This English version is provided for convenience. The French version is the legally governing text.
Protection of personal information on hapi-auto.ca
HAPI AUTO AXION INC. ("HAPI AUTO", "we", "our") respects the privacy of its customers, visitors and partners. This policy explains, in plain language, what personal information we collect, why we use it, with whom it may be shared, how long it is retained and how to exercise your rights.
This policy applies to the www.hapi-auto.ca website, online purchases, communications with our customer service, customer accounts, returns, warranties, newsletters and other interactions related to our e-commerce activities.
Plain-language summary We collect only the information reasonably necessary to operate the store, process and deliver orders, verify product compatibility, prevent fraud and provide after-sales service. We do not sell or rent your personal information. Non-essential cookies and promotional communications are managed according to your choices and applicable laws. |
|---|
1. Company identity and privacy officer
HAPI AUTO AXION INC. is a Canadian share corporation, federal corporation number 1790066-0, registered in Quebec under NEQ 1182119249. Its head office is located at 302-3126, boulevard Neilson, Québec (Québec) G1W 2V4, Canada.
The President of HAPI AUTO acts as the person in charge of the protection of personal information, unless otherwise delegated in writing. This person ensures compliance with applicable laws, handles access or rectification requests and receives questions or complaints relating to privacy.
| Person in charge | President of HAPI AUTO AXION INC. – Person in charge of the protection of personal information |
|---|---|
| contact@hapi-auto.ca (subject: Privacy) | |
| Phone | +1 418 559-6860 |
| Address | 302-3126, boulevard Neilson, Québec (Québec) G1W 2V4, Canada |
| Website | www.hapi-auto.ca |
2. Applicable laws and principles
Our practices are governed primarily by Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Loi sur la protection des renseignements personnels dans le secteur privé) and, where it applies in particular to interprovincial or international flows, by Canada's Personal Information Protection and Electronic Documents Act (Loi sur la protection des renseignements personnels et les documents électroniques). Commercial electronic communications are also managed in accordance with applicable Canadian anti-spam legislation.
In particular, we apply the principles of accountability, transparency, limiting collection, consent, security, accuracy, access and complaint handling.
3. Personal information we collect
Personal information is information about a natural person that makes it possible to identify them directly or indirectly. Depending on your interaction with HAPI AUTO, we may collect the following categories:
| Category | Examples | Main purposes |
|---|---|---|
| Identity and contact details | Name, address, email, phone, language of communication | Create and manage the account, process the order, deliver, communicate with the customer. |
| Order and vehicle | Products, quantities, history, year/make/model/trim, compatibility notes | Complete the sale, verify compatibility, provide after-sales service and improve the catalogue. |
| Payment and billing | Amount, taxes, payment status, card type, last four digits, billing address | Authorize and reconcile the payment, prevent fraud, produce invoices and comply with tax obligations. The full card number is processed by the payment provider. |
| Shipping and returns | Address, delivery instructions, tracking number, proof of delivery, photos of a product or parcel | Ship, track, investigate a delivery, manage returns, warranties and recalls. |
| Customer service | Messages, calls, requests, complaints, reviews, photos or videos submitted | Respond, document the file, resolve a problem and improve services. |
| Technical data | IP address, browser, device, system, logs, pages viewed, cookie identifiers | Operate and secure the site, remember preferences, measure performance and detect abuse. |
| Marketing and preferences | Consent, interests, interactions with emails and advertisements, unsubscription | Send authorized communications, personalize campaigns and measure their effectiveness. |
| Fraud prevention | Risk signals, payment attempts, unusual activity, information necessary for a verification | Protect customers, payments, accounts and systems. |
We do not seek to collect medical, biometric, detailed financial or otherwise highly sensitive information, unless it becomes strictly necessary for a particular request, with the required protections and consents.
4. How we collect information
4.1 Directly from you
when you create an account, place an order or fill out a form;
when you contact us by email, phone, chat or social media;
when you request a return, a refund, a warranty or a compatibility check;
when you sign up for a newsletter, take part in a promotion or post a review;
when you voluntarily submit a photo, a video or a document.
4.2 Automatically through technological means
The site and its technical services may collect connection data, the IP address, the device type, the browser, pages viewed, cart actions, errors, session identifiers and the cookies necessary for functioning, security and performance measurement.
4.3 From third parties
We may receive limited information from payment providers, carriers, order fulfillment partners, suppliers, analytics tools, advertising platforms, social networks or anti-fraud services. We use this information only for the purposes stated and permitted by law.
5. Why we use information
create, authenticate and administer a customer account;
process orders, payments, taxes, invoices, deliveries and tracking;
verify or document the compatibility of an accessory with a vehicle;
manage returns, refunds, warranties, recalls and service requests;
prevent fraud, secure accounts, the site, payments and systems;
answer questions, personalize support and improve the customer experience;
measure site performance, fix errors and improve the catalogue;
send necessary transactional messages about an order, an account, a recall or security;
send promotional communications when we have consent or another permitted basis, with an unsubscribe mechanism;
comply with tax, accounting, legal and regulatory obligations and legitimate requests from authorities;
establish, exercise or defend a right or a claim.
We do not use personal information for a new purpose incompatible with the one stated without obtaining the required consent or another legal authorization.
6. Payments
Online payments are processed by Stripe or by another secure payment provider enabled on the site. The provider receives the information necessary for authorization and fraud prevention. HAPI AUTO does not directly retain the full number of your card or its security code. We may retain the transaction status, the card type, the last four digits, the amount and the references necessary for accounting and customer service.
Never send a full payment card number by email, general form, chat or social media message.
7. Cookies, analytics, advertising and profiling
7.1 Categories of cookies
Strictly necessary cookies: cart, session, security, authentication, language choice and order processing;
Preference cookies: remembering certain settings and the selected vehicle;
Measurement and analytics cookies: understanding site usage, performance and page improvement;
Advertising cookies: measuring campaigns, frequency capping and presenting more relevant advertisements, when enabled.
Where the law or context requires, non-essential cookies and technologies are disabled by default and are only enabled after your choice in the preference centre. You can change or withdraw this choice at any time using the "Privacy preferences" link provided on the site. Blocking certain necessary cookies may prevent the cart, payment or account from working properly.
7.2 Identification, location and profiling
Certain technologies may recognize a browser, estimate a region from the IP address or analyze the pages, products, vehicles and campaigns that generate interest. This analysis may constitute profiling within the meaning of the law. Non-necessary profiling or advertising functions are enabled according to the choices offered to the user and may be declined in the preference centre.
HAPI AUTO does not collect the precise location of your device unless a clearly identified feature is offered and you voluntarily enable it.
7.3 Automated decisions
HAPI AUTO does not currently make decisions producing legal or significant effects on you solely by automated processing. Tools may, however, assign a risk indicator to an order or temporarily block an unusual operation; a human review may be requested before a final cancellation.
8. Consent and withdrawal of consent
Your consent may be express or, where the law permits and the context is clear, implied. It must be manifest, free, informed and given for specific purposes. We request separate consent when a use is not necessary to fulfill the order, for example for certain advertising cookies or a newsletter.
You may withdraw your consent for optional uses by using the unsubscribe link, the preference centre or by writing to us. The withdrawal has no retroactive effect and may be limited when the information remains necessary to perform a contract, comply with the law, prevent fraud or defend a right. We will explain the relevant consequences before acting.
Unsubscribing from promotional messages does not prevent the sending of necessary transactional communications about an order, a delivery, a recall, a warranty, an account or a security incident.
9. With whom information may be shared
We limit access to the persons and organizations that need it for the purposes described. Depending on the service used, information may be shared with the following categories:
authorized personnel and customer service providers of HAPI AUTO;
payment and fraud prevention providers, in particular Stripe;
designer, host, infrastructure, database, backup and cybersecurity providers;
transactional and marketing email services, in particular Postmark or an equivalent service;
order fulfillment partners, suppliers and order management tools, in particular DSers when this integration is used;
carriers, logistics brokers and collection points;
analytics, search, merchandising and advertising tools, in particular Google services and, if enabled, Meta tools;
accounting, billing, professional advisory, collection, insurance and legal service providers;
marketing agencies and other authorized agents, only according to the necessary access;
tax authorities, courts, regulatory bodies, law enforcement or other persons when the law permits or requires;
an acquirer or partner in the context of a reorganization, merger, financing or sale of assets, subject to appropriate confidentiality measures.
We do not sell or rent our customers' personal information to data brokers or third parties for their independent use.
10. Processing outside Quebec or Canada
Some providers, suppliers or infrastructure may process or store information outside Quebec and, in some cases, outside Canada, in particular in the United States or in the country where an order fulfillment partner is located. The information may then be subject to the laws of that jurisdiction and be accessible to its authorities under local rules.
Before a disclosure outside Quebec when the law requires it, HAPI AUTO assesses the privacy-related factors, the sensitivity of the information, the purposes of the transfer, the contractual measures and the protections offered. We seek to limit the information transmitted to what is necessary and to impose security and confidentiality obligations on providers.
11. Retention, destruction and anonymization
We retain information only for the period reasonably necessary for the stated purposes, warranties, security, complaint handling and legal obligations. Once these purposes are fulfilled, the information is securely destroyed or irreversibly anonymized for serious and legitimate use, where the law permits.
| Type of record | Expected duration |
|---|---|
| Orders, invoices and tax documents | At least six years after the end of the last year to which they relate, or longer if a law, an audit, an objection or a dispute requires it. |
| Customer account | While the account is active. An inactive account may be deleted or anonymized after 24 months, except for information that must be retained separately. |
| Customer service, returns and warranties | Generally three years after the file is closed, or for the longer period necessary for a warranty, a recall, a claim or a dispute. |
| Marketing consents and unsubscriptions | For the duration of the consent and as long as it is reasonably necessary to demonstrate compliance with the person's choices. |
| Security and connection logs | Generally 12 to 24 months, except where an incident, an investigation or an obligation justifies a longer retention. |
| Abandoned cart and draft orders | Generally up to 30 days, unless a different period is clearly indicated or the person has created an account. |
| Cookies and analytics tools | According to the duration indicated in the cookie preference centre. Durations are reviewed periodically and non-essential cookies may be declined or withdrawn. |
These periods may be extended in the event of an investigation, security recall, dispute, tax objection, retention obligation or destruction hold. They may also be shortened when the purposes are fulfilled and no obligation justifies additional retention.
12. Security measures
HAPI AUTO applies reasonable physical, administrative and technological measures, proportionate to the sensitivity and volume of the information. They may include:
encrypted HTTPS connection and encryption provided by the service providers;
role-based access controls, strong passwords and enhanced authentication when available;
limiting access to the persons who need it and confidentiality commitments;
backups, updates, logging, monitoring and anti-fraud measures;
selection of recognized providers and contractual information-protection clauses;
training and internal procedures relating to incidents, access requests and secure destruction.
No electronic transmission or storage is absolutely risk-free. We therefore cannot guarantee perfect security, but we adapt our measures to reasonably foreseeable risks and fix vulnerabilities brought to our attention.
13. Privacy incidents
When a privacy incident is suspected or confirmed, HAPI AUTO takes reasonable measures to contain the incident, reduce the risk of harm, preserve useful evidence and prevent its recurrence. Each incident is recorded in an internal register.
When the analysis concludes that there is a risk of serious harm, HAPI AUTO promptly notifies the persons concerned and the Commission d'accès à l'information du Québec (Quebec's information access commission), as well as any other required authority. The notice describes, among other things, the nature of the information affected, the known circumstances, the measures taken and the means to reduce the risk.
14. Your rights
Subject to the exceptions provided by law, you may request:
confirmation that we hold information about you and access to that information;
the rectification of information that is inaccurate, incomplete or ambiguous;
the withdrawal of consent for an optional use;
a copy of certain computerized information collected from you in a structured, commonly used technological format, where the right to portability applies;
the deletion or destruction of information when its retention is no longer authorized or necessary, subject to legal obligations;
the cessation of dissemination or the de-indexing of information in the situations provided by law;
information about the categories of persons who have access to the information, its retention period and the contact details of the person in charge;
to file a complaint about our personal information protection practices.
A request must be made in writing to the person in charge of the protection of personal information and contain enough information to identify the person and the information sought. We may request reasonable proof of identity; do not send an identity document that was not requested. We respond promptly and, for an access or rectification request under Quebec law, no later than 30 days after its receipt, unless an authorized exception applies.
Access is normally free of charge. Reasonable fees for transcription, reproduction or transmission may be charged where the law permits, after informing you.
15. Complaints and remedies
To ask a question or file a complaint, write to contact@hapi-auto.ca with the subject "Privacy". Describe the situation, the relevant dates and the solution sought. The person in charge will review the request confidentially, may request clarification and will provide a reasoned response.
If you are not satisfied with our response, you may contact the Commission d'accès à l'information du Québec. Where federal law applies, you may also contact the Office of the Privacy Commissioner of Canada (Commissariat à la protection de la vie privée du Canada). Contacting HAPI AUTO first does not limit any remedy provided by law.
16. Children and minors
The site is intended for persons able to make a purchase or acting with the required authorization. We do not knowingly seek to collect personal information from children. A parent or holder of parental authority who believes that a minor has provided us with information without authorization may contact us so that we can assess the situation and take appropriate measures.
17. Links and external services
The site may contain links to a manufacturer, a carrier, a social network or another service that has its own privacy policy. When you leave the HAPI AUTO site, the third party's practices apply. We encourage you to read its policy before providing it with any information.
18. Changes to the policy
We may amend this policy to reflect changes in our services, our providers, our security measures or the law. The date of the last update is indicated at the beginning of the document. When a change is significant, we will post a reasonably visible notice and request new consent where the law requires it.
19. Contact us
| Person in charge | President of HAPI AUTO AXION INC. – Person in charge of the protection of personal information |
|---|---|
| contact@hapi-auto.ca (subject: Privacy) | |
| Phone | +1 418 559-6860 |
| Address | 302-3126, boulevard Neilson, Québec (Québec) G1W 2V4, Canada |
| Website | www.hapi-auto.ca |