Privacy Policy

This Privacy Policy describes how Cotton Montreal (the "Site," "we," "us," or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase on cotton-montreal.com (the "Site"), or when you communicate with us regarding the Site (collectively, the "Services"). For the purposes of this Privacy Policy, "you" and "your" refer to the user of the Services, whether you are a customer, a visitor to the Site, or any other individual whose information we have collected in accordance with this policy.

Please read this Privacy Policy carefully. By using or accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with this policy, please do not use or access the Services.

Changes to This Privacy Policy

We may update this policy from time to time, including to reflect changes in our practices or for operational, legal, or regulatory reasons. We will post the revised policy on the Site, update the "Last updated" date, and take any other steps required by applicable law.

How We Collect and Use Your Personal Information

To provide the Services, we collect personal information about you from a variety of sources. The information we collect and use varies depending on how you interact with us.

In addition to the specific uses described below, we may use the information we collect about you to communicate with you, provide or improve the Services, comply with our legal obligations, enforce our applicable terms of use, and protect or defend the Services, our rights, and the rights of our users or others.

Personal Information We Collect

The types of personal information we obtain depend on how you interact with the Site and the Services you use. When we use the term "personal information," we are referring to information that identifies you, relates to you, describes you, or can be associated with you. The following sections describe the categories and types of information we collect.

Information Collected Directly From You

Information you provide to us directly through the Services may include:

• Contact details, including your name, address, phone number, and email address.
• Order information, including your name, billing address, shipping address, payment confirmation, email, and phone number.
• Account information, such as your username, password, security questions, and other information used for account security.
• Customer support information, for example, the information you include in your communications with us through the Services.

Some features of the Services may require you to provide certain information directly to us. You may choose not to provide it, but this could prevent you from using certain features.

Information About Your Use

We may also automatically collect certain information related to your interaction with the Services ("Usage Data"). To do this, we use cookies, pixels, and similar technologies ("Cookies"). This data may include information about how you access the Site, your devices, your browser, your IP address, your network connection, and your general interactions with the Services.

Information Obtained From Third Parties

We may also obtain information about you from third parties, such as:

• Companies that support our Site and Services, such as Shopify.
• Our payment processors, who collect payment information (e.g., bank account, credit or debit card, billing address) in order to process your payments and fulfill your orders.
• Third parties using online tracking technologies when you interact with our Site, our emails, or our advertisements.

Any information obtained from third parties will be handled in accordance with this policy. See also the section below on third-party sites and links.

How We Use Your Personal Information

Providing Products and Services. We use your personal information to provide the Services and fulfill our contract with you: processing payments, preparing and shipping orders, account-related notifications, returns, exchanges, account management, and more.

Marketing and Advertising. We may use your information to send you marketing communications by email, SMS, or mail, and to present you with tailored advertisements on our Site or elsewhere.

Security and Fraud Prevention. Your information may be used to detect, investigate, or act against any fraudulent, illegal, or malicious activity. If you have an account, you are responsible for keeping your credentials confidential. Contact us immediately if you believe your account has been compromised.

Communication and Service Improvement. We use your information to provide customer support and improve our Services, in our legitimate interest in maintaining an effective relationship with you.

Cookies

Like many websites, we use Cookies. For the specific list of Cookies used by Shopify, please see: https://www.shopify.com/legal/cookies.

Cookies help us operate and improve the Site, run analytics, remember your preferences, and personalize content and advertising. You can set your browser to refuse Cookies, but this may affect your user experience.

How We Disclose Your Personal Information

We may disclose your personal information in the following circumstances:

• To third-party service providers (e.g., payment processing, data analytics, customer support, cloud storage, shipping).
• To our business and marketing partners.
• At your request or with your consent.
• To our affiliates for internal management.
• As part of a business transaction (merger, bankruptcy), to comply with the law, respond to legal requests, or protect our rights.

In particular, we disclose:

Category	Recipients
Identifiers and contact details	Service providers, business partners, affiliates
Commercial information	Same as above
Online activity / Network data	Same as above
Geolocation data	Same as above

We do not sell or share sensitive information without your consent.

Third-Party Sites and Links

The Site may contain external links. We are not responsible for their privacy or security practices. Any information you provide on those sites may be publicly accessible or used by third parties according to their own rules.

Children's Data

The Services are not intended for children. We do not knowingly collect their data. If you believe a child has provided us with information, please contact us so we can delete it.

Security and Retention

No security measure is perfect. Data transmitted online may be exposed. We recommend that you do not use insecure channels to communicate sensitive information.

How long we retain information depends on our needs (account management, legal obligations, dispute resolution, etc.).

Your Rights

Depending on where you live, you may have the following rights:

• Access / Information
• Deletion
• Correction
• Portability
• Restriction of processing
• Withdrawal of consent
• Recourse / Appeal
• Management of communication preferences

We may ask you for information to verify your identity. You may also designate an authorized agent. We will not discriminate against individuals who exercise their rights.

Complaints

For any complaint, please contact us. If our response does not satisfy you, you may contact the Office of the Privacy Commissioner of Canada, or your applicable provincial privacy regulator (for example, the Commission d'accès à l'information du Québec).

International Users

Your information may be transferred to and processed in countries other than the one in which you reside, including Canada. Where such transfers occur, we will take appropriate steps to ensure your information continues to be protected in accordance with this policy and applicable Canadian privacy law.