At Claire&Sophie, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you visit or use our website, place an order, create an account, contact us, or otherwise interact with us.

This Privacy Policy is intended to comply with applicable Canadian and Québec privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA), where applicable, and Québec's private-sector privacy legislation, including the requirements introduced by Law 25.

1. Who We Are and Who Is Responsible for Your Personal Information

1.1 Claire&Sophie

The website and online store are operated by Claire&Sophie.

For the purposes of applicable privacy legislation, Claire&Sophie is responsible for the personal information it collects, uses or otherwise holds.

1.2 Privacy Officer

The person responsible for the protection of personal information at Claire&Sophie is responsible for overseeing our privacy practices and handling privacy-related requests and complaints.

Privacy Officer: Claire&Sophie
Email: info@claireandsophiemontreal.com

Where required by applicable law, the title and contact information of the person responsible for the protection of personal information are made available on our website.

1.3 Security of Your Information

We use reasonable administrative, technical and physical safeguards designed to protect your personal information against unauthorized access, use, disclosure, loss, theft or alteration.

Our website uses SSL/TLS encryption to help protect information transmitted between your browser and our website. You can generally identify a secure connection by the "https://" prefix in your browser's address bar and the padlock icon.

However, no method of transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

2. Personal Information We Collect

We collect only the personal information that is reasonably necessary for the purposes described in this Privacy Policy or otherwise permitted or required by law.

Depending on how you interact with our website, we may collect information such as:

• Full name
• Billing and shipping address
• Email address
• Telephone number, where provided
• Order and purchase information
• Account information
• Payment and transaction information
• Information you provide when contacting our customer service team
• Information you provide through forms on our website
• IP address
• Browser type and operating system
• Device information
• Website usage and browsing information
• Information collected through cookies and similar technologies

We do not need to receive or store your full payment card number ourselves when payment is processed through a third-party payment provider. Payment information may be processed directly by the applicable payment processor in accordance with its own privacy policy and security practices.

3. How We Collect Information

We may collect personal information when you:

• Visit or browse our website
• Create a customer account
• Place an order
• Subscribe to our newsletter
• Contact us by email or through our contact form
• Request customer service or assistance
• Participate in promotions or other activities offered through our website
• Interact with our website through cookies or similar technologies

We may also receive certain information from service providers that help us operate our website, process payments, fulfil orders, provide shipping services, or deliver marketing and analytics services.

4. Information Collected When You Visit Our Website

When you visit our website, certain technical information may be automatically collected by our website, hosting provider, Shopify, analytics providers or other service providers.

This information may include:

• Pages visited
• Date and time of access
• Amount of data transferred
• Referring website or page
• Browser type
• Operating system
• Device information
• IP address
• Approximate location derived from your IP address
• Website usage information

We use this information where reasonably necessary to operate, secure, maintain and improve our website, prevent fraud or misuse, troubleshoot technical issues, and understand how visitors use our website.

5. How We Use Your Personal Information

We may collect, use and disclose your personal information for purposes such as:

• Processing and fulfilling your orders
• Processing payments
• Shipping and delivering your purchases
• Managing your customer account
• Providing customer service
• Responding to enquiries and requests
• Communicating with you about your orders
• Processing returns, refunds and exchanges
• Preventing fraud and unauthorized transactions
• Maintaining and improving our website
• Providing a personalized shopping experience
• Sending promotional communications where permitted by law
• Understanding website traffic and usage
• Complying with legal and regulatory requirements
• Protecting our legal rights and interests

We will not use or disclose your personal information for a new purpose unless permitted or required by law or, where required, we obtain your consent.

Canadian privacy principles generally require organizations to limit the collection, use, disclosure and retention of personal information to appropriate purposes.

6. Cookies and Similar Technologies

We use cookies and similar technologies to operate our website, remember your preferences, maintain your shopping cart, improve website functionality, understand website usage and, where applicable, support advertising and marketing activities.

Some cookies are deleted when you close your browser or end your session ("session cookies"), while others remain on your device for a specified period ("persistent cookies").

Depending on their purpose, cookies may collect information such as:

• IP address
• Browser and device information
• Pages visited
• Shopping cart information
• Website preferences
• Website activity and interaction data

Some cookies are necessary for the operation and security of our website. Other cookies, including certain analytics, advertising or tracking cookies, may be subject to your consent or privacy preferences where required by applicable law.

You may be able to manage or disable certain cookies through your browser settings or through any cookie preference tools made available on our website. Disabling certain cookies may affect the functionality of the website.

7. Third-Party Service Providers

We use third-party service providers to help us operate our business and website. These providers may process personal information on our behalf for purposes such as:

• Website hosting and e-commerce services
• Payment processing
• Order fulfilment
• Shipping and delivery
• Customer service
• Email marketing
• Website analytics
• Advertising
• Fraud prevention
• Technical support

These service providers are permitted to access personal information only to the extent reasonably necessary to provide their services or as otherwise permitted or required by law.

Where personal information is transferred or stored outside Québec, we take the steps required by applicable Québec privacy legislation before making such transfers or disclosures. Québec's Law 25 includes specific requirements concerning the transfer of personal information outside Québec. 8. International and Cross-Border Transfers

Some of our service providers, technology providers, payment processors, carriers or other business partners may be located outside Québec or Canada.

As a result, your personal information may be processed or stored in another province or country and may therefore be subject to the laws of that jurisdiction.

Where required by Québec law, Claire&Sophie will conduct the appropriate privacy assessment before communicating personal information outside Québec and will take appropriate measures to ensure that the information receives adequate protection.

9. Contacting Us

When you contact us through our contact form or by email, we collect the personal information you choose to provide.

This may include:

• Your name
• Email address
• Order number
• Information contained in your message
• Any photographs or documents you choose to provide

We use this information to respond to your enquiry, provide customer service, resolve issues and manage your request.

10. Customer Accounts and Orders

When you create a customer account or place an order, we collect the information reasonably necessary to process and manage your account and transaction.

This may include your:

• Name
• Email address
• Billing address
• Shipping address
• Telephone number
• Order details
• Payment and transaction information

We use this information to process your order, arrange delivery, provide customer support, manage returns and refunds, and maintain appropriate business and accounting records.

You may request access to or correction of your personal information, subject to applicable legal requirements and exceptions. Canadian privacy law generally gives individuals rights to access their personal information and request corrections where information is inaccurate or incomplete.

11. Retention of Personal Information

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, provide our services, comply with legal, accounting and regulatory requirements, resolve disputes, enforce our agreements, and protect our legitimate business interests.

When personal information is no longer required, we take reasonable steps to securely delete, destroy or anonymize it, subject to applicable legal requirements.

12. Direct Marketing and Newsletters

12.1 Newsletter Subscription

If you subscribe to our newsletter, we may use your email address to send you promotional offers, product updates, news and other marketing communications from Claire&Sophie.

Where required, we obtain your express consent before sending commercial electronic messages.

We may use a confirmation process to verify your subscription.

You may withdraw your consent at any time by clicking the unsubscribe link included in our marketing emails or by contacting us at:

info@claireandsophiemontreal.com

Canada's Anti-Spam Legislation (CASL) generally requires consent before sending commercial electronic messages and requires such messages to identify the sender and include a working unsubscribe mechanism.

13. Marketing to Existing Customers

If you have purchased from Claire&Sophie and provided your email address, we may send you commercial electronic messages about products, services or promotions where permitted by applicable law and where the required conditions for implied consent are satisfied.

Under CASL, an existing business relationship arising from a purchase may generally support implied consent for commercial electronic messages for up to two years following the transaction, subject to the applicable legal requirements.

Every commercial electronic message we send will include an appropriate unsubscribe mechanism.

You may unsubscribe at any time by clicking the unsubscribe link in the message or contacting us at:

info@claireandsophiemontreal.com

We will respect your unsubscribe request in accordance with applicable law.

14. Your Privacy Rights

Depending on where you live and which privacy laws apply, you may have rights regarding your personal information, including the right to:

• Request access to personal information we hold about you
• Request correction of inaccurate or incomplete information
• Withdraw consent where consent is the legal basis for processing
• Request information about how your personal information is collected, used or disclosed
• Ask questions about our privacy practices
• Make a privacy complaint

Certain rights are subject to legal limitations and exceptions.

To exercise your rights or make a privacy-related request, please contact our Privacy Officer:

Claire&Sophie

Email: info@claireandsophiemontreal.com

We may need to verify your identity before processing certain requests.

15. Privacy Complaints

If you have a concern or complaint about the way we handle your personal information, please contact us first at:

info@claireandsophiemontreal.com

We will review and respond to your complaint in accordance with our applicable privacy obligations.

If you are not satisfied with our response, you may have the right to contact the applicable privacy regulator, including the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada, depending on the circumstances and applicable law.

16. Privacy Breaches

We maintain reasonable safeguards designed to protect personal information against unauthorized access, use, disclosure, loss or theft.

If a privacy breach occurs, we will assess the circumstances and take the steps required by applicable law.

Where required, we will notify affected individuals and the appropriate privacy regulator when a breach creates the applicable level of risk of significant or serious harm.

Québec's Law 25 includes obligations relating to confidentiality incidents, including notification where an incident presents a risk of serious injury. PIPEDA also contains breach-reporting and notification requirements where a breach creates a real risk of significant harm.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, services, privacy practices or applicable laws.

If we make changes that are required to be communicated under applicable law, we will provide appropriate notice.

The updated version will be posted on our website with the revised "Last updated" date.

18. Contact Information

If you have any questions, requests or concerns regarding this Privacy Policy or the handling of your personal information, please contact:

Claire&Sophie
Privacy Officer
Email: info@claireandsophiemontreal.com