Privacy Policy

Elysabel Production

www.elysabel.com

Type of site: transactional

At Elysabel Production, we attach great importance to protecting the personal information of our customers, employees and representatives. In accordance with the law on the protection of personal information in the private sector, we are committed to preserving the confidentiality of personal information collected in the course of our activities. The purpose of our privacy policy is to inform you about our practices regarding the collection, use, disclosure, retention and protection of your personal information. By providing us with your personal information, you agree to the terms of this policy and authorise us to process your information in accordance with this policy.

The purpose of this privacy policy is to inform users of our site of the personal data we will collect as well as the following information, where applicable:

The personal data we will collect on our site
The use of the data collected
Who has access to the data collected
The rights of site users
The site's cookie policy

1. Applicable laws

This policy complies with the laws set out in the Personal Information Protection and Electronic Documents Act (PIPEDA).

For residents of EU countries, the General Data Protection Regulation (GDPR) governs all data protection policies, regardless of the location of the site. This privacy policy aims to comply with the GDPR. If there are any inconsistencies between this policy and the GDPR, the GDPR will apply.

For residents of the State of California, this privacy policy aims to comply with the California Consumer Privacy Act (CCPA). If there are any inconsistencies between this document and the CCPA, state law will apply. If we find any inconsistencies, we will amend our policy to comply with the relevant law.

For residents of Quebec, this privacy policy is intended to comply with Law 25. If we find any inconsistencies, we will amend our policy to comply with the relevant law.

2. Consent

2.1 Commitment to privacy

We are committed to protecting the privacy of our users. We collect and use personal information only with their explicit consent and in compliance with applicable laws.

2.2 Acceptance of the terms of our policy

By accessing our website or providing us with personal information, you agree to the terms of our privacy policy. This includes your consent to the collection, storage and use of your personal information in accordance with this policy.

You agree to this privacy and cookie policy.

2.3 Right to withdraw consent

You have the right to withdraw your consent at any time. However, this is subject to certain legal or contractual restrictions. We will inform you of the possible consequences of such withdrawal, such as the impossibility of providing certain products or processing certain requests. Your decision to withdraw will be recorded in our files.

2.4 Exceptions to the need for consent

In certain exceptional circumstances, we may collect, use or disclose personal information without obtaining your prior consent. This may occur in situations where legal, medical or security requirements make it impossible or impractical to obtain your consent. These situations include, but are not limited to, cases of suspected breach of contract, fraud prevention or detection, or law enforcement needs.

3. Collection of personal information

3.1 We collect personal information through various means, such as:

Emails and communications with our customer service department
Online request forms (including appointments)
Shopping platform on our online store
Mobile application offered to our customers
Cookies and similar technologies on our website
Video surveillance

3.2 We may also collect information via third parties, such as:

A technology service provider such as an order platform or newsletter service.
A recruitment portal that allows candidates to submit their CV and personal data.
Professional social networks such as LinkedIn for recruitment or marketing purposes.
A consultant who provides some of the services we offer to our clients.
An agency responsible for answering questions or handling complaints from our customers.
A customer satisfaction survey company that collects feedback on our products or services.
An online payment service provider to process financial transactions.
A cloud computing company storing customer data.
A digital marketing company analysing user behaviour on our website.
An IT security service provider that monitors threats and protects data.
A customer relationship management (CRM) company that helps organise and analyse interactions with customers.
A logistics provider managing product delivery and collecting information about recipients.

3.3 We may use advanced technologies to collect personal information, in particular to identify, locate or profile our customers (for example, to create consumer profiles). However, we are committed to protecting the privacy of our customers:

Responsible use of technology: We use these technologies only to improve our services and better understand the needs of our customers.

3.4 Information exchanged automatically on our website

When you access our site, your computer and the site's server automatically exchange information. This communication is necessary for the server to transmit a file compatible with the computer equipment you are using. The following information is exchanged:

The domain name of your Internet service provider;
your IP address, a unique number assigned to your computer when it is connected to the Internet;
the type of browser (Explorer, Firefox, etc.) and operating system (Windows, Mac OS, etc.) used;
the date and time of the visit;
the pages you visit;
the address of the referring site, if you access our site from another site.

This information is stored and used on our website hosting platform (Wix) for technical and statistical purposes. It is used to count the number of visits, the most frequently visited pages, the technology used by visitors, the referring sites and the country of origin of visitors.

We are committed to being transparent about the use of these technologies and to respecting the privacy choices of our customers.

4. Types of personal information collected

4.1 We collect various types of data, including but not limited to:

Personal identifiers (name, postal address, email, telephone number)
Technical or digital information (IP address, online activities)
Financial information (payment details)
Demographic data (place of residence)

We are committed to ensuring the protection of the confidential information that you entrust to us. If you voluntarily communicate personal or otherwise confidential information by email or by form to subscribe to the newsletter or for a request, we only use the information required to enable our team to respond to your message or to follow up on your request. Electronic correspondence is treated with the same confidentiality measures as other written documents.

4.2 Children's privacy

We do not knowingly collect or solicit personal information from children under the age of 14. By using our website, you declare that you are at least 14 years old. If you are under 14, please do not attempt to send us any personal information. If we discover that we have inadvertently collected personal information from a user under the age of 14, we will attempt to delete this information immediately from our files and records. We also encourage underage users of the website aged 14 or over to ask their parents or guardians for permission before sending any information about themselves on the Internet.

If you believe that a child under the age of 14 has provided us with personal information, please contact us using the details provided in the following section.

5. Use of personal information

5.1 We use your personal information for a range of essential activities:

- Responses to requests: To respond effectively to your requests and queries.
- Transaction management: Processing payments and issuing receipts for transactions made.
- Registrations and participations: Managing your registrations for events, training courses, newsletters, downloads from our website, or participation in webinars.
Human resources management: For internal management and human resources administration, recruitment, employment contracts and service agreements.
Improving the user experience: Operation, maintenance and improvement of our website, personalisation of your online experience, and provision of requested services and information.
Marketing communication: Sending information, special offers and relevant news, with the option to unsubscribe at any time.
User account management: Managing your user account to access various features of our site.

These uses are intended to enrich your experience with our services and to facilitate effective interaction with our organisation.

5.2 We offer various options to allow you to control and limit the collection of your personal information. These options include:

Communication choices: You can choose to receive our communications by different means (telephone, SMS, email), or to refuse them completely.
Account settings: When creating an account on our site, you have the option of opting out of certain services or loyalty programmes.
Cookie management: Our site allows you to refuse or customise the use of cookies. Please note that blocking some cookies may affect the accessibility and functionality of our site.
Granular consent: In most situations, when we collect information for specific purposes, you have the option of consenting only to certain uses of your data.

It is important to note that some of these options may limit your access to all the features of our service. For example, by refusing certain cookies, some parts of our website may not function as expected, or by choosing not to create an account, some personalisation features may not be available.

6. Sharing and disclosure of personal information

6.1 The personal information collected by our organisation is accessible to specific categories of our personnel and to certain partner organisations, with the aim of providing our products and services in an efficient manner. For example:

Customer service: Accesses contact information to respond to requests.
IT department: Accesses technical data for support and maintenance.
Marketing department: Uses data for advertising campaigns and market research.
Delivery partners: Receive addresses for order delivery.
Payment service providers: Access financial information for transaction processing.
Personal information and data security managers: Access information to ensure data security and protection against unauthorised access or cyberattacks.
Legal consultants: Use the data to ensure compliance with applicable laws and regulations.
Cloud service providers: Host data on secure servers, enabling the storage and retrieval of information.
Research and development partners: Access certain data to collaborate on new innovations or product/service improvements.
Collection agencies: In the event of non-payment, certain information may be shared with external collection agencies.

We ensure that this information is used exclusively for the stated purposes and with respect for confidentiality. Data transfers outside Quebec are carried out within the framework of international collaborations, while ensuring adequate protection of the information in accordance with the laws in force.

6.2 We may share user data processed on our website with the following third parties:

Wix Online Platform Limited: This website is hosted by Wix Online Platform Limited. Address: 1 Grant's Row, Dublin 2 D02HX96, Ireland. Wix.com is a processor for data from visitors to our site. This means that Wix will only process data from visitors to our site on our instructions and on our behalf. Wix.com will not process data from visitors to our site for its own purposes. To find out more about Wix's privacy policy, visit https://fr.wix.com/about/privacy
Website visitor analysis tools: This site uses web audience measurement tools. These tools collect information about your browsing on this site, which is stored on servers located in the United States or Canada.

These tools may communicate this information to third parties where there is a legal obligation to do so or where such third parties process the data on their behalf. The information collected by these tools includes, for example, the pages you visit, the date, time, duration and frequency of your visits, and the links you click. The type of operating system and language of your computer, the name of your Internet service provider and your geographical location (region) are also among the items of information collected. Your IP address is also collected, but it is anonymised (truncated) to ensure the confidentiality of your personal information.

Anonymising an IP address prevents the identity of an internet user from being known through it. These tools only use the information collected to produce statistics and reports on browsing on this site, which allows us to improve its electronic service delivery. Under no circumstances will the information collected on this site be linked to any other data it holds.

Other disclosures: We undertake not to sell or share your data with other third parties, except in the following cases:
- - if required by law;
- - if required for any legal proceedings
- - to prove or protect our legal rights
- - to buyers or potential buyers of this company in the event that we seek to sell it the company

7. Links to other websites

7.1 Our website may contain links to third-party websites

When you follow these links, you leave our website. The information exchanged at that time is no longer subject to our privacy policy. We recommend that you review the privacy statements of the other websites you visit before providing any information.

8. Security of personal information

8.1 Security measures for the protection of personal information

To ensure the security and confidentiality of personal information, we adopt rigorous security measures, including both physical and technological aspects. Here are some concrete examples:

Physical security: Use of electronic locking systems and security locks for access to offices, cupboards and filing cabinets, installation of surveillance cameras, and restriction of access to areas where personal data is stored.
Access controls: Restriction of access to personal data to authorised employees only.
Staff training: Regular awareness-raising among staff of best data security practices.
Intrusion monitoring and detection: Implementation of systems to monitor any suspicious activity and detect potential intrusions.
Disaster recovery plans: Development of plans to quickly restore data in the event of an incident such as a breakdown or cyberattack.

Data encryption: Wix uses HTTPS, TLS 1.2+ and automatic SSL so that our site data (e.g. user data) is protected regardless of location.

AES-256, the strongest encryption available, encrypts user data at rest, so that it is protected during storage.

Wix provides two levels of integrated DDoS protection: one to protect us against fraudulent incoming traffic and the other to manage the massive traffic flow caused by a DDoS attack.

We assure you that our company is protected thanks to Wix's international security standards and compliance with SOC 2 Type 2, PCI DSS Level 1, GDPR, CCPA, LGPD and ISO standards.

While we take all reasonable precautions to ensure that our user data is secure and that users are protected, there is always a risk of harm. The Internet as a whole can sometimes be insecure, and therefore we are unable to guarantee the security of user data beyond what is reasonably practical.

These measures are intended to protect personal information from unauthorised access, use or disclosure, and to maximise its integrity and confidentiality. Although we do our utmost to protect your personal data, it is important to bear in mind that no method of transmission over the Internet or electronic storage is 100% secure. We therefore cannot guarantee its absolute security.

8.2 International data transfers

User data may be accessed, processed or collected in the following countries:

To our knowledge, the data is collected for statistical purposes by Wix and Google. It is not possible to define the exact countries of the servers to which the data is transmitted to these third parties. However, we know that some data may be collected in the following countries:

United States (Google Analytics)

Ireland (Wix)

8.3 Commitment of staff and/or board of directors

Every employee, director, volunteer, independent contractor or ad hoc advisor working on the committees of our board of directors undertakes to respect the personal information we collect. In addition, these individuals undertake to maintain the confidentiality of information specific to our activities and not to disclose it or make personal use of it or use it for the benefit of others. This commitment exists from the moment the employee, director, volunteer, independent contractor or ad hoc advisor takes up their position and continues indefinitely.

9. Retention and destruction of personal information

We will only retain your personal data for as long as is necessary for the purposes set out in this privacy policy. We will retain and use them to the extent necessary to comply with our legal obligations, resolve disputes and enforce our legal policies.

We will also retain usage data for internal analysis purposes. This data is generally retained for a shorter period of time, unless it is used to enhance the security or improve the functionality of our website, or we are legally obligated to retain it for a longer period of time.

10. Your rights

10.1 Recognition of and respect for your rights

As part of our privacy policy, we recognise and respect the fundamental rights of the people concerned by the personal information we hold. These rights include:

Right of access: Individuals have the right to consult the personal information we hold about them. For example, a customer may request to see the data collected when they registered for our service.
Right of rectification: If information is inaccurate or incomplete, the persons concerned may request that it be updated. For example, an employee may request that their incorrect postal address in our records be corrected.
Right to de-indexing: Individuals may request that their personal information be removed from distribution or that any hyperlink associated with their name be de-indexed, in the event that such distribution causes them harm or is in violation of the law or a court order. This right to erasure or to be forgotten allows individuals to control the availability of their personal information on the internet.
Right to lodge a complaint: In case of concerns regarding the processing of their data, individuals may lodge a complaint in accordance with our established process.

Subject to applicable laws, upon receipt of a written request from an individual and after verification of his or her identity, we will inform the individual if we hold any personal information about him or her and provide that information.

We may refuse a person access to their information in accordance with applicable laws, in which case we will give reasons for the refusal.

To facilitate these rights, the contact details of our Privacy Officer are clearly indicated for any questions or concerns. These measures ensure that individuals can exercise their rights with confidence and transparency.

11. Policy changes

This policy may be updated to reflect changes in our practices or legal requirements. Changes will be posted on our website. We encourage you to review this privacy policy regularly to keep informed of any changes.

12. Cookie policy

12.1 What is a cookie?

A cookie is a small file made up of letters and numbers that is downloaded to your computer when you access certain websites. Cookies generally allow a website to recognise the user's computer.

The most important thing to know about the cookies we place is that they serve to improve the user-friendliness of our website, for example by remembering site preferences and language settings.

12.2 Why do we use cookies?

We may use cookies and other similar technologies for a number of reasons, for example: i) for security or fraud protection purposes, and to identify and prevent cyber-attacks, ii) to provide you with the service you have chosen to receive from us, iii) to monitor and analyse the performance, operation and effectiveness of our service, and iv) to improve your user experience.

12.3 What types of cookies are used?

Functional cookies: We use these to remember all the selections you make on our site so that they are saved for your next visits.
Analytical cookies: These allow us to improve the design and functionality of our site by collecting data on the content you access and on which you engage using our site.
Targeting cookies: These cookies collect data about how you use the site and your preferences. This allows us to make the information you see on our site more promotional and targeted to you.

12.4 Cookies table

Consult the table at the following address to find out which cookies are placed by default on our site. Some cookies may be added by external applications such as Google Analytics, Facebook or other.

https://support.wix.com/fr/article/les-cookies-et-votre-site-wix

12.5 Your choices

To learn more about cookies, including how to see what cookies have been set and understand how to manage, delete or block them, visit:

https://www.allaboutcookies.org/fr/

It is also possible to prevent your browser from accepting cookies by changing the relevant settings in your browser. You can usually find these settings in the ‘Options’ or ‘Preferences’ menu of your browser.

Please note that deleting our cookies or disabling future cookies or tracking technologies may prevent you from accessing certain areas or features of our services, or may otherwise negatively affect your user experience.

To opt out and prevent your data from being used by Google Analytics on all websites, see the following instructions: https://tools.google.com/dlpage/gaoptout?hl=fr.

12.6 Modifications

We may modify this cookie policy. We encourage you to consult this page regularly for the latest information on cookies.

13. Contact

Any request or question regarding this privacy policy may be sent to the person responsible for the protection of personal information at the following address:

Name of contact person: Isabelle Aubry

By email: magie@elysabel.com
By post: 147 Grande Côte Ouest, Lanoraie, Qc, J0K 1E0

Effective date of the policy: 14 September 2023

Last updated: 13 March 2025