Privacy Policy

Privacy Policy

Last updated: July 10, 2026

This privacy policy explains how Cosmo Lyo collects, uses, discloses, stores, and protects personal information submitted by visitors, customers, and users of the website. https://boutique.cosmolyo.ca.

This policy applies to the use of our online store, the creation of a customer account, orders, payments, support requests, contact forms, analytics tools and services related to the sale of our products.

1. Who are we?

The site https://boutique.cosmolyo.ca is operated by Cosmo Lyo.

Address :
Cosmo Lyo
2012-3880 Harvey Boulevard
Jonquière, Quebec
G7X 8R6
Canada

Person responsible for the protection of personal information:
Data Protection Officer – Cosmo Lyo
E-mail : info@cosmolyo.ca

2. Personal information we collect

We only collect the information necessary for the operation of our store, order processing, delivery, customer service, site security and the improvement of our services.

The information that may be collected includes, but is not limited to:

  • first and last name;
  • company name, if applicable;
  • billing address;
  • Delivery address;
  • email address;
  • phone number;
  • order contents;
  • purchase history;
  • information related to the customer account;
  • messages sent to customer service or via a form;
  • IP address;
  • technical data related to the browser, device and use of the site;
  • Navigation data, including pages viewed and interactions with the site.

We do not store full credit card numbers on our site. Payments are processed by secure, third-party payment providers.

3. Reasons why we collect this information

We use the personal information collected for the following purposes:

  • process and confirm orders;
  • prepare the invoice;
  • organize the delivery or shipment of the products;
  • communicate with customers about their order;
  • to answer questions and requests for support;
  • manage customer accounts;
  • prevent fraud, abuse and unauthorized use of the site;
  • to comply with our accounting, tax, commercial and legal obligations;
  • improve the site's functionality, performance and content;
  • analyze site usage and measure the effectiveness of our marketing efforts;
  • to present our products in services such as Google Merchant Center, Google Ads or Google Analytics, when these services are configured.

4. Consent

By using our site, creating an account, placing an order, communicating with us, or accepting certain cookies, you consent to the collection, use, and disclosure of your personal information in accordance with this policy.

Where required, we will ask for your consent separately, particularly for certain marketing communications or for certain non-essential cookies.

You can withdraw your consent where permitted by law. However, withdrawing consent may limit our ability to provide you with certain services, such as processing an order, delivering a product, or responding to a support request.

5. Orders and payments

When you place an order on our site, we collect the information necessary for processing the transaction, invoicing, delivery and order tracking.

Payments may be processed by external payment providers, including Stripe or the payment solutions available within WooCommerce. These providers may collect certain information necessary for payment validation and processing.

We do not directly control the privacy practices of these external providers. We encourage you to review their respective privacy policies.

6. Delivery and shipping

To deliver your orders, certain information may be shared with delivery, transportation, shipping, order processing, or shipping rate generation service providers.

The information provided is limited to what is necessary to prepare, ship, track or deliver your order.

7. Customer Accounts

If you create an account on our site, we retain the information associated with that account to facilitate your future orders, display your purchase history, and simplify the ordering process.

You can modify certain information in your account at any time from your customer area. You can also request the deletion of your account, subject to the information we are required to retain to comply with our legal, tax, accounting, or administrative obligations.

8. Contact forms and communications

When you contact us via form, email, or any other means of communication, we collect the information necessary to understand and respond to your request.

This information may include your name, email address, phone number, company, the content of your message, and any other information you choose to share with us.

9. Comments

If comments are enabled on the site and you leave a comment, we collect the data entered in the comment form, your IP address and browser user agent to help detect spam.

An anonymized string created from your email address, also called a "hash," may be sent to the Gravatar service to check if you are using it. Gravatar's privacy policy is available at the following address: https://automattic.com/privacy/.

After your comment is approved, your profile picture, if applicable, may be publicly visible next to your comment.

10. Uploaded Media

If you upload images or files to the site, we recommend that you avoid uploading images containing EXIF data, particularly GPS coordinates. Site visitors could download and extract this data from the uploaded images.

11. Witnesses and similar technologies

Our site uses cookies and similar technologies to ensure the proper functioning of the store, improve the user experience, measure site performance, and support certain features related to security, payments, analytics, and marketing.

Witnesses can be used, in particular, to:

  • maintain the contents of the shopping cart;
  • allow connection to a customer account;
  • to remember certain preferences;
  • secure browsing sessions;
  • analyze website traffic;
  • measure conversions and advertising performance;
  • improve the speed and stability of the site.

Some cookies are essential for the operation of the store and cannot be disabled without affecting the site's functionality. Other cookies, such as those related to analytics or marketing, may depend on your consent or your browser settings.

You can configure your browser to refuse or delete certain cookies. However, refusing certain cookies may limit some site functionalities, including the shopping cart, account login, or the ordering process.

12. Analysis and measurement tools

We may use analytics tools, including Google Analytics, Google Search Console, Google Merchant Center, Google Ads or Site Kit by Google, to understand how visitors use the site, measure page performance, evaluate the effectiveness of our campaigns and improve our products and services.

These tools can collect technical and behavioral information, such as pages visited, duration of visits, interactions with the site, IP address, device type, browser, approximate region, and certain conversion data.

This information is generally used in aggregated or pseudonymized form, where possible.

13. Advertising, remarketing, and Google Merchant Center

We may use Google's advertising or commercial services, including Google Merchant Center and Google Ads, to showcase our products in search results, product listings, advertising campaigns, or other Google surfaces.

When these services are enabled, certain data related to products, visits, clicks, conversions, or purchases may be transmitted to Google in order to measure performance, improve ad relevance, and generate reports.

We do not use this data to sell your personal information to third parties.

14. Embedded content from other sites

Some pages of the site may include embedded content from other sites, for example videos, maps, images, widgets, forms, analytics tools or social networking elements.

Embedded content from other websites behaves as if you were visiting those other websites directly. These websites may collect data about you, use cookies, embed third-party tracking tools, or monitor your interactions with the embedded content, including if you are logged into their platform.

15. Suppliers and third parties with whom we may share information

We may share certain personal information with service providers when necessary to operate our store, process your orders, or provide our services.

These suppliers may include, but are not limited to:

  • payment providers;
  • shipping and delivery providers;
  • services for calculating or managing delivery costs;
  • hosting, security, backup or technical infrastructure providers;
  • transactional email sending services;
  • Web analytics tools;
  • advertising or commercial tools;
  • providers of protection against spam, abuse or fraud;
  • professional advisors, when necessary, for example accountants, tax specialists or legal advisors.

We strive to limit the information provided to what is necessary for the provision of the service in question.

16. Transfer of information outside Quebec or Canada

Some of the service providers we use may process or host information outside of Quebec or Canada, including in the United States or other jurisdictions.

When information is transferred outside of Quebec or Canada, it may be subject to the laws applicable in those jurisdictions. We take reasonable steps to ensure that these providers protect personal information in accordance with applicable requirements.

17. Information Retention

We retain personal information only for as long as necessary for the purposes for which it was collected, or to comply with our legal, tax, accounting, commercial, administrative or security obligations.

For your information:

  • Order-related information may be retained for the period required for accounting, taxation, customer service, fraud prevention and legal obligations;
  • Customer account information is retained as long as the account remains active, unless a deletion request is applicable;
  • Communications with customer service may be retained in order to follow up on requests;
  • Technical data and security logs may be retained to detect errors, abuse, fraud, or security incidents;
  • The analysis data can be retained according to the settings of the tools used.

When information is no longer needed, we delete it, anonymize it, or securely archive it, depending on the context.

18. Information Security

We implement reasonable measures to protect personal information against loss, theft, unauthorized access, disclosure, alteration, or misuse.

These measures may include, as appropriate, the use of secure connections, passwords, access controls, software updates, backups, security tools, logging, and restrictions on access to information.

No method of electronic transmission or storage is entirely secure. Despite our efforts, we cannot guarantee absolute security.

19. Confidentiality Incidents

If a privacy incident involving personal information occurs, we will take reasonable steps to mitigate risks, assess the situation, document the incident, and notify the relevant individuals or authorities when required by law.

20. Your rights

Subject to the limitations provided by law, you may exercise certain rights regarding your personal information, including:

  • request access to the personal information we hold about you;
  • request the correction of inaccurate, incomplete or ambiguous information;
  • request the withdrawal of your consent, where applicable;
  • request the removal of certain information, where permitted by law;
  • request information about the use or disclosure of your information;
  • request to deactivate certain marketing communications, if applicable.

To exercise your rights, please contact us at the following address: info@cosmolyo.ca.

We may need to verify your identity before responding to a request concerning your personal information.

21. Marketing Communications

If we send you marketing communications, you can unsubscribe using the mechanism provided in the communication or by contacting us.

Even if you unsubscribe from marketing communications, we may still send you necessary or transactional communications, for example, about an order, payment, delivery, customer account, or legal obligation.

22. Minors

Our site is primarily aimed at adult customers, businesses, and professionals. We do not intentionally seek to collect personal information from minors.

If you believe that a minor has provided us with personal information without proper consent, please contact us so that we can assess the situation.

23. Links to other sites

Our site may contain links to third-party websites. We are not responsible for the privacy practices, content, or security of these sites. We recommend that you review their privacy policies before submitting any personal information to them.

24. Policy Amendment

We may modify this privacy policy to reflect changes to our practices, tools, services, or applicable legal requirements.

The date of the last update will be indicated at the top of this page. We encourage you to review this policy periodically.

25. Contact us

For any questions regarding this policy, our privacy practices, or the exercise of your rights, you can contact us:

Cosmo Lyo
Person responsible for the protection of personal information
2012-3880 Harvey Boulevard
Jonquière, Quebec
G7X 8R6
Canada
E-mail : info@cosmolyo.ca