Our personal data protection policy is designed to foster a relationship of trust between you and our services. It explains transparently how GESTION CHEF PAUL TOUSSAINT INC processes your personal data when you use https://imaginelamaison.com, in all its versions and related applications (the “Imagine La Maison Website”).
GESTION CHEF PAUL TOUSSAINT INC is committed to complying with Regulation (EU) 2016/679 of 27 April 2016 (the “GDPR”) and the French Data Protection Act No. 78-17 of 6 January 1978, as amended, by providing you with information about the processing activities carried out (Section 3), your rights (Section 6), any transfers outside the European Union (Section 8), retention periods (Section 5), and security measures (Section 9).
When we refer to “you” in this Policy, you are a customer of Imagine La Maison if you have placed an order through the Website, an account holder if you created an account without placing an order, or a visitor if you browsed the Website without creating an account or placing an order.
GESTION CHEF PAUL TOUSSAINT INC, a corporation incorporated under the laws of Canada, registered under number 788071504 and having its registered office at 2025 rue d’Auvergne, Laval, Quebec H7G 2G8, Canada, is the controller of your personal data within the meaning of Article 4 of the GDPR.
Your personal data may be collected when you visit the Website (cookies and other trackers; see Section 7), create a customer account, place an order, contact customer service, submit a review, or subscribe to our communications by email or SMS.
Processing related to your use of the Website relies on different legal bases depending on its purpose: your consent for non-essential cookies (see Section 7), and our legitimate interests or performance of a contract for operations strictly necessary to the functioning of the Website.
We use your data to manage orders, payments, delivery and transportation, after-sales service, customer relations (including through social media), and refunds. The legal basis is performance of the contract. Compliance with our legal obligations is the basis for processing relating to invoicing, accounting, and product recalls under Regulation (EU) 2023/988. Depending on the circumstances, marketing activities are based on your consent or our legitimate interests.
This processing, based on performance of the contract and our legitimate interests, enables us to secure payments, prevent fraud, and recover outstanding amounts. It is carried out primarily by our payment service providers, including Shopify Payments.
To enable you to share reviews with our customers and visitors, we process your data on the basis of your consent or our legitimate interests. The collection, moderation, and publication of reviews are described in Article 13 of our Terms and Conditions of Sale.
With your consent, obtained through an unticked opt-in box—or, for products similar to those you have already purchased, on the basis of our legitimate interests and subject to your right to object—we may send you offers and news by email or SMS. Under Article 21(2) of the GDPR, you may object at any time, free of charge and without giving reasons, to processing for direct-marketing purposes, including any related profiling.
The Website is not intended for children under the age of 15 acting on their own. In accordance with Article 45 of the French Data Protection Act (which sets the age of digital consent at 15 pursuant to Article 8 of the GDPR), consent-based processing of the personal data of a child under 15 is lawful only where consent is given jointly by the child and the holder or holders of parental responsibility.
Your personal data is disclosed to third parties only in the following circumstances:
We do not sell your personal data.
| Data | Retention period |
|---|---|
| Prospect data (no purchase) | 3 years from the prospect’s last contact |
| Customer and order data | For the duration of the commercial relationship, followed by archival retention to meet accounting and tax obligations: 10 years for accounting records |
| Payment-card data | Not retained by the Website; retained by the payment provider for the duration of the transaction and for up to 13 months after the debit (15 months for deferred debit) as evidence in the event of a dispute. Beyond that period, it is retained only with your explicit consent to facilitate future purchases |
| Cookies and other trackers | See Section 7 below (your choice—consent or refusal—is stored for 6 months; tracker lifespan is limited to 13 months) |
| Data-subject rights requests | 5 years from the date of our response |
These periods are subject to any applicable limitation periods for data relevant to current or reasonably foreseeable legal proceedings.
6.1. You may request access to, correction of, and updating of your personal data.
6.2. You may request restriction of processing, in particular where you contest the accuracy of the data while it is being verified; where you believe processing is unlawful and prefer restriction to erasure; where we no longer need the data but you require it to establish, exercise, or defend legal claims; or while an objection is being considered.
6.3. You may request erasure of your data. We may nevertheless retain, in intermediate archives, data required to comply with our legal, accounting, and tax obligations.
6.4. You may object to processing for direct-marketing purposes: for email, by using the “unsubscribe” link in each message or the Website’s contact page; for SMS, by replying STOP to any message received.
6.5. You may provide instructions concerning the retention, erasure, and disclosure of your data after your death, pursuant to Article 85 of the French Data Protection Act.
6.6. You have the right to data portability.
6.7. Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
6.8. You may lodge a complaint with the competent supervisory authority. In France, this is the CNIL (www.cnil.fr).
Exercising your rights: Send your request, together with your first and last name and email address, by email to contact@imaginelamaison.com or by post to 2025 rue d’Auvergne, Laval, Quebec H7G 2G8, Canada. We will request proof of identity only where we have reasonable doubts about your identity, in accordance with CNIL guidance. We will respond within one (1) month of receiving your request. This period may be extended by two (2) months where the request is complex or numerous requests have been received; if so, we will inform you of the extension and the reasons for it within the initial one-month period, in accordance with Article 12(3) of the GDPR.
When you browse the Website, it may, depending on your choices, place a text file known as a cookie on your device (computer, phone, or tablet) through your browser. For the duration of its validity, the cookie enables your device to be recognised on subsequent visits. Only the issuer of a cookie may read or modify the information it contains. Other tracking technologies, including pixels, SDKs, and local storage, are subject to the same rules; the term “cookie” includes these technologies throughout this Policy.
In accordance with Article 82 of the French Data Protection Act (implementing Directive 2002/58/EC, the “ePrivacy Directive”) and the CNIL’s guidelines and recommendation on cookies and other trackers:
Refusing non-essential cookies will not prevent you from browsing the Website or placing an order.
Strictly necessary cookies (consent-exempt):
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _shopify_y | Shopify | Technical identification of session/visitor | 12 months |
| _shopify_s | Shopify | Browsing session | 30 minutes |
| cart / cart_ts / cart_sig | Shopify | Shopping-cart contents and integrity | 14 days |
| secure_customer_sig | Shopify | Customer-account authentication | 12 months |
| checkout_token | Shopify | Technical checkout tracking | 12 months |
| localization | Shopify | Stores language/country preference | 12 months |
| Quickstarter | Quantum Scaling | Records your consent choices | 6 months |
Audience-measurement cookies (with consent):
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _shopify_sa_p / _shopify_sa_t | Shopify | Store usage statistics | 30 minutes |
| _ga / _ga_* | Google Analytics | Audience measurement | Up to 13 months |
Advertising and personalisation cookies (with consent):
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _gcl_au | Google Ads | Advertising conversion attribution | 3 months |
| IDE / test_cookie | Google DoubleClick | Retargeting and advertising delivery | Up to 13 months |
| _fbp / _fbc | Meta (Facebook, Instagram) | Conversion tracking and retargeting | 3 months |
| _ttp | TikTok | Conversion tracking and retargeting | 13 months |
| _pinterest_sess / _pin_unauth / _epik | Conversion tracking and retargeting | 12 months | |
| _rdt_uuid | Advertising conversion tracking | 3 months | |
| VISITOR_INFO1_LIVE / YSC | YouTube (Google) | Records videos viewed and supports personalisation | 6 months |
| ebay / dp1 / nonsession | eBay | Affiliate and advertising conversion tracking | 12 months |
| bcookie / li_sugr | B2B advertising conversion tracking | 12 months | |
| MUID / _uetsid / _uetvid | Microsoft Advertising (Bing) | Advertising conversion tracking | Up to 13 months |
| personalization_id | X (Twitter) | Conversion tracking and retargeting | Up to 13 months |
| sc_at / _scid | Snapchat | Advertising conversion tracking | Up to 13 months |
Cookies set by third-party applications integrated into the Website: The Website may include third-party features, such as social-media sharing or review buttons. Those third parties apply their own privacy policies, which we do not control.
Your browser also allows you to configure cookie acceptance through the help menus in Chrome, Safari, Firefox, Edge, and Opera. Browser settings supplement the consent mechanism described in Section 7.2; they do not replace it. Blocking certain strictly necessary cookies may impair browsing or prevent checkout.
Data collected through cookies is processed under the conditions set out in this Policy, which also explains your rights (Section 6) and how to exercise them.
Your data is hosted and processed by service providers, some of which are located outside the European Union. In particular:
Any other transfer to a third country is made subject to an appropriate safeguard within the meaning of Articles 44 to 49 of the GDPR, including Standard Contractual Clauses where applicable. You may request further information about these transfers, including a copy of the applicable safeguards, by contacting contact@imaginelamaison.com.
In accordance with Article 32 of the GDPR, we and our service providers implement technical and organisational measures designed to ensure a level of security appropriate to the risks, including encryption of communications (HTTPS/TLS), access controls, logging, and backups. Payments are processed by PCI DSS-certified providers; the Website does not store complete payment-card details.
If a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the CNIL within 72 hours and, where the risk is high, notify you directly, in accordance with Articles 33 and 34 of the GDPR.
Our payment service providers may carry out automated fraud-risk analysis under Article 22 of the GDPR where necessary to enter into and perform the contract. A transaction may be declined if the assessed risk is considered too high. You may request human intervention, express your point of view, and challenge the decision by contacting customer service.
This Policy is updated whenever necessary to remain compliant with applicable law and is reviewed at least once every three (3) years. If a material change is made, including to the data collected, the purposes of processing, or recipients, we will notify you by appropriate means, such as a Website banner or email, before the change takes effect.
If the store is sold, acquired, or merged, your data may be transferred to the new operator. Any such transfer will remain subject to applicable law and appropriate prior notice.
All rights reserved — Policy last updated September 5, 2026.