(Last updated: [December 5, 2023])


SOJA&CO. Inc. (hereinafter "SOJA&CO.") is committed to protecting your confidential information collected through online technological means. Please read this Privacy Policy ("Policy") to understand how your personal information will be processed when you shop on our website and use our application, specifically www.sojaco.ca (hereinafter the "Website").

If you have questions about data collection and processing, and if these questions persist after reading this policy, you can contact us directly at the following email address: info@sojaco.ca, and we will ensure to respond to your inquiries promptly.

We will notify you of any changes to this policy by posting the update on our Website's homepage and by sending you an email notice. If you continue to use the Website after a new version of this policy has been posted, you indicate your acceptance of the changes and are bound by them. It is your responsibility to regularly review this policy and any changes that may be made.


1. PRIVACY OFFICER
Questions, comments, and complaints regarding SOJA&CO.'s privacy policy and practices can be addressed to our Personal Information Protection Officer at the following coordinates:

Email: support@sojaco.ca
Address: 611 Guimond Boulevard, Longueuil, Quebec, J4G 1L9, Canada


2. INFORMATION COLLECTION
Your implicit consent to share personal information with us
SOJA&CO. does not collect identifiable information about an individual or entity unless that person consents to provide such information. When you provide us with personal information, you consent to SOJA&CO. collecting, using, disclosing, and otherwise managing this information as described in this policy. We collect your personal information when you:
i. Purchase products from the Website;
ii. Create an account on the Website;
iii. Subscribe to our newsletter;
iv. Complete a survey, participate in a contest, or any other promotion on Facebook - or Instagram;
v. Apply for a job on our Website;
vi. Contact us or otherwise submit information to SOJA&CO.;
vii. Browse our Website;
viii. Visit our business premises;
ix. Fill out forms on our Website;
x. Participate in our video recordings when you visit our physical stores and warehouses.

Personal information about you as a customer may include your name, address, email address, phone number, purchased items, payment method, video recordings by surveillance cameras in stores, and identification if we need to verify your identity at the request of Shopify in case of suspected fraud. If you apply for a job, it may include your date of birth, social insurance number, emergency phone number, cheque specimen, and any other personal information you may provide to SOJA&CO. Additionally, personal information may also include information collected automatically when you visit our Website. Indeed, we collect information from your browser such as your IP address, computer type and language, access times, pages viewed, and the content of any non-deleted cookies that your browser has accepted from us (see the "Cookies" section of the Terms & Conditions) and the address of the websites from which you were redirected to our Website (hereinafter collectively referred to as "Personal Information").

In the course of our activities, we collect Personal Information considered sensitive when strictly necessary for our operations. In such cases, we ensure to have your explicit consent to do so, in accordance with the law. We ensure to collect and process only the data and Personal Information that are strictly necessary for the purposes for which you provide them to us. If a secondary use of your Personal Information were to take place, we will inform you and obtain your consent first, as required by law.

Note that you remain in control of your personal information at all times, and you can refuse to allow us to collect personal information about you. To do so, simply indicate it to us or mention it to us when the information is collected on paper, verbally, or in the presence of a member of our staff. You can also inquire with our Customer Service about the information collected electronically and indicate your refusal to collect. In such cases, we may not be able to serve you.

Furthermore, it is essential to read this Privacy Policy in conjunction with our document regarding the Website's Terms of Use as well as the Sales Conditions on our website.


3. USE OF INFORMATION
SOJA&CO. uses Personal Information to process your orders and inquiries regarding products and services offered on the Website, as well as to follow up on these orders or inquiries.

SOJA&CO. also uses this Personal Information to transmit, according to your expressed choice, advertising material or additional information about its products, services, surveys, contests, promotions, and special offers for marketing purposes. However, you are free to choose not to receive advertising or commercial material at any time.

SOJA&CO. also uses Personal Information to conduct internal market research and performance research to improve customer service and the quality of products and services on the Website.

SOJA&CO. may also use this Personal Information to contact you regarding the use of the Website and the products and services you purchase.
SOJA&CO. uses Personal Information for the legitimate purposes described below:
- Enable you to subscribe to our newsletter;
- Identity verification;
- Operate, maintain, monitor, develop, improve, and offer all features of our website;
- Comply with our obligations under applicable laws and regulations;
- Respond to your questions and provide assistance as needed;
- Administer a contest, promotion, survey, or other feature of the website or our services;
- Ensure security in our stores and warehouses;
- Enable the function of applying for a job with SOJA&CO.

We will seek your consent before using or disclosing your Personal Information for purposes other than those stated herein. The Personal Information we collect and store remains encrypted and securely stored on the servers of Shopify Inc., headquartered at 126 York St., Ottawa, ON K1N 5T5, Canada. Rest assured that this Personal Information is disclosed only when we have a legal obligation to do so.


4. DISCLOSURE OF PERSONAL INFORMATION
We want you to understand with whom we share the information we collect about you, your activities on our Website, or when you use our services. Consequently, we do not share your Personal Information, except with your consent, which is expressly granted by your use of the Website as provided in paragraphs i) to iv) of Article 1 above and in the following situations:

i. SOJA&CO. staff: We may disclose your Personal Information to our employees who need this information in the course of their employment, all in accordance with our internal Personal Information protection policy.
ii. Authorized service providers: We may share your Information with service providers who perform operations on our behalf. Services provided by these providers include identity verification, order and credit card payment processing, delivery, customer service, marketing assistance, sales and activity analysis, support for features of our Website, and the conduct of contests, draws, and surveys, as well as support for other functions of our Website. These service providers may access your Personal Information solely for the purpose of fulfilling their functions.
iii. Business partners: We may share your Personal Information with our business partners to offer you products, services, promotions, contests, or draws through our Website or services. Our partners may use your Personal Information in accordance with their own privacy policy. To learn more about the privacy policy of a particular business partner, you must contact that partner directly.
iv. Other cases: By using our services and providing us with your Personal Information, you consent to SOJA&CO. disclosing this information in the following circumstances:
   a) In response to a legal requirement, including a subpoena, court order, request from a law enforcement agency, or another government agency, to exercise or enforce our rights recognized by law, and to defend against a claim based on law;
   b) As reasonably necessary to protect the rights, property, and safety of our company, users, and employees, including investigations or measures to prevent fraud and alleged illegal activities or any other wrongful act, the enforcement of the Terms of Use of the Website, or the enforcement of other agreements or policies, as well as the protection of SOJA&CO. and other visitors to the Website or users of the products and services offered by SOJA&CO.;
   c) As part of a significant corporate transaction, such as the sale of our company, divestiture, merger, sale of assets, or in the unlikely event of bankruptcy. Any third party to whom we disclose your Personal Information is authorized to use this information in accordance with this Privacy Policy only, unless otherwise indicated by you.

When we disclose your Personal Information to service providers, we ensure that the principles set out in this Policy are respected, and these service providers are required to use the Personal Information according to our instructions and only for the purposes for which it was provided. In addition, these service providers provide us with sufficient guarantees regarding the implementation of adequate protection measures that are proportional to the sensitivity of the Personal Information processed or disclosed. When our service providers no longer need your Personal Information, they must destroy this data appropriately.


5. THIRD-PARTY WEBSITES
On our Website, there are several places where you can click on links that allow you to access other websites not subject to the terms of this privacy policy. Third-party websites may request and collect information about you, including Personal Information, and in some cases, inform us about your activities on these websites. We recommend that you consult the privacy policy of each third-party website you visit by clicking on the "Privacy Policy" link generally located at the bottom of the web page you are viewing.


6. ACCESS TO YOUR INFORMATION
If you have a SOJA&CO. account, you have the option to view and update your Personal Information online by visiting the Customer Space page. You can request the deletion of the account by contacting our Personal Information Protection Officer at the coordinates provided in Article 1 of the Policy. In such cases, personal data related to that account will be deleted. However, data related to orders placed will not be deleted for accounting and statistical reasons. In such cases, the retained data will be anonymized so that it is no longer possible, in an irreversible way, to identify the customer.


7. OTHER RIGHTS
You can exercise the rights listed below by contacting our Personal Information Protection Officer at the coordinates provided in Article 1 of the Policy:
- Withdraw or modify your consent for SOJA&CO. to collect, use, disclose, or store your Personal Information at any time, subject to applicable legal and contractual restrictions;
- Request to stop disseminating your Personal Information and to de-index any link attached to your name that provides access to this information if such dissemination violates the law or a court order;
- File a complaint with our Personal Information Protection Officer if you are dissatisfied with how your information is collected, used, disclosed, or stored or if you want information about the protective measures applied to Personal Information; and
- Request access to all information held about you and your transactions and/or request correction of information about you if you have not been able to complete this action through your account.

To respond to your request, you may be asked to provide appropriate identification documentation or otherwise identify yourself.

If you are not satisfied with the responses obtained, you can always file a complaint with the Access to Information Commission, subject to the conditions provided by law.

We encourage all our customers to keep their account personal information up to date. Decisions regarding the various services we can offer to our customers may vary depending on the accuracy of this data. It is therefore essential to ensure that we have an accurate picture of your situation to make a decision based on the right information.


8. RETENTION POLICY
Subject to applicable laws, we retain your Personal Information only for the time necessary to achieve the purposes for which this information was collected, unless you consent to the use or processing of your Personal Information for another purpose. In addition, our retention periods may be amended in a timely manner due to legitimate interests (e.g., to ensure the security of Personal Information, to prevent abuse and violations, or to prosecute criminals).

Rest assured that when the purpose for which information was collected is accomplished, we proceed with the destruction or anonymization of this information, in accordance with applicable legislation.

If you close your SOJA&CO. account, we may retain for a period of three years certain information entered into your account for analytical purposes and for the integrity of accounting and fraud prevention, recovery of charges, enforcement of terms of use, and the taking of measures we deem necessary to protect the integrity of our Website or our users or any other measures permitted by law, until recovery or measures are completed and for a maximum of three years from the closure of the account. Furthermore, if some of your information has been provided with your consent to event organizers or third parties, the use and retention of your information will be subject to the policy of these third parties.


9. PROTECTION OF YOUR PERSONAL INFORMATION
We take the necessary security measures, including physical, electronic, and administrative organizational measures, to protect your Personal Information from unauthorized access and disclosure. For example, access to physical premises is restricted by access cards given to authorized personnel. We use an SSL protocol, and only our authorized employees can access Personal Information on systems, and they can only do so when access to this information is necessary for authorized administrative functions. We also use firewalls and monitor technological developments to implement any new measures developed to provide better protection for your Personal Information.

While we take reasonable security measures required by law, no security device is infallible. Users must always exercise caution in the processing and disclosure of their Personal Information, user codes, and passwords and should avoid sending their Personal Information via insecure email.


10. OTHER INFORMATION COLLECTED THROUGH OUR SITE
We use various technologies to gather information from your computer and details about your activities on our website.

Other Technologies: We employ standard internet technology, such as pixel tags, web beacons (also called cookies), and other similar technologies to track your usage of our website. In promotional emails and newsletters, we include web beacons to check if messages are opened and if you engage with them. A web beacon is a small file placed on a web page that enables a website to perform certain tasks, including counting users who visit the page or accessing cookies. We may also receive an anonymous identification number if you access our website through an advertisement displayed on a third-party site. The information we collect enables us to customize the services we offer to our website visitors, deliver targeted advertising, and assess the overall effectiveness of our online advertising or other activities.


11. INDIVIDUALS UNDER THE AGE OF 14
We do not knowingly collect or use personal information from individuals under the age of 14. If you are under 14, you should not provide us with your personal information without the consent of your parents or legal guardian. If you are a parent or legal guardian and learn that your child has provided us with personal information without consent, please contact us using the contact details provided in section 1 above to request the removal of the child's personal information from our systems.


12. USER-GENERATED CONTENT
Website users have the option, through their user accounts, to post comments and other information as they wish. We remind you that SOJA&CO. cannot be held responsible for the content of your statements or the consequences that may arise. We strongly advise against publishing any personal information about yourself on our website to ensure the protection of your personal data.