Privacy policy

1. Data controller

BestMobileCanada inc., a corporation incorporated in Quebec (Canada), whose head office is located in Quebec City, Canada, is responsible for processing your personal information within the meaning of the Act respecting the protection of personal information in the private sector (Quebec's Law 25 / Privacy Act) and the Personal Information Protection and Electronic Documents Act (PIPEDA, federal).

Our personal information protection officer can be reached at confidentialite@bestmobilecanada.ca.

2. Information we collect

We collect only the information necessary to provide our services:

• Identity and contact details: first name, last name, email address, phone number, shipping and billing postal address.
• Order data: products purchased, amounts, dates, payment method used (never the full card number).
• Account data: credentials, preferences, purchase history.
• Technical data: IP address, device and browser type, pages viewed, visit duration (for analytics and security purposes).
• Communications: emails exchanged with our customer service.

3. Purposes of collection

We use your personal information to:

• process your orders and organize shipping;
• manage your account and your purchase history;
• honor the 1-year warranty and process returns;
• send you transactional communications (invoices, package tracking);
• respond to your customer service requests;
• with your consent, send you marketing communications (newsletter, offers);
• improve our site, prevent fraud and secure our systems;
• comply with our Canadian legal and tax obligations.

4. Cookies and similar technologies

Our site uses cookies to operate the shopping cart, maintain your session, measure page performance and personalize certain recommendations. The types of cookies used are:

• Essential cookies: required for the cart, authentication and payment to work. They cannot be disabled.
• Analytics cookies: help us understand how you use the site (pages visited, time spent). Aggregated and anonymized data.
• Marketing cookies: used with your explicit consent to measure the effectiveness of our advertising campaigns.

You can manage your preferences at any time via the cookie banner or your browser settings.

5. Third parties and processors

We share certain data only with the providers necessary to deliver the service:

• Stripe Payments Canada Ltd. — secure card payment processing. Stripe is PCI-DSS Level 1 compliant. We never store full card numbers.
• Canada Post, Purolator, UPS Canada — package shipping (name, address, phone only).
• Resend / SendGrid — sending transactional emails and the newsletter.
• Cloudflare — hosting, security and attack protection.
• Google Analytics 4 — audience measurement (with IP anonymization).

All our processors are contractually bound to provide a level of data protection equivalent to that required by Law 25. We never sell your data to third parties.

6. Data retention

We retain your data for the following periods:

• Invoices and order data: 7 years (Canadian tax obligation).
• Account data: as long as the account is active, then 24 months after the last login.
• Warranty history: 1 year after the end of coverage (so 4 years maximum).
• Anonymized analytics data: 26 months.
• Customer service communications: 3 years after the last interaction.

7. Your rights

In accordance with Quebec's Law 25 and PIPEDA, you have the following rights over your personal information at all times:

• right of access to your data;
• right to rectify inaccurate data;
• right to deletion ("right to be forgotten"), subject to legal obligations;
• right to data portability (since September 22, 2024 in Quebec);
• right to withdraw your consent at any time;
• right to file a complaint with Quebec's Commission d'accès à l'information (cai.gouv.qc.ca) or the Office of the Privacy Commissioner of Canada (priv.gc.ca).

8. Security

All communications with our site are encrypted with TLS 1.3. Passwords are hashed using the bcrypt algorithm. Backups are encrypted at rest on AWS infrastructure (Canada Central region, Montreal). Access to customer data is limited to employees who strictly need it, and is logged.

9. Data hosting

Your personal information is hosted in Canada (AWS Canada Central, Montreal). Some processors (analytics, newsletter) may process data from the United States and the European Union. In those cases, standard contractual clauses are in place to guarantee an adequate level of protection.

10. Contact

To exercise your rights or ask a question about this policy, write to our personal information protection officer:

BestMobileCanada inc.
Attn: Personal Information Protection Officer
Quebec City, Canada
Email: confidentialite@bestmobilecanada.ca
Phone: 1 888 555-0199

We respond to any request within a maximum of 30 days, in accordance with Quebec's Law 25.

11. Changes

We may update this policy to reflect legal or operational changes. The last update date is shown at the top. In case of a significant change, we will notify you by email or by notice on the site.