PRIVACY POLICY

Last updated: August 10, 2026

FLORASA ("we", "us") operates florasa.ca and the related services, content and tools (the "Services"). This Privacy Policy describes how we collect, use and disclose your personal information when you visit florasa.ca, place an order, or communicate with us. By using the Services, you acknowledge that you have read and understood this Privacy Policy.

We collect only the personal information we genuinely need to operate the store, and we do not sell your personal information for money. Where the sharing of data for targeted advertising may be considered a "sale" or "sharing" under certain laws, you can opt out at any time (see Your Rights below).

Personal information we collect

• Contact details — name, billing and shipping address, phone number, email address.
• Payment information — payment card details and transaction confirmations, processed securely by our payment providers; we never see or store your full card number.
• Account information — username, password, preferences and settings.
• Order information — items you view, add to your cart or wishlist, purchase, return or exchange.
• Communications — the content of your messages to us, including customer support requests.
• Device and usage information — device, browser, IP address and how you navigate the Services, collected through cookies and similar technologies.

Where it comes from

• Directly from you, when you create an account, place an order or contact us;
• Automatically, through cookies and similar technologies when you use the Services;
• From our service providers (for example our payment processors and shipping carriers) acting on our behalf.

How we use your information

• Providing the Services — processing payments, fulfilling and shipping orders, managing returns and exchanges, maintaining your account and remembering your preferences.
• Marketing — sending promotional emails only if you signed up for them, and showing you relevant advertising. You can unsubscribe at any time with one click.
• Security and fraud prevention — authenticating accounts, securing payments, and detecting and blocking fraudulent or malicious activity. We screen orders for fraud and may cancel and refund any order that fails verification.
• Customer support — responding to your messages and resolving issues with your orders.
• Legal compliance — complying with applicable law, responding to valid legal requests, and enforcing our Terms of Service.

Cookies

We use cookies and similar technologies to keep your cart working, remember your preferences, measure how the Services are used, and support advertising. You can control cookies through your browser settings and through the consent banner shown on your first visit; blocking some cookies may limit parts of the Services (such as checkout).

How we disclose personal information

We disclose personal information only for legitimate purposes and under this Privacy Policy:

• With Shopify, which hosts our store, and with vendors who perform services on our behalf (payment processing, shipping, analytics, customer support, cloud storage). They may only use it to provide those services to us.
• With marketing partners to deliver and measure advertising, subject to your opt-out rights.
• When you direct us to, for example sharing your delivery address with a carrier to ship your order.
• To comply with legal obligations, respond to subpoenas or similar requests, enforce our terms, or protect the rights and safety of our customers and our business.
• In connection with a business transaction such as a merger or sale of the business.

We do not disclose your personal information to third parties for their own unrelated use without your consent.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your use of the Services to provide and improve them. To learn how Shopify uses your personal information, visit the Shopify Consumer Privacy Policy or the Shopify Privacy Portal.

Third-party websites and links

The Services may link to websites operated by third parties, including our social media pages. We are not responsible for the privacy or security of those sites; review their policies before providing any information.

Children

The Services are not intended for children, and we do not knowingly collect personal information from anyone under the age of majority in their jurisdiction. If you believe a minor has provided us with personal information, contact us and we will delete it. We do not knowingly "sell" or "share" the personal information of individuals under 16.

Security and retention

We use appropriate technical and organizational measures to protect your personal information, including encrypted checkout. No security measure is perfect, and we cannot guarantee absolute security; please do not send us sensitive information through unsecured channels. We keep personal information only as long as needed to provide the Services, meet our legal and tax obligations, resolve disputes and enforce our agreements, after which it is deleted or anonymized.

Your rights and choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate personal information;
• Delete personal information we hold about you;
• Receive a copy of your personal information in a portable format;
• Opt out of the "sale" or "sharing" of personal information for targeted advertising, where applicable — you can do so on our Your Privacy Choices page. If you browse with the Global Privacy Control signal enabled, we treat it as an opt-out request for that browser and device;
• Unsubscribe from marketing emails at any time using the link in any of our emails. We may still send non-promotional emails about your account or orders.

Canada. We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, for Quebec residents, with the Act respecting the protection of personal information in the private sector (Law 25). You may request access to or correction of your personal information, and withdraw your consent to its use, subject to legal and contractual restrictions, by contacting us at the address below.

UK and European Economic Area. You may also have the right to object to or restrict our processing of your personal information and to withdraw consent where processing is based on consent, without affecting the lawfulness of prior processing.

We will never discriminate against you for exercising any of these rights. We may need to verify your identity before acting on a request, and we will respond within the time required by applicable law.

Complaints

If you have a complaint about how we handle your personal information, contact us first and we will do our best to resolve it. You may also lodge a complaint with your local data protection authority — in Canada, the Office of the Privacy Commissioner of Canada, and in Quebec, the Commission d'accès à l'information du Québec.

International transfers

Your personal information may be transferred, stored and processed outside the country where you live, including in Canada and the United States. Where required, we rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses.

Virtual assistant (artificial intelligence)

Our site offers a chat window powered by artificial intelligence (AI). The assistant is clearly identified as an AI: it is not a human, and it will confirm this if you ask. Using it is entirely optional — you can always reach us directly at contactus@florasa.ca.

Information processed. When you use the assistant, the following information is processed, solely to answer you: the messages you type in the chat window; if you request order tracking, your order number and your email address, used only to verify that the order is indeed yours (it is neither stored nor added to any mailing list); and the photos of jewelry you voluntarily choose to send. Please do not send photos of people or identity documents, and never share sensitive information (card number, password, etc.) in the chat.

Technical provider. Responses are generated by our technical provider Cloudflare (Workers AI service). According to this provider's commitments, messages and photos are not used to train AI models.

Transfer outside Quebec. To be processed, your messages and photos transit through our provider's servers, located outside Quebec (and possibly outside Canada). This transit is necessary for the assistant to work.

No retention by the store. We do not keep any conversation on our servers. Your chat history is kept only in your own browser (local storage, under the name florasa_chat_session) and is automatically erased after 3 hours of inactivity. You can also erase it at any time with the "Clear conversation" button. The assistant uses no cookies, no persistent identifiers, and does no profiling — this storage is strictly necessary for the requested service and is exempt from consent.

Your rights. You may request access to the personal information we hold about you, its correction or its deletion, or ask any question about this section, by writing to contactus@florasa.ca. The assistant makes no automated decision about you: it only provides information and reads your order status. The person in charge of the protection of personal information is the store owner, reachable at the same address.

Assistant virtuel (intelligence artificielle)

Notre site propose une fenêtre de clavardage animée par une intelligence artificielle (IA). L'assistant est clairement identifié comme une IA : ce n'est pas un humain, et il vous le confirme si vous le lui demandez. Son utilisation est entièrement facultative — vous pouvez toujours nous joindre directement à contactus@florasa.ca.

Renseignements traités. Lorsque vous utilisez l'assistant, les renseignements suivants sont traités, uniquement pour vous répondre : les messages que vous écrivez dans la fenêtre de clavardage ; si vous demandez le suivi d'une commande, votre numéro de commande et votre adresse courriel, utilisée uniquement pour vérifier que la commande est bien la vôtre (elle n'est ni conservée, ni ajoutée à une liste d'envoi) ; et les photos de bijoux que vous choisissez volontairement d'envoyer. N'envoyez pas de photos de personnes ni de documents d'identité, et ne partagez jamais de renseignements sensibles (numéro de carte, mot de passe, etc.) dans le clavardage.

Fournisseur technique. Les réponses sont générées par notre prestataire technique Cloudflare (service Workers AI). Selon les engagements de ce prestataire, les messages et photos ne sont pas utilisés pour entraîner des modèles d'IA.

Communication à l'extérieur du Québec. Pour être traités, vos messages et photos transitent par les serveurs de notre prestataire, situés à l'extérieur du Québec (et possiblement à l'extérieur du Canada). Ce transit est nécessaire au fonctionnement de l'assistant.

Aucune conservation par la boutique. Nous ne conservons aucune conversation sur nos serveurs. L'historique de votre clavardage est gardé uniquement dans votre propre navigateur (stockage local, sous le nom florasa_chat_session) et est effacé automatiquement après 3 heures d'inactivité. Vous pouvez aussi l'effacer à tout moment avec le bouton « Effacer la conversation ». L'assistant n'utilise aucun témoin (cookie), aucun identifiant persistant et ne fait aucun profilage — ce stockage est strictement nécessaire au service demandé et exempté de consentement.

Vos droits. Vous pouvez demander l'accès aux renseignements personnels que nous détenons à votre sujet, leur rectification ou leur retrait, ou poser toute question sur cette section, en écrivant à contactus@florasa.ca. L'assistant ne prend aucune décision automatisée à votre égard : il ne fait que fournir de l'information et lire le statut de votre commande. La responsable de la protection des renseignements personnels est la propriétaire de la boutique, joignable à la même adresse.

Changes to this policy

We may update this Privacy Policy from time to time. The revised version will be posted on this page with an updated "Last updated" date, and we will provide any additional notice required by law.

Contact

For any question about this Privacy Policy or to exercise your rights, email us at contactus@florasa.ca. We reply within 24 to 48 hours.