Privacy Policy

1. Our Commitment to Your Privacy

LOUPH ALLEN Clothing Canada ("LOUPH ALLEN", "we", "our", or "us") operates the e-commerce storefront located at https://louphallenclothing.ca. We adhere to the 10 fair information principles under the Canadian federal Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, provincial private-sector privacy legislation including Quebec's Act respecting the protection of personal information in the private sector (Law 25), Alberta’s PIPA, and British Columbia’s PIPA.

2. Personal Information We Collect

We only collect personal information necessary to fulfill your fashion orders, process secure transactions, and provide bespoke client concierge services:

• Contact & Identification Details: Full name, Canadian delivery address, billing address, email address, and Canadian telephone number (for tracked carrier dispatch notifications).
• Order & Transaction Records: Purchased garments, sizes, colors, order value in CAD, and delivery tracking references. Payment details (e.g., credit card numbers) are processed through tokenized 256-bit SSL encryption via Stripe Canada; Louphallen never stores complete card numbers or CVV codes on our servers.
• Customer Account & Preferences: Wishlist selections, saved delivery addresses, size preferences, and verified purchase reviews.
• Technical & Session Data: IP address, device type, browser metadata, and cart session cookies to maintain your shopping bag.

3. Purpose and Legal Basis for Processing

Your information is collected and used strictly for legitimate commercial purposes:

• Fulfilling and dispatching your orders with UPS Canada across all 10 provinces and 3 territories.
• Calculating provincial sales taxes (GST, HST, PST, QST) as mandated by the Canada Revenue Agency (CRA), BC Ministry of Finance, and Revenu Québec.
• Issuing official bilingual Canadian tax invoices and receipts (`en-CA` / `fr-CA`).
• Sending transactional order confirmations, UPS 1Z tracking milestones, and customer service updates.
• Sending marketing communications only where express consent has been granted under Canada's Anti-Spam Legislation (CASL).

4. Sharing and Disclosure of Information

We do not sell, rent, or trade your personal data. We disclose information only to vetted third-party service providers essential to completing your order:

• Payment Processors: Stripe Payments Canada, Ltd. for secure, PCI-DSS Level 1 encrypted CAD credit and debit card payment processing.
• Carriers & Logistics Partners: UPS Canada for real-time shipping rate calculation, package label generation, and physical parcel delivery across Canadian provinces and territories.
• Tax & Legal Authorities: Where required by law to comply with Canadian tax obligations or statutory legal requests.

5. Data Retention, Security, Storage Location & Cross-Border Transfers

All personal data collected is encrypted in transit and at rest using industry-standard TLS 1.3/256-bit SSL cryptography and hosted within secured North American cloud hosting environments adhering to SOC 2 and ISO 27001 standards. In compliance with Quebec Law 25 transparency obligations:

• Data Storage Location: Primary customer account data, orders, and Canadian tax invoices are stored on secured servers located within Canada.
• Third-Party Processors & Service Providers: We engage only vetted service providers bound by strict confidentiality and Canadian data protection agreements:
  • Stripe Payments Canada, Ltd. — PCI-DSS Level 1 compliant tokenized CAD payment processing.
  • UPS Canada — Domestic package routing, 1Z barcode tracking, and physical address delivery across Canadian provinces.
• Retention & Purging: Financial and tax transaction records are retained for 7 years to fulfill Canada Revenue Agency (CRA) statutory requirements. Temporary cart session identifiers and unconsented cookies expire automatically within 30 days.

6. Your Rights Under Canadian Law (PIPEDA, BC PIPA & Quebec Law 25)

Canadian residents enjoy statutory rights regarding their personal information:

• Right of Access & Portability: Request a computerized copy of the personal information we hold about you.
• Right to Rectification: Correct or update inaccurate contact or shipping information via your account profile or by contacting our Privacy Officer.
• Right to Deletion / Withdrawal of Consent: Request the deletion of your account or withdraw consent for marketing communications or optional cookies at any time via our Cookie Preference Center.
• Bilingual Support (`en-CA` & `fr-CA`): Exercise your privacy and consumer rights in either English or Canadian French.