Privacy policy
MASHWI (“MASHWIMC”, “we”) complies with Québec’s Act respecting the protection of personal information in the private sector, as amended by Law 25, and with the federal Personal Information Protection and Electronic Documents Act (PIPEDA).
Person responsible for the protection of personal information
As required by Law 25, this role is held by MASHWI’s person responsible for the protection of personal information. You can reach them at support@mashwi.ca, by mail at 4345 Poirier Boulevard, Montréal, Québec H4R 2A4, or through the store’s Contact page.
What we collect, and why
| Information | Purpose |
|---|---|
| Name, shipping and billing addresses, email, phone | Process and deliver your order, contact you about it |
| Payment data (processed by Shopify Payments or the payment provider; we never see your full card number) | Take payment securely |
| Email address (newsletter, waitlist) | Send you The Fire Journal and availability notices, only with your consent |
| Order history and exchanges with support | Handle returns, provide after-sales service, improve service |
| Browsing and device data (cookies) | Keep the cart working, measure site performance |
We collect only what is necessary for these purposes. We do not sell your personal information. Ever.
Consent
Placing an order is consent to the processing needed to fulfil it. Sending marketing emails requires your separate, explicit consent (a checkbox, never pre-ticked), in accordance with Canada’s Anti-Spam Legislation (CASL). Every email contains a one-click unsubscribe link.
Cookies and pixels
Essential cookies keep the cart and checkout working. Analytics and marketing cookies, including the Meta pixel (Facebook/Instagram) and Google tags (Analytics, Ads), only activate after your consent through the cookie banner. These tools may send interaction data (page views, add-to-carts, purchases) to Meta and Google for measurement and advertising purposes. You can withdraw your consent at any time in the banner settings.
Hosting and payment: our relationship with Shopify
Our store is hosted and powered by Shopify Inc., which processes on our behalf the information related to your browsing, your order and your payment. Your information is therefore shared with Shopify and its subcontractors, who may host or process it outside Québec and Canada. This transfer is governed by a written agreement and has undergone the privacy impact assessment required by Law 25.
Shopify also uses some of this data for its own security, fraud-prevention and service-improvement purposes. To learn more, see Shopify’s Consumer Privacy Policy; you can exercise your rights or opt out of those uses through Shopify’s privacy portal.
Who we share it with
Only the providers strictly necessary to run the store: Shopify (hosting and payment), carriers, our email platform. Each is contractually bound to protect your information. Some providers process data outside Québec or Canada; where that happens, we carry out the privacy impact assessment required by Law 25 and frame the transfer with equivalent contractual protections.
Retention
We keep order-related information as long as after-sales service requires (up to 3 years) and tax laws demand (generally 7 years), then destroy or anonymize it securely.
Your rights
You may, at any time: access the personal information we hold about you; have it corrected; withdraw your consent; request its deletion; request that its distribution cease or that it be de-indexed (Law 25); and receive a copy in a structured, commonly used format (portability). Write to us at support@mashwi.ca or through the store’s Contact page: we respond within 30 days.
Confidentiality incident
In the event of a confidentiality incident presenting a risk of serious injury, we will notify you and the Commission d’accès à l’information du Québec, as the law requires.
You may also file a complaint with the Commission d’accès à l’information du Québec or the Office of the Privacy Commissioner of Canada.