Rockin' Ruby's Privacy Policy

Rockin' Ruby's
Website: rockinrubys.ca
Last Updated: October 31, 2025

1. Introduction

Rockin' Ruby's ("we," "us," or "our") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec's Act respecting the protection of personal information in the private sector, and Quebec's Law 25.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

  • Contact Information: Name, email address, phone number, mailing address
  • Account Information: Username, password (encrypted), account preferences
  • Transaction Information: Purchase history, payment information, billing address
  • Technical Information: IP address, browser type, device information, cookies
  • Communication Records: Customer service interactions, feedback, surveys
  • Marketing Preferences: Communication preferences, interests

2.2 How We Collect Information

We collect information:

  • Directly from you when you provide it (e.g., creating an account, making purchases)
  • Automatically through cookies and similar technologies when you use our website
  • From third-party service providers (e.g., payment processors, analytics providers)

3. How We Use Your Information

We use your personal information for the following purposes:

  • Order Processing: To process and fulfill your orders, process payments, and provide customer service
  • Account Management: To create and manage your account
  • Communication: To send order confirmations, shipping updates, and respond to inquiries
  • Marketing: To send promotional materials, newsletters, and special offers (with your consent where required)
  • Website Improvement: To analyze website usage and improve our services
  • Legal Compliance: To comply with legal obligations and enforce our terms
  • Security: To protect against fraud and unauthorized access

Quebec Residents: We will obtain your express consent before using your personal information for marketing purposes.

4. Legal Basis for Processing (Quebec Residents)

Under Quebec law, we process your personal information based on:

  • Your consent (which you may withdraw at any time)
  • The necessity to fulfill our contract with you
  • Our legitimate interests (where not overridden by your rights)
  • Legal obligations

5. Disclosure of Personal Information

We may share your personal information with:

  • Service Providers: Third-party vendors who assist with payment processing, shipping, email services, website hosting, and analytics
  • Business Partners: With your consent, for joint marketing initiatives
  • Legal Authorities: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, sale, or acquisition of our business

We do not sell your personal information to third parties.

5.1 International Transfers

Some of our service providers may be located outside of Canada. When we transfer personal information outside Canada, we ensure appropriate safeguards are in place to protect your information in accordance with Canadian and Quebec privacy laws.

Quebec Residents: You have the right to be informed about international transfers and can request information about the safeguards in place.

6. Your Privacy Rights

6.1 All Canadian Residents

You have the right to:

  • Access your personal information we hold
  • Request correction of inaccurate information
  • Withdraw consent (where processing is based on consent)
  • Lodge a complaint with the Privacy Commissioner of Canada

6.2 Quebec Residents - Additional Rights

Under Quebec law, you also have the right to:

  • Portability: Receive your personal information in a structured, commonly used format
  • De-indexing: Request that your personal information be de-indexed from search engines in certain circumstances
  • Deletion: Request deletion of your personal information (subject to legal retention requirements)
  • Restriction: Request restriction of processing in certain situations
  • Automated Decision-Making: Not be subject to automated decisions that significantly affect you

To exercise any of these rights, please contact us using the information in Section 12.

7. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected, including:

  • Active accounts: For the duration of your account plus 7 years for financial records
  • Transaction records: 7 years as required by Canadian tax and business laws
  • Marketing communications: Until you unsubscribe or withdraw consent

Quebec Residents: You may request information about our retention periods for specific types of data.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Remember your preferences
  • Analyze website traffic
  • Deliver targeted advertising
  • Improve website functionality

You can control cookies through your browser settings. Note that disabling cookies may affect website functionality.

Types of cookies we use:

  • Essential cookies: Required for website operation
  • Functional cookies: Remember your preferences
  • Analytics cookies: Help us understand how visitors use our site
  • Marketing cookies: Deliver relevant advertisements

9. Security Measures

We implement appropriate technical and organizational security measures to protect your personal information, including:

  • Encryption of sensitive data (including payment information)
  • Secure servers and firewalls
  • Access controls and authentication
  • Regular security assessments
  • Employee training on data protection

Quebec Residents: In the event of a privacy breach involving sensitive information, we will notify you and the Commission d'accès à l'information du Québec as required by Law 25.

10. Privacy Breach Notification

If a privacy breach occurs that poses a risk of serious harm, we will:

  • Notify affected individuals as soon as feasible
  • Notify the Privacy Commissioner of Canada (and the Commission d'accès à l'information du Québec for Quebec residents)
  • Document all breaches and the actions taken

11. Children's Privacy

Our website is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will delete it promptly.

12. Contact Information

Privacy Officer

If you have questions, concerns, or wish to exercise your privacy rights, please contact our Privacy Officer:

Email: bryannamaureen@rockinrubys.ca

Complaints

For Quebec Residents:
Commission d'accès à l'information du Québec
Website: www.cai.gouv.qc.ca
Phone: 1-888-528-7741

For Other Canadian Residents:
Office of the Privacy Commissioner of Canada
Website: www.priv.gc.ca
Phone: 1-800-282-1376

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

  • Posting the updated policy on our website with a new "Last Updated" date
  • Sending an email notification (for material changes)
  • For Quebec residents: Obtaining fresh consent where required for new purposes

14. Language

This Privacy Policy is available in both English and French. In the event of any inconsistency between versions, the English version shall prevail, except in Quebec where both versions have equal force.

15. Consent

By using our website and services, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy.

Quebec Residents: For any new purposes not covered by this policy, we will obtain your express consent before using your personal information.

Acknowledgment: This privacy policy complies with PIPEDA, Quebec's Act respecting the protection of personal information in the private sector, and Quebec's Law 25 (Bill 64).