Privacy Policy

Last updated: June 20, 2026

1. Introduction and Contact Information

Thank you for visiting our website. We take the protection of your personal information seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit chloeandisabelle.com (the "Website") and make purchases from us.

This policy is provided in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

Organization responsible for your personal information:

Driss Ecom Ltd. Website: chloeandisabelle.com Email: info@chloeandisabelle.com Mailing address: available on request

"Personal information" means any information that can be used to identify you as an individual. The organization responsible for your personal information (our "Privacy Officer") is the party that determines the purposes and means of processing your personal information, and can be reached at the contact details above.

This Website uses SSL/TLS encryption for security and to protect the transmission of personal information and other confidential content (such as orders or inquiries sent to us). You can recognize an encrypted connection by the "https://" prefix and the lock symbol in your browser bar.

2. Information We Collect When You Visit Our Website

When you use our Website for informational purposes only, meaning you do not register or otherwise provide us with information, we collect only the data your browser transmits to our server (server log files). When you access our Website, we collect the following data, which is technically necessary for us to display the Website to you:

• The web pages you visit
• The date and time of access
• The amount of data transferred in bytes
• The source or referring website from which you reached our pages
• The browser used
• The operating system used
• Your IP address (in anonymized form where applicable)

We process this data based on our legitimate business interest in improving the stability and functionality of our Website. This data is not shared or otherwise used, except that we reserve the right to review the server log files retroactively if there are concrete indications of unlawful use.

3. Cookies

To make visiting our Website attractive and to enable the use of certain functions, we use what are known as cookies on various pages. Cookies are small text files stored on your device. Some of the cookies we use are deleted at the end of the browser session, meaning after you close your browser (session cookies). Other cookies remain on your device and allow us or our partner companies to recognize your browser on your next visit (persistent cookies). When cookies are set, they collect and process certain user information such as browser and location data and IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

Some cookies serve to simplify the ordering process by storing settings (for example, remembering the contents of a virtual shopping cart for a later visit to the Website). Where individual cookies we implement also process personal information, the processing is carried out either to perform the contract or to protect our legitimate interest in the best possible functionality of the Website and a customer-friendly and effective design of your visit.

We may work with advertising partners who help us make our online offering more interesting for you. For this purpose, cookies from partner companies (third-party cookies) may also be stored on your device when you visit our Website. Where we work with the advertising partners named above, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case in the sections below.

Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually about their acceptance, or exclude the acceptance of cookies for certain cases or generally. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how to change your cookie settings. You can find these for the respective browsers at the following links:

• Google Chrome: https://support.google.com/chrome/answer/95647
• Mozilla Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
• Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge
• Safari: https://support.apple.com/en-ca/guide/safari/sfri11471/mac

Please note that if you do not accept cookies, the functionality of our Website may be limited.

4. Contacting Us

When you contact us (for example, via contact form or email), personal information is collected. In the case of a contact form, the data collected will be apparent from the relevant contact form. This data is stored and used exclusively for the purpose of responding to your inquiry and for the associated technical administration. We process this data based on our legitimate interest in responding to your inquiry. If your contact is aimed at concluding a contract, we also process the data on the basis of contract performance. Your data is deleted after your inquiry has been conclusively dealt with. This is the case when it can be inferred from the circumstances that the matter in question has been conclusively clarified, provided that there are no legal retention obligations to the contrary.

5. Customer Accounts and Contract Processing

We continue to collect and process personal information when you provide it to us for the performance of a contract or when opening a customer account. The data collected is apparent from the respective input forms. You may delete your customer account at any time by sending a message to the contact address listed above. We store and use the data you provide for contract processing. After full processing of the contract or deletion of your customer account, your data will be restricted with regard to tax and commercial retention periods and deleted after these periods expire, unless you have expressly consented to further use of your data or we reserve the right to further use the data as legally permitted, about which we inform you below.

6. Use of Your Data for Direct Marketing

6.1 Email Newsletter Signup

We use Klaviyo to manage our email marketing. If you sign up for our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing any further data is voluntary and is used to address you personally. We use the double opt-in procedure for sending the newsletter. This means that we will only send you an email newsletter once you have expressly confirmed that you consent to receiving the newsletter. We will then send you a confirmation email asking you to confirm by clicking a corresponding link that you wish to receive newsletters in the future.

By activating the confirmation link, you give us your consent to use your personal information for newsletter purposes. When you sign up for the newsletter, we store your IP address as registered by your internet service provider, as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later point in time. The data collected when you sign up for the newsletter is used exclusively for the purpose of marketing communications via the newsletter.

You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter, or by sending a corresponding message to the organization named above. After you unsubscribe, your email address will be promptly deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve a use of data beyond this that is legally permitted and about which we inform you in this policy.

6.2 Sending the Email Newsletter to Existing Customers

If you provided us with your email address when purchasing goods or services, we reserve the right to regularly send you email offers for goods or services similar to those you have already purchased from our range. We process this data based on our legitimate interest in personalized direct marketing. If you initially objected to the use of your email address for this purpose, we will not send you any email. You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by sending a message to the organization named above. You will only incur transmission costs at base rates for this. After receiving your objection, the use of your email address for advertising purposes will be stopped promptly.

7. Data Processing for Order Fulfillment

7.1 Shipping and Payment

The personal information we collect is passed on to the transport company commissioned with the delivery as part of contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution as part of payment processing, insofar as this is necessary for payment processing. Where payment service providers are used, we inform you explicitly about this below.

7.2 Use of Payment Service Providers

Shopify Payments

We use Shopify Payments to process payments. When you make a purchase, your payment data (such as card number, cardholder name, and billing address) is processed by Shopify Inc., 151 O'Connor Street, Ground floor, Ottawa, Ontario, Canada, K2P 2L8, in order to complete your transaction. Shopify processes this data in accordance with its own privacy practices. For more information, please see Shopify's privacy policy: https://www.shopify.com/legal/privacy

PayPal

If you pay via PayPal, credit card via PayPal, or other PayPal payment methods, we pass on your payment data to PayPal as part of payment processing. PayPal services in Canada are provided by PayPal, Inc. and affiliated entities. The transfer is carried out only insofar as it is necessary for payment processing.

PayPal reserves the right to carry out a credit check for certain payment methods. For this purpose, your payment data may be passed on to credit agencies on the basis of PayPal's legitimate interest in determining your ability to pay. PayPal uses the result of the credit check regarding the statistical probability of payment default to decide on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Where score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. Address data, among other factors, is included in the calculation of the score values.

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may remain entitled to process your personal information insofar as this is necessary for contractual payment processing. For further privacy information, including the credit agencies used, please see PayPal's privacy policy: https://www.paypal.com/ca/webapps/mpp/ua/privacy-full

8. Review Reminders

We use your email address to send you a one-time reminder to submit a review of your order for the review system we use, provided you have given us your express consent to do so during or after your order.

You can withdraw your consent at any time by sending a message to our Privacy Officer at the contact details above.

9. Social Media: Social Plugins

Our Website uses social media buttons for networks such as Facebook and Instagram (operated by Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA).

To increase the protection of your data when you visit our Website, these buttons are not embedded as unrestricted plugins, but only by means of an HTML link to the respective page. This type of integration ensures that when you call up a page of our Website containing such buttons, no connection is yet established with the servers of the social network. Only when you click the button does a new browser window open and call up the page of the respective network, where you can interact with the plugins there (where applicable, after entering your login data).

For the purpose and scope of data collection and the further processing and use of data by these networks, as well as your related rights and setting options for protecting your privacy, please refer to their privacy policies:

• Meta (Facebook and Instagram): https://www.facebook.com/policy.php

10. Web Analytics

Google Analytics 4

This Website uses Google Analytics 4, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses cookies and similar technologies that enable an analysis of your use of the Website. The information generated about your use of this Website is generally transferred to a Google server and stored there.

Google Analytics 4 anonymizes IP addresses by default, which excludes direct identifiability. We use Google Analytics on the basis of our legitimate interest in the statistical analysis of user behaviour for optimization and marketing purposes.

On our behalf, Google will use this information to evaluate your use of the Website, to compile reports on Website activity, and to provide us with further services related to Website and internet use.

You can prevent the storage of cookies by adjusting your browser software settings accordingly; however, please note that in this case you may not be able to use all functions of this Website to their full extent. You can also prevent the collection of the data generated by the cookie and related to your use of the Website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout

For more information on how Google handles your data, please see Google's privacy policy: https://policies.google.com/privacy

11. Retargeting and Remarketing

Meta Pixel (Facebook Custom Audiences)

This Website uses the Meta Pixel of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Meta"). Where you have given your express consent, this allows the behaviour of users to be tracked after they have seen or clicked on a Meta advertisement. This procedure serves to evaluate the effectiveness of Meta advertisements for statistical and market research purposes and can help to optimize future advertising measures.

The data collected is anonymous to us, meaning it does not provide us with information about the identity of users. However, the data is stored and processed by Meta so that a connection to the respective user profile is possible, and Meta can use the data for its own advertising purposes in accordance with the Meta Data Policy (https://www.facebook.com/about/privacy/). A cookie may also be stored on your device for these purposes. These processing operations are carried out exclusively where you have given your express consent.

To disable the use of cookies on your computer, you can set your internet browser so that no cookies can be stored on your computer in the future, or so that cookies already stored are deleted. Disabling all cookies may, however, mean that some functions on our pages can no longer be performed. You can also disable the use of cookies by third parties such as Meta on the Digital Advertising Alliance website: https://www.aboutads.info/choices/

Google Ads Remarketing

Our Website uses the functions of Google Ads Remarketing, with which we advertise this Website in Google search results and on third-party websites. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). For this purpose, Google sets a cookie in the browser of your device which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you visit. We process this data on the basis of our legitimate interest in the optimal marketing of our Website.

Further data processing only takes place if you have agreed with Google that your internet and app browsing history will be linked by Google with your Google account, and that information from your Google account will be used to personalize ads that you view on the web.

You can permanently disable the setting of cookies for advertising preferences by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/

For further information and the privacy provisions regarding advertising and Google, please see: https://policies.google.com/technologies/ads

12. Your Privacy Rights

Under PIPEDA and applicable provincial privacy legislation, you have the following rights regarding your personal information:

Right to access: You have the right to request access to the personal information we hold about you, the purposes for which it is processed, the categories of personal information processed, the recipients or categories of recipients to whom your data has been or will be disclosed, and information about the source of your data where it was not collected directly from you.

Right to correction: You have the right to request the prompt correction of inaccurate data concerning you and/or the completion of incomplete data we have stored.

Right to deletion: You have the right to request the deletion of your personal information, subject to applicable legal retention obligations and other lawful grounds for retention.

Right to withdraw consent: Where we process your personal information on the basis of your consent, you have the right to withdraw that consent at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. Withdrawal of consent may, in some cases, limit our ability to provide certain products or services to you.

Right to data portability: You have the right to receive the personal information you have provided to us in a structured, commonly used, and machine-readable format, where technically feasible.

Right to file a complaint: If you believe that the processing of your personal information does not comply with applicable privacy law, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada (https://www.priv.gc.ca) or with the relevant provincial privacy regulator. We encourage you to first contact our Privacy Officer at info@chloeandisabelle.com so we can address your concerns directly.

Right to Object

Where we process your personal information on the basis of our legitimate interest, you have the right to object to that processing at any time on grounds relating to your particular situation, with effect for the future.

If you exercise your right to object, we will stop processing the data concerned, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or where the processing serves to establish, exercise, or defend legal claims.

Where we process your personal information for direct marketing purposes, you have the right to object at any time to the processing of your personal information for such marketing. If you exercise this right, we will stop processing the data concerned for direct marketing purposes.

13. Retention of Personal Information

The duration for which personal information is stored is determined by the applicable legal retention period (for example, commercial and tax retention obligations). After the retention period expires, the corresponding data is routinely deleted, provided it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in continued storage.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. The current version is always available on our Website, with the "Last updated" date at the top indicating when it was last revised.