Last updated: October 16, 2026
Mallain Lapin respects your privacy. This policy explains in plain language what personal information we collect, why, who we share it with and how to exercise your rights, in accordance with Quebec’s Act respecting the protection of personal information in the private sector (Law 25).
Person in charge of the protection of personal information
Manon Poulin
Mallain Lapin inc., 47 Chemin des Mélèzes, Weedon, QC J0B 3J0
info@mallainlapin.com · 819 452-3041
Information we collect
- Contact form: your name, email, phone number, and the subject and content of your message.
- Online orders: payment takes place on Square’s secure page, which collects your name, email, phone number, shipping address (for delivery by mail) and payment information. We receive the order details (name, contact information, items, amount, shipping address). We never have access to your full card number.
- Newsletter: your email address, only if you sign up yourself on Square’s sign-up page.
- Phone and email: the information you give us when you call or write to us.
We only collect the information needed for these purposes.
Why we use it
- to answer your questions;
- to prepare, bill and ship your order, or reach you about pickup at the farm;
- to meet our accounting and tax obligations;
- to send you our news and offers, only if you subscribed to the newsletter.
We never sell, rent or trade your information.
Consent and newsletter
By writing to us or placing an order, you consent to our use of your information for the purposes described above. Subscribing to the newsletter is optional and separate from ordering. You can unsubscribe at any time using the link in every email or by writing to info@mallainlapin.com.
Service providers, in Quebec and elsewhere
Only the Mallain Lapin staff who handle messages and orders have access to your information. To run the website and the shop, we rely on service providers whose servers may be located outside Quebec, including in the United States:
- Square: payment, order and customer management, newsletter (Square’s privacy policy);
- Web3Forms: forwards the contact form to our email inbox;
- Cloudflare: hosts the website and processes technical connection data (IP address, browser) to keep the site secure and running;
- the postal carrier: your name and address, for parcels shipped by mail.
Before entrusting information to these providers, we assessed that they offer adequate protection. They may only use it to provide their service.
Retention period
- Contact form messages: 6 months after the last exchange, then deleted.
- Orders and customer records (Square): 6 months after your last order, except the information needed for our tax and accounting obligations (invoices, amounts, taxes), which is kept as long as required by law. In Quebec, accounting records must be kept for 6 years after the last taxation year to which they relate. The information is then destroyed or anonymized.
- Newsletter: until you unsubscribe.
Cookies and tracking tools
This website uses no cookies, no audience measurement tool and no advertising pixel.
- Your cart is kept in your browser (local storage) so you do not lose it from one page to the next. It only contains the items you chose, is not sent to us before you order, and is erased with your browser data.
- The where to buy map displays OpenStreetMap images: your browser then connects to their servers, which receive your IP address.
- The payment and newsletter sign-up pages are hosted by Square, which may use its own cookies under its own policy.
Security
The website is served only over an encrypted connection (HTTPS). Payments are processed by Square, which is certified under the Payment Card Industry Data Security Standard (PCI DSS): your card information never passes through our website. Access to our Square account and email inbox is password-protected and limited to authorized staff.
Your rights
You may at any time ask to access the information we hold about you, obtain a copy, have it corrected or deleted, or withdraw your consent. Write to the person in charge at info@mallainlapin.com; we will reply within 30 days.
If you are not satisfied with our answer, you may file a complaint with the Commission d’accès à l’information du Québec.
Confidentiality incident
In the event of an incident presenting a risk of serious injury, we will notify you and the Commission d’accès à l’information as soon as possible, and take steps to limit its consequences.
Changes
We will update this policy if our practices change. The date of the last update appears at the top of the page.