Privacy policy

This policy explains how [LEGAL COMPANY NAME] ("Station Santé", "we") collects, uses, shares and protects your personal information when you use the Station Santé mobile app (the "App"), our website and loyalty program. It follows Quebec's Act respecting the protection of personal information in the private sector and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

Person in charge of personal information

Information we collect

Category	Examples	Why
Account	First and last name, email address, phone number (optional), date of birth (optional)	Create and manage your account, identify you at the counter, birthday offer
Loyalty	Purchases linked to your account (date, location, amount), points, stamps, rewards and gift cards	Calculate and credit your points, apply your rewards
Preferences	Language, notification choices	Contact you in your language, respect your choices
Device	Push token, device model, OS and App version	Send notifications you've accepted, fix bugs
Diagnostics	Crash and error reports	Find and fix problems in the App

We do not collect payment card details in the App. We do not collect your precise location. We do not sell your personal information.

Consent

We collect your information with your consent, when you create your account or in the App settings. Promotional notifications and marketing emails stay off until you turn them on. You can withdraw consent at any time in the App or device settings, or by emailing us.

Sharing with third parties

We share information only with service providers that help us run the App, who are contractually required to protect it and use it only on our behalf:

• Loyalty platform and loyalty program data hosting: LoyalPointz
• Push notifications: Expo Push Notification Service, Apple Push Notification service and Firebase Cloud Messaging (Google)
• Crash reporting and diagnostics: Sentry
• Receiving email: Gmail (Google)
• Point of sale: Clover

Our locations see the information needed to honour your points and rewards at their store. We may also disclose information where required by law.

Storage outside Quebec

Some providers may store your information outside Quebec, including in the United States. Before any transfer, we assess whether the information will be adequately protected, as Quebec law requires.

Retention

We keep your information while your account is active. If you delete your account, or after [24] months of inactivity, we destroy or anonymize your information within 30 days, except what the law requires us to keep (for example, transaction records for tax purposes).

Your rights

• Access the information we hold about you and get a copy, including in a structured, commonly used technological format.
• Have inaccurate or incomplete information corrected.
• Withdraw consent or ask us to de-index or delete your information.
• Delete your account directly in the App: Profile → Delete account.

Contact the person in charge above. We reply within 30 days. If you're not satisfied, you can file a complaint with the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).

Security

Your information is encrypted in transit, passwords are stored hashed, and access is limited to people who need it. If a confidentiality incident poses a risk of serious harm, we will notify you and the Commission d'accès à l'information.

Children

The App is intended for people aged 14 and over. We do not knowingly collect information from children under 14 without a parent's or guardian's consent.

Website

This site uses no advertising cookies or tracking tools. Your language choice is stored only in your browser. Links to Uber Eats and Google Maps take you to third-party services governed by their own policies. Location pages show an embedded Google Maps map, and Google may set its own cookies. The site has no forms: emails you send us arrive in our Gmail (Google) inbox, and we use them only to reply to you.

Changes

We will post any changes on this page and notify you in the App if they are significant.