PRIVACY POLICY

Website: www.ITFactory.ca
Type of Website: Ecommerce
Effective Date: November 12, 2025
Last Updated: November 12, 2025

ITFactory.ca is owned and operated by ITFactory.

Contact Information:
Email: admin@itfactory.ca
Phone: (888) 313-1124
Address: 4035 St-Ambroise, Montreal, Quebec, H4C 2E1

1. PURPOSE

The purpose of this Privacy Policy is to inform users of our website of the following:

The personal data we collect
How we use the collected data
Who has access to the data collected
The rights of website users
Our cookie policy
Our compliance with Quebec Law 25 and federal privacy legislation

This Privacy Policy applies in addition to the Terms and Conditions of our website.

2. CONSENT

By using our website, you consent to:

The conditions set out in this Privacy Policy
The collection, use, and retention of the data listed in this Privacy Policy

You have the right to withdraw your consent at any time by contacting our Privacy Officer (contact information below).

3. PERSONAL DATA WE COLLECT

We only collect data that helps us achieve the purposes set out in this Privacy Policy. We will not collect any additional data beyond the data listed below without notifying you first.

Data Collected Automatically

When you visit and use our website, we may automatically collect and store:

IP address
Geographic location (city/region)
Browser type and version
Operating system
Device type (desktop, mobile, tablet)
Pages visited and links clicked
Time spent on pages
Referring website

Data You Provide to Us

We collect the following personal information when you perform certain actions on our website:

First and last name
Email address
Phone number
Shipping and billing address
Date of birth (for Birthday Club members, optional)
Payment information (processed securely through third-party payment processors)
Order history and preferences

This data may be collected through:

Creating an account
Making a purchase
Subscribing to our newsletter or VIP program
Joining our Birthday Club (optional)
Contacting customer service
Participating in promotions or surveys

4. HOW WE USE PERSONAL DATA

Data collected on our website will only be used for the purposes specified in this Privacy Policy or indicated on the relevant pages of our website. We will not use your data beyond what we disclose.

Automatically Collected Data

We use automatically collected data for:

Website optimization and performance improvement
Security and fraud prevention
Analytics and understanding user behavior
Personalizing your website experience
Targeted advertising (with your consent)

Data You Provide

We use the data you provide for:

Processing and fulfilling your orders
Communicating with you about your orders
Providing customer support
Sending marketing communications (with your consent)
Personalizing offers and recommendations
Fraud prevention and account security
Legal compliance (e.g., tax records, dispute resolution)

5. WHO WE SHARE PERSONAL DATA WITH

Employees and Service Providers

We may share user data with employees and third-party service providers who need access to fulfill their duties. These parties include:

Payment processors (Stripe, PayPal, Shopify Payments, etc.)
Shipping carriers (Canada Post, UPS, FedEx, etc.)
Email marketing services
Customer service platforms
Analytics providers (Google Analytics)
Cloud storage providers
Software vendors and distributors

All service providers are bound by confidentiality agreements and are only permitted to use your data for the specific purposes we authorize.

Legal Disclosures

We will disclose personal data when required by law, including:

In response to a court order or subpoena
To comply with legal obligations
To protect our legal rights or defend against legal claims
To investigate fraud or security issues
To protect the safety of our users or the public
In connection with the sale or transfer of our business (with notice to affected users)

We Do Not Sell Your Data

We will NEVER sell your personal information to third parties for their marketing purposes.

6. DATA RETENTION PERIODS

In compliance with Quebec Law 25, we retain your personal information only as long as necessary for the purposes outlined in this policy or as required by law.

Specific Retention Periods:

Transaction records and invoices: 7 years (required by Canadian tax law)
Customer accounts: Until you request account deletion
Marketing communications: Until you unsubscribe
Website analytics data: 26 months
Customer service interactions: 3 years
Security and fraud prevention logs: 2 years
Cookies and tracking data: As specified in our Cookie Policy (Section 10)

After the retention period expires, we will securely delete or anonymize your personal information. Some data may be retained longer if required by law or to resolve disputes.

7. HOW WE PROTECT YOUR PERSONAL DATA

We implement industry-standard security measures to protect your data:

SSL/TLS encryption for all data transmission
Secure servers with restricted access
Regular security audits and updates
Employee training on data protection
Confidentiality agreements with all employees
Payment information is processed by PCI-DSS compliant payment processors
Two-factor authentication for employee access to systems

While we take all reasonable precautions to ensure that user data is secure, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security, but we continuously work to improve our security measures.

8. DATA BREACH NOTIFICATION (QUEBEC LAW 25 COMPLIANCE)

In accordance with Quebec Law 25, if we experience a data breach that presents a risk of serious harm to you, we will:

Notify you directly as soon as reasonably possible
Notify the Commission d'accès à l'information du Québec (CAI)
Provide you with information about:
- The nature of the breach
- The personal information affected
- The measures we have taken to mitigate harm
- Measures you can take to protect yourself
- Contact information for questions

We maintain a breach response plan and conduct regular security assessments to minimize the likelihood of data breaches.

9. YOUR RIGHTS UNDER QUEBEC LAW 25

Under Quebec Law 25 and other applicable privacy laws, you have the following rights regarding your personal information:

Right to Access: You can request to know what personal data we have collected about you
Right to Rectification: You can request correction of inaccurate or incomplete data
Right to Deletion: You can request deletion of your personal data (subject to legal obligations)
Right to Portability: You can request your data in a structured, commonly used format
Right to Withdraw Consent: You can withdraw consent for data processing at any time
Right to Object: You can object to certain uses of your data, including marketing
Right to Lodge a Complaint: You can file a complaint with the CAI if you believe your privacy rights have been violated

How to Exercise Your Rights:

To exercise any of these rights, please contact our Privacy Officer:

ITFactory Privacy Officer
Email: admin@itfactory.ca
Phone: (888) 313-1124
Address: 4035 St-Ambroise, Montreal, Quebec, H4C 2E1

We will respond to your request within 30 days. There is no fee for exercising your rights, except in cases of excessive or repetitive requests.

10. COOKIE POLICY

A cookie is a small text file stored on your device by a website. Cookies help us improve your experience and understand how you use our website.

Types of Cookies We Use:

Essential Cookies (Required)

These cookies are necessary for the website to function and cannot be disabled:

Shopping cart functionality
Secure login sessions
Payment processing
Security and fraud prevention

Functional Cookies

These cookies remember your preferences and choices:

Language preferences
Currency selection
Items you've viewed
Your account settings

Analytical Cookies

These cookies help us understand how visitors use our website:

Google Analytics (anonymized)
Page views and traffic sources
User behavior patterns
Website performance metrics

Marketing/Targeting Cookies (Requires Consent)

These cookies personalize advertisements and track campaign effectiveness:

Facebook Pixel
Google Ads conversion tracking
Retargeting campaigns
Social media integration

Managing Cookies:

You can control cookies through your browser settings. Note that disabling cookies may affect website functionality. Most browsers allow you to:

View and delete cookies
Block third-party cookies
Block all cookies (not recommended)
Receive alerts when cookies are set

For marketing cookies, you can opt out through our cookie consent banner or by emailing us.

11. CHILDREN'S PRIVACY

Our website and services are not directed to children under the age of 13 (or the applicable age of majority in Quebec). We do not knowingly collect personal information from children.

If we learn that we have collected personal information from a child under 13, we will delete that information as soon as possible. If you believe we have collected information from a child, please contact our Privacy Officer immediately.

12. DO NOT TRACK (DNT)

We respect browser-initiated "Do Not Track" (DNT) signals. If your browser sends a DNT signal, we will not track your browsing behavior for advertising purposes.

13. HOW TO OPT-OUT

You can opt-out of certain data collection and use:

Marketing Emails: Click "unsubscribe" at the bottom of any email or update preferences in your account
Targeted Advertising: Disable marketing cookies through your browser or our cookie banner
Analytics: Use browser plugins like Google Analytics Opt-out
Account Data: Request account deletion by contacting our Privacy Officer

14. LINKS TO OTHER WEBSITES

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We recommend you read their privacy policies before providing any personal information.

15. INTERNATIONAL USERS

Our website is operated in Canada and is subject to Canadian privacy laws. If you are accessing our website from outside Canada, please be aware that your information may be transferred to, stored, and processed in Canada.

By using our website, you consent to the transfer of your information to Canada and agree to the terms of this Privacy Policy.

16. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:

We will update the "Last Updated" date at the top
For material changes, we will notify you by email or prominent notice on our website
We will maintain archived versions of previous policies
Continued use of our website after changes constitutes acceptance of the updated policy

We recommend reviewing this Privacy Policy periodically to stay informed about how we protect your information.

17. CONTACT INFORMATION

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact our Privacy Officer: