1. Scope and purpose
This Privacy Policy explains how Les Entreprises LeSieur inc. collects, uses, discloses, stores, protects, and disposes of personal information in connection with PRIMAL websites, online stores and related services, related websites, accounts, services, transactions, and authorized integrations.
We collect only information reasonably necessary for identified, legitimate purposes and handle it in accordance with applicable privacy and data-protection laws.
2. Information we may collect
- identity and contact information, such as name, business name, address, telephone number, and email address
- account and authentication information
- transaction, order, invoice, payment-status, shipping, return, and customer-service information
- product, inventory, commercial, operational, and technical information where relevant
- device, browser, log, IP-address, cookie, security, and usage information
- communications, support requests, preferences, and consent records
- information provided for contests, surveys, promotions, product reviews, or other optional participation where offered
- recipient contact information when you ask us to send an order, gift, or communication to another person, where that feature is offered
- contact-lens prescription information, prescriber information, verification status, and records required to validate or document a prescription
- information voluntarily provided in connection with eye-care or product-safety questions; we do not use this service to diagnose medical conditions
3. Sources of information
Information may be collected directly from you, from an organization that authorizes your access or our processing, from transactions and communications with us, from authorized connected platforms, and from service providers acting on our behalf. We do not obtain access to a connected business account unless an authorized person has granted or enabled that access.
4. Purposes of use
- provide and administer products, services, accounts, transactions and support
- process orders, payments, shipping, returns, refunds, credits and related records
- authenticate users and maintain account security
- operate, monitor, troubleshoot, reconcile and improve authorized systems and integrations
- detect fraud, abuse, errors, duplicates, security incidents, or incomplete information
- meet accounting, audit, tax, regulatory, legal, record-keeping and compliance obligations
- communicate service, transactional, legal or security notices
- measure service performance and improve user experience
- send marketing communications where permitted and manage consent or unsubscribe choices
- administer contests, surveys, promotions, reviews, or other voluntary programs where offered and permitted
- deliver an order, gift, or requested communication to a recipient identified by you, where applicable
- validate or document prescription requirements where required by law before fulfilling contact-lens orders
- support product safety, adverse-event, complaint, recall and regulatory obligations where applicable
5. Consent and lawful processing
We obtain consent when required and may also process information where permitted or required by law, including to perform a contract, comply with legal obligations, protect against fraud or security threats, or establish, exercise or defend legal claims. You may withdraw consent where the law permits, subject to legal or contractual restrictions and reasonable notice.
6. Service providers and disclosures
We do not sell personal information. We may disclose information to service providers that support hosting, cloud infrastructure, secure data processing, e-commerce, payments, communications, analytics, fraud prevention, customer support, professional services, shipping, regulatory compliance, or other functions necessary to provide and protect our services. These providers are expected to use information only for authorized purposes and to apply appropriate confidentiality and security protections.
We may also disclose information when required by law, court order, regulatory process, to protect legal rights or safety, in connection with a corporate transaction, or with your direction or consent.
7. Cross-border processing
Some service providers or systems may process or store information outside Québec or Canada. When applicable, we assess the privacy and security implications of such transfers and use contractual, organizational, and technical safeguards appropriate to the sensitivity of the information and the applicable legal requirements. Information processed in another jurisdiction may be subject to lawful access by authorities in that jurisdiction.
8. Cookies, analytics and similar technologies
Our websites and services may use essential cookies and similar technologies for authentication, security, shopping-cart or session functions. Where permitted and subject to applicable consent requirements, we may also use analytics, performance, advertising, or preference technologies. Available consent tools and browser controls can be used to manage non-essential technologies, although disabling certain technologies may affect functionality.
9. Security safeguards
We use reasonable administrative, organizational, physical, and technical safeguards appropriate to the sensitivity and volume of information. Safeguards may include role-based access controls, multi-factor authentication, encryption, restricted administrative access, logging, monitoring, backups, data-quality controls, incident-response procedures, and contractual confidentiality requirements.
No system can be guaranteed to be completely secure. We regularly review safeguards and may change them as risks and technology evolve.
10. Retention and disposal
We retain information only as long as reasonably necessary for the purposes described in this Policy and to satisfy legal, accounting, audit, tax, regulatory, security, contractual, dispute-resolution, and record-keeping requirements. When information is no longer required, it is securely deleted, destroyed, or anonymized in accordance with applicable requirements and our retention practices.
Where U.S. contact-lens laws require retention of prescriptions, verification requests, automated-call recordings, prescriber responses, or related records, those records may be retained for at least the legally required period, including at least three years where the applicable Contact Lens Rule requires it.
11. Access, correction, deletion and other rights
Subject to applicable law, you may request access to personal information we hold about you, request correction of inaccurate information, ask questions about our processing, withdraw consent where permitted, or request deletion or de-indexing where a legal right applies. We may need to verify your identity and authority before processing a request, and some information may need to be retained where required or permitted by law.
12. Privacy incidents and complaints
We maintain a process for assessing and responding to confidentiality or security incidents. Where required by law, we will notify affected individuals and regulators. Questions or complaints about privacy practices may be sent to our Privacy Officer.
13. Children and minors
Our services are not directed to children who lack legal capacity to provide the required consent or enter into the applicable transaction. Where a minor may lawfully use a service, parental or guardian involvement may be required depending on the service and applicable law.
14. Changes to this Policy
We may update this Policy to reflect changes in law, technology, services, or business practices. Material changes will be identified by an updated effective date and, where appropriate, additional notice.
15. Contact
Privacy Officer / Legal Contact: Les Entreprises LeSieur inc.
Address: 485 De La Grande Allée, Verdun, Québec H3E 1Y4, Canada
Telephone: (514) 360-5248
Email: legal@lesieurinc.com
Customer support: hello@primalcontactlenses.com
