Privacy policy

Privacy Policy

Last updated: November 3, 2026

1. Who we are

The website www.santevousgenial.com is operated by Concept Génial Inc., which also does business under the name Santé Vous Génial (“we”).

Address: 42 Montée de l'Église, Mille-Isles, Quebec J0R 1A0, Canada
Phone: 514-605-0369
Email: info@santevousgenial.com

This policy explains what personal information we collect, why we collect it, who we share it with, how long we keep it and what your rights are. It complies with Quebec's Act respecting the protection of personal information in the private sector (as amended by Law 25) and, where it applies, Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

2. Person in charge of the protection of personal information

Carl Berthelette, Concept Génial Inc. (Santé Vous Génial)
Email: info@santevousgenial.com
Phone: 514-605-0369
Address: 42 Montée de l'Église, Mille-Isles, Quebec J0R 1A0, Canada

You may contact him with any question, request or complaint about your personal information.

3. Information we collect and why

We only collect the information needed for the purposes listed below.

  • Online purchase: name, shipping and billing addresses, email, phone number, products purchased and payment information. Purposes: preparing and delivering your order, sending your invoice and tracking, handling returns and warranties, preventing fraud and meeting our tax obligations. Your payment card details are entered directly with the payment provider; we do not have access to your full card number.
  • Customer account (if you create one): name, email, addresses and order history.
  • Booking a wellness session, consultation or activity: name, contact details, chosen date and preferences, to manage your appointment.
  • Naturopathy consultation and questionnaires completed before a wellness session: information about your health and lifestyle. This is health information, and therefore sensitive information. We collect it only with your express consent, solely to offer you a safe service suited to your situation. Access is limited to the people who need it to provide the service. It is never used for marketing and is not shared with anyone without your consent, unless the law requires it.
  • Newsletter and offers: email and first name, only if you check the subscription box yourself. You can unsubscribe at any time.
  • Communications with us (email, phone, form): the information you give us, so we can answer you.
  • Browsing the site: IP address, device and browser type, pages viewed and referring site, through cookies and similar technologies (see section 4).

4. Cookies and tracking technologies

  • Essential cookies (cart, checkout, security, remembering your choices): always active, because they are needed for the site to work.
  • Analytics and marketing cookies: they are activated only if you accept them in the cookie banner. They include audience analytics tools (such as Google Analytics, when used), Shopify analytics, the Meta Pixel (Facebook and Instagram), which is used to measure our ads and show you relevant ads (advertising profiling), and our email tool Klaviyo.

You can change your choices at any time through the banner or the cookie settings link offered on the site. When Google Analytics is used, you can also opt out of it (https://tools.google.com/dlpage/gaoptout) and manage your ad preferences on Facebook (https://www.facebook.com/settings/?tab=ads) and Google (https://adssettings.google.com).

Google reCAPTCHA is used to protect our forms against bots.

5. Who we share your information with

We do not sell or rent your personal information. We only share it with the service providers we need, who must protect it and use it only for the service they provide to us:

  • Shopify: website platform, hosting and payments;
  • PayPal: if you choose this payment method;
  • Systeme.io: registrations and payments for our online programs;
  • Canada Post and other carriers: delivery of your orders;
  • suppliers who ship certain products directly to you;
  • Google: audience analytics tools (such as Google Analytics, when used) and form protection (reCAPTCHA);
  • Meta (Facebook and Instagram): ad measurement and targeting, only if you have accepted marketing cookies;
  • Klaviyo: sending our emails and newsletter;
  • Consentmo: managing your cookie choices;
  • our professional advisers (e.g. accountant), when needed;
  • the authorities, when required by law.

6. Information stored or used outside Quebec

Some of our service providers (including Shopify, Google, Meta, Klaviyo, PayPal and Systeme.io) may store or use your information outside Quebec, including in the United States. In accordance with section 17 of the Act respecting the protection of personal information in the private sector, before communicating information outside Quebec, we assess, among other things, its sensitivity, the purpose of its use, the protection measures in place and the applicable legal framework, and we govern this communication by a written agreement (for example, the provider's contractual terms). Your information may then be subject to the laws of the place where it is located.

7. Retention periods

  • Orders, invoices and accounting records: 7 years, for tax purposes;
  • Naturopathy files and pre-session questionnaires: kept under lock and key for 5 years after the last consultation, then securely destroyed;
  • Newsletter: until you unsubscribe;
  • Cookies: for the period shown in the cookie banner;
  • Other information: as long as needed for the purposes for which it was collected.

At the end of these periods, the information is securely destroyed or anonymized.

8. Security

We take reasonable measures to protect your information: access limited to the people who need it, paper files kept under lock and key, passwords, encrypted connection (HTTPS) and recognized service providers. No system is perfectly secure.

9. In the event of a confidentiality incident

If we have reason to believe that a confidentiality incident has occurred (for example, unauthorized access, use or disclosure, or the loss of information):

  • we promptly take reasonable measures to reduce the risk of harm and prevent the incident from happening again;
  • we assess whether the incident presents a risk of serious harm;
  • if so, we promptly notify the Commission d'accès à l'information and the people concerned;
  • we record every incident in our register of confidentiality incidents.

10. Your rights

At any time, you may exercise the following rights:

  • Access: find out whether we hold information about you and obtain a copy;
  • Correction: have inaccurate, incomplete or ambiguous information corrected;
  • Withdrawal of consent: withdraw your consent to a use or disclosure (for example, unsubscribe from the newsletter or refuse marketing cookies);
  • De-indexing and cessation of dissemination: ask us to stop disseminating information about you or to de-index a link associated with your name, in the cases provided by law;
  • Portability: receive the information you provided to us in a structured, commonly used technological format, or have it sent to the person or organization of your choice;
  • Information: find out which categories of people have access to your information and how long we keep it.

To exercise these rights, write to the person in charge of the protection of personal information (section 2). We will respond within 30 days of receiving your request. Access is free; reasonable copying or transmission fees may apply, and we will tell you in advance. We may need to verify your identity.

11. Complaints

If you are not satisfied with our response, you may file a complaint with Quebec's Commission d'accès à l'information (www.cai.gouv.qc.ca). People who live outside Quebec may also contact the Office of the Privacy Commissioner of Canada (www.priv.gc.ca).

12. Commercial emails

We send you promotional emails or our newsletter only if you have consented, in accordance with Canada's Anti-Spam Legislation (CASL). Every email identifies us and contains a simple unsubscribe link; your request takes effect within 10 business days at most. Emails related to an order or appointment (confirmation, tracking) are not promotional emails.

13. Minors

Our site is not intended for children. We do not knowingly collect information about a person under 14 without the consent of their parent or guardian.

14. Changes

We may change this policy. The date of the last update is shown at the top. If there is a significant change, we will post a notice on the site.

In case of a discrepancy, the French version of this policy is the official version.