1Introduction
Ludicycle is operated by Experiatech ("we", "us", or "our"), located at 360 Rue Saint-Jacques, Montreal, QC H2Y 1P5, Canada. We are committed to protecting your privacy and handling your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act respecting the protection of personal information in the private sector (Law 25).
This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our mobile application, website, and services (collectively, the "Platform"). By using our Platform, you consent to the practices described in this policy.
2Information We Collect
We collect different types of information depending on how you use our platform. Here's a breakdown of what we collect:
Account Information
When you create an account, we collect:
- Full name (first and last name)
- Email address
- Phone number (optional)
- Password (encrypted)
- Profile photo (optional)
Transaction Information
When you make purchases, we collect:
- Order history and details
- Payment information (processed securely by Stripe)
- Pickup codes and confirmation status
- Transaction timestamps
Location Information
With your permission, we collect:
- Approximate location to show nearby stores
- Address information for delivery preferences
Device Information
We automatically collect:
- Device type and operating system
- App version
- Unique device identifiers
- Language preferences
Store Owner Information
If you register as a store owner, we additionally collect:
- Business name and registration number
- Business address
- Banking information for payouts (processed by Stripe Connect)
- Business verification documents
3How We Use Your Information
We use your personal information for the following purposes:
- →Provide and maintain our Platform services
- →Process transactions and send related notifications
- →Send you order confirmations and pickup codes
- →Enable communication between customers and stores
- →Improve and personalize your experience
- →Send you marketing communications (with your consent)
- →Detect and prevent fraud or abuse
- →Comply with legal obligations
- →Analyze usage patterns to improve our services
4Legal Basis for Processing
We process your personal information based on:
- Your consent (e.g., for marketing communications)
- Performance of a contract (e.g., processing your orders)
- Legal obligations (e.g., tax reporting)
- Legitimate interests (e.g., fraud prevention, service improvement)
6Data Retention
We retain your personal information for as long as necessary to:
- Maintain your account and provide services
- Comply with legal obligations (e.g., tax records for 7 years)
- Resolve disputes and enforce agreements
- Improve our services through anonymized analytics
Account Deletion
7Your Privacy Rights
Under Canadian privacy laws (PIPEDA) and Quebec's Law 25, you have the right to:
- Access your personal information
- Correct inaccurate information
- Withdraw consent for data processing
- Request deletion of your data (right to be forgotten)
- Data portability (receive your data in a structured format)
- Object to certain processing activities
- File a complaint with the Privacy Commissioner of Canada
Quebec-Specific Rights (Law 25)
If you are a Quebec resident, you have additional rights including:
- →Right to be informed of automated decision-making
- →Right to cease dissemination of your information
- →Right to de-indexation from search engines
- →Enhanced consent requirements for sensitive information
Exercise Your Rights
8Children's Privacy
9Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption of data in transit (TLS/SSL) and at rest
- Secure password hashing
- Regular security assessments
- Access controls and authentication
- Secure cloud infrastructure (Microsoft Azure, Canada)
10International Data Transfers
Your information is primarily stored and processed in Canada. If we transfer data outside Canada, we ensure adequate protection through:
- Contractual agreements with data protection clauses
- Compliance with Canadian adequacy requirements
- Technical safeguards for data security
11Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Posting a notice on our Platform
- Sending an email to your registered address
- Updating the "Last updated" date at the top of this policy
Your continued use of our Platform after changes constitutes acceptance of the updated policy.
12Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:
Experiatech (Ludicycle)
Privacy Commissioners