Privacy Policy

UNIFY SKIN (Montréal, Québec) minimizes collected data: account, orders, cart (strictly-necessary us_cart cookie), consents. Hosting: Convex and Vercel in Montréal (aws-ca-central-1, yul1).

Your rights (Law 25)

• Access: know what information we hold about you.
• Rectification: correct any inaccurate information.
• Deletion: request erasure (account and data).
• Portability: receive your data in a structured format.

Cookies and tracking technologies

• Strictly necessary cookies: us_cart (shopping cart persistence for 30 days, required for e-commerce functionality, exempt from prior consent).
• Audience measurement: PostHog (privacy-first product analytics with session replay permanently disabled) and Google Analytics 4 (integrated with Consent Mode v2, storage denied by default).
• Marketing pixels: Meta, TikTok, and Pinterest (disabled by default, loaded only after explicit user consent).
• Consent control: you can change or withdraw your consent at any time using the "Cookie Settings" / "Gérer les témoins" link in the footer.

Privacy officer

[Privacy officer contact details to be completed before launch — Law 25]

Confidentiality incident register

Official incident register maintained in compliance with section 3.5 of Law 25 (risk of serious harm assessment, notifications to the CAI and affected individuals when required).

Retention and transfers

Inactive carts deleted after 30 days. Consent proofs retained in compliance with CASL. Primary data hosted in Quebec/Canada; third-party service providers subject to Privacy Impact Assessments (PIA): Square (payment), PayPal (payment), Resend (transactional email), PostHog (analytics), Anthropic (AI advisor).