Privacy policy
Draft — this page is awaiting review by the owner and legal counsel, and may change before the store opens.
Last updated: September 30, 2026
This page is a translation. If the French and English versions differ, the French version prevails.
Effective date: [DATE — to confirm at launch]
This policy explains, in plain language, what personal information Babazoo Republic collects on this site, why we collect it, who we share it with, how long we keep it and how to exercise your rights. It applies to our online store, to the orders placed on it and to the messages you send us.
Who we are and who to contact
Babazoo Republic is a Québec business. Address: 3565 Jarry Est, Suite 305, Montréal, QC H1Z 4K6, Canada.
The person in charge of the protection of personal information holds the title of Owner of the business.
For any question, request or complaint about your personal information, write to them through our Contact page, choosing the subject "Personal information / privacy request", by email at contact@babazoorepublic.com (subject: "Personal information") or by mail at the address above.
What we collect
When you place an order, you give us:
- your first name, last name and email address;
- your phone number (optional);
- your shipping address;
- what you ordered and your preferred language.
When you pay, you enter your card in the secure payment window of Moneris, our payment processor. Your full card number never passes through our servers, and we do not keep it. Moneris sends us the payment result and a few limited details. Of those, we keep only the card type, a masked number (the first six and last four digits), the cardholder's name, the authorization number, the transaction numbers and the result of the security checks. We do not keep your card's expiry date. We need these details for refunds and if a payment is disputed.
When you browse, our hosting provider records technical information in its logs (IP address, browser type, page requested, date and time) to run and protect the site. To limit abuse at checkout and on the contact form, we also keep a scrambled (hashed) version of your IP address for about one hour.
When you write to us, by email or with the form on our Contact page, we receive your name, your email address, your phone number if you choose to give it (it is optional), the subject you chose and the content of your message. We use them only to answer you. Messages from the form reach us by email through Resend, in the United States; they are not stored in the site's database, and they are kept in our mailbox like our other correspondence (see "How long we keep it").
There are no customer accounts and no newsletter on this site: you do not need to create anything to buy.
Why we use it
- To process your order and your payment.
- To prepare and ship your parcel, and to send you the order confirmation and the shipping notice.
- To calculate taxes based on the shipping province.
- To answer your questions and messages, and to handle returns, refunds and complaints.
- To prevent fraud and protect the site.
- To meet our legal obligations, including tax and accounting.
We do not use your information for advertising. We do no profiling, and no decision about you is made by fully automated means. We do not sell or rent your information.
Your name, email and shipping address are required: without them we cannot process your order. Your phone number is optional. To write to us, only your name and email are required.
Who can access it
Internally, only the people who need it to process orders, answer customers and keep the books have access, each with their own password-protected account.
We also use service providers that handle information on our behalf, only for the purposes described here:
| Provider | Role | Information | Where |
|---|---|---|---|
| Supabase | Site database | Orders and contact details | Canada (Montréal) |
| Vercel | Site hosting | Technical logs and data sent during checkout or when you send a message | Servers in Montréal; company based in the United States |
| Moneris | Card payments | Card data, name, email, phone, address, cart contents | Canada |
| Resend | Sending order emails and contact-form messages | Email, name, address, order contents; content of contact-form messages | United States |
| ClickShip | Shipping labels | Name, address, phone, email | Company based in Canada; may store or process information outside Canada |
| Carriers (e.g. Canada Post) | Delivering your parcel | Name, address, phone | Canada |
Our professional advisers (accountants, lawyers) may also access it when needed, under a duty of confidentiality. Finally, we disclose information when the law requires it, for example to a tax authority.
Information sent outside Québec
Your order record is kept in a database located in Canada, in Montréal. Some providers may, however, process information outside Québec, elsewhere in Canada or abroad, in particular in the United States (for example, to send emails and contact-form messages). Before any information is sent outside Québec, we assess the risks to your privacy and require by contract that it be adequately protected.
How long we keep it
- Paid orders (contact details, items, amounts, taxes, limited payment details): six years after the end of the financial year the order relates to, because tax laws require us to keep our records. After that, we remove your name, contact details, address and card details from the order; we keep only the accounting record (order number, date, items, amounts, taxes, province and transaction number).
- Orders started but not paid (you started the payment, but it was abandoned, declined or did not go through): deleted 90 days after the last activity on the order. If we are still checking with Moneris that no payment was made, the order is kept until that check is done.
- Emails exchanged with us and contact-form messages: two years after your request is resolved, then deleted. A message that documents an order, such as a refund, is kept as long as that order.
- Scrambled IP address (abuse prevention): about one hour.
- Hosting provider's technical logs: a few days, according to the provider's rules.
- What is stored in your browser: see the cookies section below.
How we protect it
We take reasonable measures suited to how sensitive the information is, including:
- every connection to the site is encrypted (HTTPS);
- payments are handled entirely by Moneris: we never see or keep your full card number;
- the database is not publicly accessible; only the site's server can reach it;
- access to the store's back office is limited to authorized staff with individual accounts, and every change there is logged.
No measure is perfect. If a confidentiality incident presents a risk of serious injury, we will notify you and the Commission d'accès à l'information, as the law requires. We keep a register of such incidents.
Your rights
At any time, you can:
- access the personal information we hold about you and get a copy;
- have corrected any information that is inaccurate, incomplete or ambiguous;
- withdraw your consent to a use of your information, subject to our legal obligations (for example, we must keep order records for tax purposes);
- ask us to stop disseminating information or to de-index a link to it, where the law allows (we do not publish any information about our customers);
- ask to receive the information you gave us in a structured, commonly used technological format;
- ask us to delete information we no longer need to keep.
To exercise these rights, use our Contact page and choose the subject "Personal information / privacy request", or write to contact@babazoorepublic.com. We may ask you to confirm your identity, for example with your order number and the email address you used. We answer in writing within 30 days. It is free; only reasonable fees for transcribing, copying or sending could apply, and we would tell you in advance.
Complaints. If you are not satisfied with our answer or with how we handle your information, please write first to the person in charge (see above). You can also file a complaint with the Commission d'accès à l'information du Québec: www.cai.gouv.qc.ca, 1 888 528-7741.
Cookies and similar technologies
A cookie is a small file a website saves in your browser. We also use browser storage ("localStorage" and "sessionStorage"), which works in a similar way. These stay on your device and are not used to follow you on other sites.
We use only what the site needs to work. No advertising, social media or audience-measurement cookies. Our fonts are served from our own servers, so no third party is told you visited. We use no technology that can identify you, locate you or build a profile of you. The contact form stores nothing in your browser.
| Name | Type | What it does | How long | Category |
|---|---|---|---|---|
babazoo.cart | Local storage | Keeps the contents of your cart | Until you empty the cart or clear your browser data | Necessary |
babazoo.locale | Local storage | Remembers the language you chose | Until you clear your browser data | Necessary |
babazoo.consent | Local storage | Remembers that you saw the cookie notice | Until you clear your browser data | Necessary |
babazoo.checkout | Session storage | Keeps the details you typed during checkout, so you can go back without retyping them | Until you close the tab | Necessary |
babazoo.payment | Session storage | Links the payment window to your order | Until you close the tab | Necessary |
bzr_admin | Cookie | Staff sign-in to the store's back office | 8 hours | Staff only |
sidebar_state | Cookie | Back-office screen layout | 7 days | Staff only |
babazoo.admin-theme | Local storage | Back-office light or dark theme | Until you clear your browser data | Staff only |
The last three rows only concern our staff when they sign in to the back office; they are never created for customers.
Payment. The payment window is provided by Moneris, which may use its own cookies there, in particular to secure the transaction and prevent fraud. Those are governed by Moneris's privacy policy.
Your choices. Because these are needed for the site to work, our cookie notice is there to inform you. You can delete or block them in your browser settings, but the cart and checkout may then stop working. If we ever add optional cookies (audience measurement or advertising), they will stay off until you accept them, and you will be able to change your mind at any time with the "Cookie preferences" link at the bottom of every page.
Minors
Our store is not aimed at children, and we do not knowingly collect information about anyone under 14. If you believe a child has sent us information, write to us and we will delete it.
Changes to this policy
We may update this policy, for example if we add a provider or a feature. The date of the last update is shown at the top of the page. If an important change affects how we use your information, we will announce it clearly on the site before it applies.