Privacy policy

Last updated: October 23, 2025

Crexzia operates this digital platform, including all related digital content, features, tools, and services, to provide you, the customer, with a curated experience for accessing digital materials (the "Services"). Crexzia is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy outlines how we collect, use, and disclose your personal information when you visit, use, or engage in transactions using the Services or otherwise communicate with us. In case of any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy prevails with respect to the collection, use, and disclosure of your personal information.

By using and accessing any of the Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. This Privacy Policy complies with Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

Personal Information We Collect or Use

When we refer to "personal information," we mean any information about an identifiable individual, as defined under PIPEDA. Personal information does not include anonymized or de-identified data that cannot be linked to you. Depending on your interaction with the Services and applicable Canadian laws, we may collect or use the following categories of personal information:

  • Contact details: Your name, email address, billing address, shipping address (if applicable for digital delivery), and phone number.
  • Financial information: Payment card details, financial account information, transaction details, payment confirmation, and other payment-related information.
  • Account information: Your username, password, security questions, preferences, and settings.
  • Transaction information: Details about the digital materials you view, add to your cart, wishlist, or purchase, as well as returns, exchanges, or cancellations.
  • Communications with us: Information included in your communications with us, such as customer support inquiries.
  • Device information: Information about your device, browser, network connection, IP address, and other unique identifiers.
  • Usage information: Data regarding your interactions with the Services, including how and when you navigate or use the Services.

Personal Information Sources

We may collect personal information from the following sources:

  • Directly from you: When you create an account, use the Services, communicate with us, or provide your personal information.
  • Automatically through the Services: From your device when you access our digital materials or visit our platform, including through cookies and similar technologies, subject to your consent where required.
  • From our service providers: When we engage them to enable certain technologies or process your personal information on our behalf.
  • From partners or third parties: Including business or marketing partners, subject to applicable laws.

How We Use Your Personal Information

We use your personal information for the following purposes, in compliance with PIPEDA and other Canadian laws:

  • Provide, Tailor, and Improve the Services: To deliver digital materials, process payments, fulfill orders, remember your preferences, send account-related notifications, manage your account, facilitate returns or exchanges, enable reviews, and create a personalized experience (e.g., recommending digital materials based on your activity). This is based on fulfilling our contract with you or our legitimate interests in improving the Services.
  • Marketing and Advertising: To send marketing communications (e.g., emails or SMS) and display targeted advertisements, with your express consent as required under Canada’s Anti-Spam Legislation (CASL). You may withdraw consent at any time.
  • Security and Fraud Prevention: To authenticate accounts, ensure secure transactions, detect and prevent fraudulent or malicious activities, and protect the Services, based on our legitimate interests in maintaining security.
  • Communicating with You: To provide customer support, respond to inquiries, and maintain our business relationship, based on contractual necessity or legitimate interests.
  • Legal Reasons: To comply with Canadian legal obligations, respond to legal requests from authorities, participate in legal proceedings, or enforce our terms and policies.

How We Disclose Personal Information

We may disclose your personal information to third parties for legitimate purposes, subject to this Privacy Policy and Canadian privacy laws, including:

  • With Shopify and service providers: To enable services such as payment processing, data analytics, customer support, cloud storage, or digital material delivery.
  • With business and marketing partners: To provide marketing services or targeted advertising, with your consent where required. Partners will process your data in accordance with their own privacy policies.
  • With your consent: When you direct us to share data, such as for third-party integrations or social media features.
  • Within our corporate group: With affiliates for internal business purposes.
  • For legal or business purposes: In connection with mergers, acquisitions, bankruptcy, or to comply with legal obligations, enforce terms, or protect the Services and our users.

Relationship with Shopify

The Services are hosted by Shopify, which processes personal information to provide and improve the Services. Your data may be transmitted to Shopify and third parties, potentially in countries outside Canada, to support the Services. Shopify may use data from your interactions with our platform and other merchants to enhance its features, acting as a data controller for such processing. For more information, see the Shopify Consumer Privacy Policy. You can exercise your rights regarding Shopify’s processing via the Shopify Privacy Portal.

Third-Party Websites and Links

The Services may include links to third-party websites or platforms. We are not responsible for their privacy practices, and you should review their policies. Information shared on public or third-party platforms (e.g., social media) may be visible to others, and we are not responsible for its use.

Children's Data

The Services are not intended for children under 19 in British Columbia or 19 in Quebec, as per provincial privacy laws, or 13 elsewhere in Canada. We do not knowingly collect personal information from children under these ages. If you are a parent or guardian and believe your child has provided us with personal information, contact us to request deletion. We do not knowingly "sell" or "share" personal information of minors, as defined by applicable laws.

Security and Retention of Your Information

We implement reasonable technical and organizational measures to protect your personal information, in compliance with PIPEDA. However, no security measures are entirely secure, and data transmitted online may not be secure in transit. We recommend avoiding unsecured channels for sensitive information.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, or enforce contracts, in accordance with Canadian privacy laws.

Your Rights and Choices

Under PIPEDA and applicable provincial laws, you have the following rights regarding your personal information, subject to certain conditions:

  • Right to Access: Request access to the personal information we hold about you.
  • Right to Correction: Request correction of inaccurate personal information.
  • Right to Withdraw Consent: Withdraw consent for certain uses of your personal information, without affecting prior lawful processing.
  • Right to Complain: Lodge a complaint with the Office of the Privacy Commissioner of Canada or a provincial privacy commissioner.

You may exercise these rights by contacting us using the details below or, for Shopify-related processing, via the Shopify Privacy Portal. You may also opt out of marketing communications at any time using the unsubscribe option in our emails or by contacting us. We will verify your identity before processing requests and respond within 30 days, as required by PIPEDA.

International Transfers

We may transfer your personal information outside Canada, including to Shopify or other service providers. We ensure that such transfers comply with PIPEDA, using safeguards like contractual agreements to protect your data in accordance with Canadian privacy standards.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will post the updated policy on our platform, update the "Last updated" date, and provide notice as required by Canadian law.

Contact

For questions about this Privacy Policy or to exercise your rights, contact us at crexzia358@outlook.com  or at 11 Rue Henri Ferré, 69004 Lyon, France. Crexzia is the data controller of your personal information under Canadian law.