear this site's data in your browser; the banner will ask again.

How long we keep it

Order records are kept for seven years, as required by Canadian and Québec tax law. Accounts (with points and reward codes) are kept until you delete your account. Newsletter data is used until you unsubscribe; after that we keep only a minimal record (email, status and consent history) so we can prove consent and never email you again by mistake. Contact messages are deleted once resolved, within twelve months.

When you delete your account, your login, profile, points and reward codes are erased right away. Your past orders stay in our accounting records for the rest of the seven-year period, but anonymised: the email is replaced by a one-way code and your name, street address and phone number are removed.

Your rights

You have the right to access your personal information, to have it corrected, to have it deleted, to withdraw your consent, and to receive the information you gave us in a structured, commonly used technological format (portability).

You can see and correct your details yourself in My account → Profile & settings, unsubscribe from the newsletter there or in one click from any email, and delete your account from the same page. For anything else — including a copy of your data — email us; we respond within 30 days.

Person in charge of the protection of personal information

Leonart Calixte, owner — CMAC Beauty, 6894 boul. Gouin Est, Montréal, QC H1G 6N4, Canada — bonjour@cmacbeauty.ca. Write to this address for any question, request or complaint about your personal information.

Changes

We may update this policy from time to time. The date at the top tells you when it was last revised.