Privacy Policy

Last updated: November 2, 2026

The short version: we only collect what we need to ship your order and, if you ask for it, send you our newsletter. We don’t sell your data, we don’t use tracking or advertising cookies, and we delete what we no longer need.

Who is responsible

Vestiaire is a small online shop based in Montréal, Québec. The owner of Vestiaire is the person in charge of protecting personal information. For any question or request about your information, use our contact form and choose the topic Privacy request.

What we collect and why

• When you order: your name, email, phone number, shipping address and the items you ordered (including any name, number or patch to print). We use this only to prepare, ship and support your order.
• Payment: you pay by Interac e-Transfer from your own bank. We never see or store your card or bank account details. We only see the name and email attached to the transfer.
• Newsletter (optional): only your email address and the date you subscribed, and only if you sign up and confirm.
• Contact form: your name, email and message, to answer you.
• Account (optional): if you create one, your email, password (encrypted) and order history.

Who we share it with

Only what each one needs to do its job:

• Our supplier, who prepares and ships orders from outside Canada: your name, phone number, shipping address and the items ordered.
• Canada Post and other carriers, to deliver your package.
• Our web host, which runs this website and its email.

Because our supplier is located outside Québec, your shipping information is transferred outside Québec for that purpose only. We never sell or rent your information, and we never share it for advertising.

Cookies

We only use cookies that the site needs to work: your cart, checkout, login and basic settings. We don’t use analytics, advertising or tracking cookies. If that ever changes, we will ask for your consent first, and they will stay off until you say yes.

How long we keep it

• Completed orders: your personal details are automatically erased 3 months after the order. We keep only the amounts and items, as required for our accounting.
• Shipping photos of your package are deleted at the same time.
• Unpaid or cancelled orders: deleted after 1 month.
• Contact messages: deleted after 90 days.
• Newsletter: kept until you unsubscribe. Unsubscribing deletes your email right away. Sign-ups that are never confirmed are deleted after 7 days.
• Accounts: deleted after 12 months without activity, or anytime on request.

Your rights

You can ask to see the information we have about you, correct it, get a copy of it, or have it deleted. You can also withdraw your consent to the newsletter at any time with the unsubscribe link in every email. We answer requests within 30 days. If you’re not satisfied, you can file a complaint with the Commission d’accès à l’information du Québec.

Security

The site uses an encrypted connection (HTTPS) and access to orders is limited to the shop owner. If a privacy incident ever creates a risk of serious harm, we will notify you and the Commission d’accès à l’information.

Changes

If we change this policy, we will update the date at the top of this page.