Privacy Policy

Last updated: August 18, 2026

At ISTEA, protecting your privacy and personal information is important.

This Privacy Policy transparently explains how ISTEA collects, uses, communicates, stores, and protects your personal information when you visit our website, make a purchase, communicate with us, or use our services.

Personal Information Collected

Depending on how you interact with ISTEA, we may collect the following information, among others:

your first and last name;
your email address;
your telephone number, when you provide it;
your billing and shipping addresses;
information related to your orders, purchases, returns, and exchanges;
information necessary for processing your payments;
your communications with our customer service;
your communication preferences and your subscription to our marketing communications;
certain technical data related to your use of the site, including your IP address, the type of device or browser used, and certain information related to your browsing;
any other information you voluntarily choose to share with us.

We strive to limit collection to information necessary for the purposes identified in this policy or otherwise indicated at the time of collection.

How information is collected

Your personal information may be collected:

directly from you when you place an order, fill out a form, contact us, or subscribe to our communications;
automatically when you use our site, particularly through cookies and similar technologies;
through service providers necessary for the operation of our online store and the provision of our services

Why we use your information

ISTEA may use your personal information, notably to:

process, prepare, and ship your orders;
process and administer payments;
communicate with you regarding an order or request;
provide customer service;
process returns, exchanges, and refunds;
ensure the operation and security of our site;
detect or prevent fraud and unauthorized activities;
improve our store, products, services, and customer experience;
send you marketing communications when you have consented to receive them;
comply with our legal, tax, accounting, and regulatory obligations;
exercise or defend our rights when necessary and permitted by law.

We will not use your personal information for other purposes inconsistent with those for which it was collected, except where permitted by law or with your consent when required.

Consent

Where required by law, ISTEA obtains your consent before collecting, using, or disclosing your personal information.

Your consent must be clear, free, and informed, and given for specific purposes.

You may withdraw your consent where the law permits you to do so. However, withdrawing your consent may limit our ability to offer you certain services when information is necessary for their provision.

Payments

Payments made on our store are processed by the payment service providers available at the time of your purchase.

ISTEA does not directly store your complete payment card information.

The information necessary to complete a transaction may be collected and processed by our payment service providers in accordance with their own privacy and security practices.

Shopify and other service providers

Our online store is operated using Shopify.

To operate our store and provide our services, we may share certain personal information with providers who act on our behalf or who participate in the provision of services, including providers of:

e-commerce and hosting;
payment processing;
delivery and shipping;
technological services;
analysis and performance measurement;
communications and marketing;
professional services when necessary.

We strive to limit the information disclosed to that necessary for the performance of the services concerned.

These providers may be located in Quebec, elsewhere in Canada, or abroad.

Processing of information outside Quebec

Some of our service providers may process or store personal information outside Quebec or Canada.

In these circumstances, the information may be subject to the laws of the jurisdiction in which it is processed or stored and may be accessible to competent authorities in accordance with those laws.

When required, ISTEA takes the measures provided by applicable legislation before disclosing personal information outside Quebec.

Cookies and similar technologies

Our site uses or may use cookies and other similar technologies necessary for its operation.

These technologies may, in particular, allow us to:

ensure the operation of the store;
remember certain preferences;
maintain your cart;
secure certain features;
understand how the site is used;
measure the performance of the site and our communications;
personalize certain experiences or communications, when you have consented.

When your consent is required, the technologies concerned are used in accordance with the choices you make through the privacy tools available on our site.

You can also manage certain cookies from your browser settings. However, disabling certain essential cookies may affect the functioning of some site features.

Marketing Communications

When you choose to subscribe to our communications, ISTEA may use your contact information to send you news regarding our collections, launches, events, or other brand-related communications.

You can withdraw your consent to receive these communications at any time by using the unsubscribe link provided for this purpose or by contacting us.

Withdrawing your consent to marketing communications does not affect communications necessary for processing or following up on your orders.

Retention and destruction of information

ISTEA retains personal information only for the period necessary to fulfill the purposes for which it was collected and to comply with applicable legal, tax, accounting, or regulatory obligations.

When the information is no longer necessary, it is securely destroyed or anonymized where permitted by law and where appropriate.

Protection and security

ISTEA takes reasonable security measures to protect personal information under its responsibility against loss, theft, unauthorized access, use, disclosure, or modification.

The nature of the measures used takes into account, in particular, the sensitivity, quantity, purpose, and medium of the information concerned.

Despite these measures, no electronic transmission or storage method can guarantee absolute security.

Privacy incidents

If an incident involving personal information occurs, ISTEA will take reasonable measures to reduce the risk of harm and prevent a similar incident from recurring.

When required by law, affected individuals and competent authorities will be notified of the incident.

Your Rights

Depending on the circumstances and applicable laws, you may notably request:

access to the personal information we hold about you;
rectification of inaccurate, incomplete, or ambiguous information;
information regarding how your information is collected, used, or disclosed;
withdrawal of your consent, where permitted by law;
cessation of dissemination of certain information or de-indexing when the conditions provided by law are met;
communication of certain computerized personal information in a structured and commonly used technological format when the right to portability provided by law applies;
to exercise any other right granted to you by applicable legislation.

To exercise any of these rights, please contact the person responsible for the protection of personal information at the contact details provided below.

We may be required to verify your identity before acting on your request.

Personal Information Protection Officer

The person responsible for the protection of personal information at ISTEA ensures compliance with applicable privacy practices and handles requests concerning personal information.

Personal Information Protection Officer
Founder — ISTEA
clientservices@istea.store
Montreal, Quebec, Canada

Any questions, access requests, rectification requests, or concerns regarding the protection of your personal information can be sent to this address.